join.test.itss.vic.gov.au

- Victorian WorkCover Authority -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:70:e1:3c:8a:43:8f:b2:80:88:70:9b:8f:11:8d:8c was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Victorian WorkCover Authority

Organization: Victorian WorkCover Authority
Organization unit: Information Services Division
State / Province: VIC
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:70:e1:3c:8a:43:8f:b2:80:88:70:9b:8f:11:8d:8c
Serial Number (int): 1915333582581997025453937958730173836
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 05:7d:38:03:e4:69:18:59:97:b2:df:47:5f:c9:a0:da:9a:47:4e:58
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6f:f1:67:f4:28:a5:52:83:73:b9:81:1a:d2:2c:bd:52:47:f3:6a:47
Fingerprint (sha256): 87:03:1f:05:99:e6:48:32:23:8e:b0:ef:82:32:9d:08:5d:db:8a:ad:8b:ca:80:9e:5a:8b:b8:aa:6a:cc:d8:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate join.test.itss.vic.gov.au

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for join.test.itss.vic.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

join.test.itss.vic.gov.au
dialin.test.itss.vic.gov.au
sfbwebext01.test.itss.vic.gov.au
lyncdiscover.test.worksafe.vic.gov.au
lyncdiscover.test.itss.vic.gov.au
lyncdiscover.test.medicalpanels.vic.gov.au
lyncdiscover.test.workhealth.vic.gov.au
lyncdiscover.test.workcover.vic.gov.au
lyncdiscover.test.tac.vic.gov.au
lyncdiscover.test.conciliation.vic.gov.au
lyncdiscover.test.vaea.vic.gov.au
lyncdiscover.test.workcoverassist.vic.gov.au
lyncdiscover.test.vwa.vic.gov.au
lyncdiscover.test.ohsreview.vic.gov.au
lyncdiscover.test.pief.com.au

Other certificates including the domain name itss.vic.gov.au

(limited to 100 certificates)
sip02.itss.vic.gov.au
adfs.itss.vic.gov.au
join.itss.vic.gov.au
remote.itss.vic.gov.au
nesp.itss.vic.gov.au
nidp.itss.vic.gov.au
adfs.itss.vic.gov.au
nidp.itss.vic.gov.au
sip.itss.vic.gov.au
join.itss.vic.gov.au
join.itss.vic.gov.au
nesp.itss.vic.gov.au
auth.itss.vic.gov.au
inetauth.itss.vic.gov.au
guestwifi.itss.vic.gov.au
inetauth.itss.vic.gov.au
traveler.itss.vic.gov.au
inetauth.itss.vic.gov.au
sip.test.itss.vic.gov.au
nidp.itss.vic.gov.au
itss.vic.gov.au
sip02.itss.vic.gov.au
join.itss.vic.gov.au
adfs.itss.vic.gov.au
traveler.itss.vic.gov.au
da.itss.vic.gov.au
da.itss.vic.gov.au
nidp.itss.vic.gov.au
inetauth.itss.vic.gov.au
nesp.itss.vic.gov.au
remote.itss.vic.gov.au
da.itss.vic.gov.au
nidp.itss.vic.gov.au
test.itss.vic.gov.au
join.test.itss.vic.gov.au
inetauth.itss.vic.gov.au
traveler.itss.vic.gov.au
join.test.itss.vic.gov.au
auth.itss.vic.gov.au
adfs.itss.vic.gov.au
adfs.itss.vic.gov.au
itss.vic.gov.au
sip.test.itss.vic.gov.au
nidp.itss.vic.gov.au
extidp.itss.vic.gov.au
adfs.itss.vic.gov.au
nidp.itss.vic.gov.au
join.test.itss.vic.gov.au
inetauth.itss.vic.gov.au
inetauth.itss.vic.gov.au
nidp.itss.vic.gov.au
join.test.itss.vic.gov.au
nesp.itss.vic.gov.au
nesp.itss.vic.gov.au
traveler.itss.vic.gov.au
traveler.itss.vic.gov.au
sip.itss.vic.gov.au
remote.itss.vic.gov.au
inetauth.itss.vic.gov.au
servicecentral.itss.vic.gov.au
sip.itss.vic.gov.au
join.itss.vic.gov.au
auth.itss.vic.gov.au
join.itss.vic.gov.au
nidp.itss.vic.gov.au
adfs.test.itss.vic.gov.au
traveler.itss.vic.gov.au
sip.itss.vic.gov.au
nesp.itss.vic.gov.au
inetauth.itss.vic.gov.au
nesp.itss.vic.gov.au
traveler.itss.vic.gov.au

Certificate

The complete raw certificate details for join.test.itss.vic.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHgjCCBmqgAwIBAgIQAXDhPIpDj7KAiHCbjxGNjDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMzAyMDAwMDAwWhcN
MTkwMzAzMTIwMDAwWjCBozELMAkGA1UEBhMCQVUxDDAKBgNVBAgTA1ZJQzESMBAG
A1UEBxMJTWVsYm91cm5lMSYwJAYDVQQKEx1WaWN0b3JpYW4gV29ya0NvdmVyIEF1
dGhvcml0eTEmMCQGA1UECxMdSW5mb3JtYXRpb24gU2VydmljZXMgRGl2aXNpb24x
IjAgBgNVBAMTGWpvaW4udGVzdC5pdHNzLnZpYy5nb3YuYXUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDP7xfwFvR0iu8ILhndL1yeoTTxY4nvANhQdl4i
SJ8EM5MlsRdXkUjlF+a07xXnKrd8p0fSdoNcP9ax2KqS5/PdGtzVcIiKbt9aSe0A
1wN7nr5i29hwrY4knTvft40cLbengwHN/lYm4zxJIgKUa9D+JuSGVOFjv/Efj1Xw
xVX0L3YE1K/ODW1hol1xB2e6UngpQHAWeCwFZLGFkLtLCUr2UOx5gCplU3rr7G5P
fwKkdiiNNuZS8ITgsOuY8LQx8e40mdm6LaVhU6l+H8F0y4A7opqF0W9co4HIS+ur
wEmDIlgYOjNLLQ1OWMSKs9DL2swMEW0x5QI7C6G6aFE1bai1AgMBAAGjggQFMIIE
ATAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUBX04
A+RpGFmXst9HX8mg2ppHTlgwggI1BgNVHREEggIsMIICKIIZam9pbi50ZXN0Lml0
c3MudmljLmdvdi5hdYIbZGlhbGluLnRlc3QuaXRzcy52aWMuZ292LmF1giBzZmJ3
ZWJleHQwMS50ZXN0Lml0c3MudmljLmdvdi5hdYIlbHluY2Rpc2NvdmVyLnRlc3Qu
d29ya3NhZmUudmljLmdvdi5hdYIhbHluY2Rpc2NvdmVyLnRlc3QuaXRzcy52aWMu
Z292LmF1gipseW5jZGlzY292ZXIudGVzdC5tZWRpY2FscGFuZWxzLnZpYy5nb3Yu
YXWCJ2x5bmNkaXNjb3Zlci50ZXN0LndvcmtoZWFsdGgudmljLmdvdi5hdYImbHlu
Y2Rpc2NvdmVyLnRlc3Qud29ya2NvdmVyLnZpYy5nb3YuYXWCIGx5bmNkaXNjb3Zl
ci50ZXN0LnRhYy52aWMuZ292LmF1gilseW5jZGlzY292ZXIudGVzdC5jb25jaWxp
YXRpb24udmljLmdvdi5hdYIhbHluY2Rpc2NvdmVyLnRlc3QudmFlYS52aWMuZ292
LmF1gixseW5jZGlzY292ZXIudGVzdC53b3JrY292ZXJhc3Npc3QudmljLmdvdi5h
dYIgbHluY2Rpc2NvdmVyLnRlc3QudndhLnZpYy5nb3YuYXWCJmx5bmNkaXNjb3Zl
ci50ZXN0Lm9oc3Jldmlldy52aWMuZ292LmF1gh1seW5jZGlzY292ZXIudGVzdC5w
aWVmLmNvbS5hdTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0
LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2Vy
dC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAq
MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeB
DAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp
Z2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQu
Y29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuznqZB8w9yrtI
nhqS+eauxnC03Hx9u+nV/FQVtLvIUwFbfLgzgxQ/k2eTj7mZHk7K7kL/+2vm+N1C
7efuWJQ5cvQCmknmLuigX74BdgBzDtPUWjZcOuxAoEsrTLD/XsS+DJI5DVeZGGdj
wsuGzmZ5bWxEyUuLAiYicQ3bgCOAuEfIpXXUm5FHyuGUoAazqzOpmqskHV0k3VQP
H6uwHKshx7Z9YOZQ4nNlBq1RA/P68yArVK/peOhcQfIpFr9LVBQ306DaeN68xIwo
n/hAWWuvjCq1XH3Hq/dwYLZ2grtbQ/9fQgDpsSDukj8oAcHU//UDX7GJMEj+6mjP
hOajkBeg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+8X8Bb0dIrvCC4Z3S9c
nqE08WOJ7wDYUHZeIkifBDOTJbEXV5FI5RfmtO8V5yq3fKdH0naDXD/Wsdiqkufz
3Rrc1XCIim7fWkntANcDe56+YtvYcK2OJJ0737eNHC23p4MBzf5WJuM8SSIClGvQ
/ibkhlThY7/xH49V8MVV9C92BNSvzg1tYaJdcQdnulJ4KUBwFngsBWSxhZC7SwlK
9lDseYAqZVN66+xuT38CpHYojTbmUvCE4LDrmPC0MfHuNJnZui2lYVOpfh/BdMuA
O6KahdFvXKOByEvrq8BJgyJYGDozSy0NTljEirPQy9rMDBFtMeUCOwuhumhRNW2o
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1915333582581997025453937958730173836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VIC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victorian WorkCover Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Services Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'join.test.itss.vic.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26249230530633515804504326387042873340000087078759123805727988864677941422619995515874062920268383628260431674586171330818349711258968670821108853614004917533083978188030272856768125187343284071137519693262157572064599764585338409405221694252302729001069700546935706488180612395063564255505562939003957221198608705527664977558227158489728080538917677320934592948267111193331398499306013769849372085274179781385264601404072003251699084195900219399333437447144245366213820064709442626201773174670314390620710298061813238583777677074479368159487993002066924371611884282321304735876437516885664450895803279461838891100341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							057d3803e469185997b2df475fc9a0da9a474e58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.test.itss.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.test.itss.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbwebext01.test.itss.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.worksafe.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.itss.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.medicalpanels.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.workhealth.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.workcover.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.tac.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.conciliation.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.vaea.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.workcoverassist.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.vwa.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.ohsreview.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.test.pief.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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