webmail-ext.sagemcom.com

- Sagemcom SAS -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 04:04:a3:d3:f7:a2:ac:ce:98:20:9d:ff:54:47:82:1d was issued on by DigiCert Inc.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sagemcom SAS

Organization: Sagemcom SAS
Organization unit: DSI
Locality: Rueil-Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:04:a3:d3:f7:a2:ac:ce:98:20:9d:ff:54:47:82:1d
Serial Number (int): 5341003997120948000859755743615091229
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b6:13:b8:8f:d9:c0:13:3c:15:9d:b1:8c:b9:0a:00:90:25:f6:da:e2
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 62:fc:6e:f9:22:fb:4d:eb:7c:14:30:58:30:72:55:fc:e5:14:ab:2b
Fingerprint (sha256): 8b:d9:c7:15:c0:54:5f:60:4f:26:71:4c:c7:37:67:a5:7e:9d:40:ef:c4:f2:82:f8:35:e1:4f:6e:94:2d:94:cd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g29.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g29.crl

Check the revocation status for certificate webmail-ext.sagemcom.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail-ext.sagemcom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail-ext.sagemcom.com
webmail-int.sagemcom.com
autodiscover.sagemcom.com
smtp.sagemcom.com
chevilly.sagemcom.com
rueil.sagemcom.com
sip.sagemcom.com
uc.sagemcom.com
webconf.sagemcom.com
av.sagemcom.com
meet.sagemcom.com
dialin.sagemcom.com
lyncdiscover.sagemcom.com
ucdr.sagemcom.com
webconfdr.sagemcom.com
avdr.sagemcom.com
federation.sagemcom.com
autodiscover.apogeefrance.fr
mailphone.sagemcom.com

Other certificates including the domain name sagemcom.com

(limited to 100 certificates)
keys.sagemcom.com
snc.sagemcom.com
mdm.sagemcom.com
transfer.sagemcom.com
shiva.sagemcom.com
webmail-ext.sagemcom.com
webmail-ext.sagemcom.com
snc.sagemcom.com
incident.sagemcom.com
webmail-ext.sagemcom.com
incident.sagemcom.com
cms-demo.sagemcom.com
neoftp.sagemcom.com
www.sagemcom.com
neoftp.sagemcom.com
snc.sagemcom.com
support.sagemcom.com
orion.sagemcom.com
*.sagemcom.com
rdfe2.sagemcom.com
www.sagemcom.com
pegase.sagemcom.com
beam.sagemcom.com
limesurvey.sagemcom.com
reach.sagemcom.com
securemail.sagemcom.com
store.sagemcom.com
share.sagemcom.com
otrs.m2m.sagemcom.com
shiva.sagemcom.com
snc.sagemcom.com
sagemcom.com
gsmr-support.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
pegase.sagemcom.com
pegase-partenaire.sagemcom.com
sts.sagemcom.com
incident.sagemcom.com
cas.sagemcom.com
snc.sagemcom.com
sharesc.sagemcom.com
reach.sagemcom.com
documents-sav-b2b.sagemcom.com
mdm.sagemcom.com
esm-support.sagemcom.com
secure.sagemcom.com
shiva.sagemcom.com
cas.sagemcom.com
andromede.sagemcom.com
incident.sagemcom.com
pegase-psi.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
ctac.sagemcom.com
m2m.sagemcom.com
pegase.sagemcom.com
sharesc.sagemcom.com
shiva.sagemcom.com
transfer.sagemcom.com
snc.sagemcom.com
neoftp.sagemcom.com
neoftp.sagemcom.com
ctac.sagemcom.com
orion.sagemcom.com
old.sagemcom.com
rdfe2.sagemcom.com
share.sagemcom.com
mgp.sagemcom.com
ctac.sagemcom.com
pegase.sagemcom.com
shiva.sagemcom.com
sharesc.sagemcom.com
pa.sagemcom.com
pegase.sagemcom.com
webmail-ext.sagemcom.com
smartvillage1.sagemcom.com
sagemcom.com
sagemcom.com
limesurvey.sagemcom.com
rdfe2.sagemcom.com
support-femto.sagemcom.com
gsmr-support.sagemcom.com
transfer.sagemcom.com
pegase-psi.sagemcom.com
oldportal.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
share.sagemcom.com
pegase.sagemcom.com
pa.sagemcom.com
webmail-ext.sagemcom.com
keys.sagemcom.com
andromede.sagemcom.com

Certificate

The complete raw certificate details for webmail-ext.sagemcom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgIQBASj0/eirM6YIJ3/VEeCHTANBgkqhkiG9w0BAQUFADBm
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBDQS0zMB4XDTEyMDgyOTAwMDAwMFoXDTE1MDkwMzEyMDAwMFowbzELMAkGA1UE
BhMCRlIxGDAWBgNVBAcTD1J1ZWlsLU1hbG1haXNvbjEVMBMGA1UEChMMU2FnZW1j
b20gU0FTMQwwCgYDVQQLEwNEU0kxITAfBgNVBAMTGHdlYm1haWwtZXh0LnNhZ2Vt
Y29tLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkQivOb6F55
VxN0HY0/7JHKBBQY6hA8ZeRXMvyQ+rOCyL6w7FfsKuc6QzssGHilfi0uwYKrlAnv
BpKQjXF0hXU0lqIjkU0UUGLelCgYZS/XjrcKEa4nkvKfPx4APcFUNv9iWmurIWZr
iqSg1WTSv9q8p97L4BG++HlsBFaN7jj17sJJCwJIcsU9BibpvCB42k8zF9arVcX7
EUPdsfqeERZiGvr9QK/0P1cv+bUtDUhpm3utTTVmFaRbwv2m5l5s3A8uPes92E6K
wMsi8GM5X2sqjZ9ojlLEsTEVQs/rFFiCXL2JxkRAEtJgQT/Er55jDndpbOVhc75T
nGP8ZanpWMsCAwEAAaOCA10wggNZMB8GA1UdIwQYMBaAFFDqc4nbKfsQj57lASDU
3nmZSIP3MB0GA1UdDgQWBBS2E7iP2cATPBWdsYy5CgCQJfba4jCCAbQGA1UdEQSC
AaswggGnghh3ZWJtYWlsLWV4dC5zYWdlbWNvbS5jb22CGHdlYm1haWwtaW50LnNh
Z2VtY29tLmNvbYIZYXV0b2Rpc2NvdmVyLnNhZ2VtY29tLmNvbYIRc210cC5zYWdl
bWNvbS5jb22CFWNoZXZpbGx5LnNhZ2VtY29tLmNvbYIScnVlaWwuc2FnZW1jb20u
Y29tghBzaXAuc2FnZW1jb20uY29tgg91Yy5zYWdlbWNvbS5jb22CFHdlYmNvbmYu
c2FnZW1jb20uY29tgg9hdi5zYWdlbWNvbS5jb22CEW1lZXQuc2FnZW1jb20uY29t
ghNkaWFsaW4uc2FnZW1jb20uY29tghlseW5jZGlzY292ZXIuc2FnZW1jb20uY29t
ghF1Y2RyLnNhZ2VtY29tLmNvbYIWd2ViY29uZmRyLnNhZ2VtY29tLmNvbYIRYXZk
ci5zYWdlbWNvbS5jb22CF2ZlZGVyYXRpb24uc2FnZW1jb20uY29tghxhdXRvZGlz
Y292ZXIuYXBvZ2VlZnJhbmNlLmZyghZtYWlscGhvbmUuc2FnZW1jb20uY29tMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYD
VR0fBFowWDAqoCigJoYkaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL2NhMy1nMjku
Y3JsMCqgKKAmhiRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vY2EzLWcyOS5jcmww
QgYDVR0gBDswOTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGG
GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBFBggrBgEFBQcwAoY5aHR0cDovL2Nh
Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUNBLTMuY3J0
MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEFBQADggEBAK8X/xMwx36j7+R8rKtA
tGP27JNIGgcXm+CGRcD87e/b+v5/vaYSFR+uV8o818AzaKZvDs+WH51XoVNeq3K/
+FkqiK+PrFAJS7PURr+AGRO75ek8j/U4ZB/bD5znVeHaDtrMZV1BuIbRLuFBdcYE
Z7sJQF4e5Org7KobsNSNSPbWwQjmP2t8C1kArp+WsJ7y35Uj0lRKVIKDaRtrKuQ+
Ihq+UoBWCqzyh231tOVIh9PAj2IDn4iCbSMixMzqD/eVJRA9krS7MrKtGKigiULg
Yrg75K/LlcTprZhu4fhO0z8KVYWOQH+4dBkie3TSaJbPZiXCXXPCW+kSw/Gtvtd7
Jb4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRCK85voXnlXE3QdjT/s
kcoEFBjqEDxl5Fcy/JD6s4LIvrDsV+wq5zpDOywYeKV+LS7BgquUCe8GkpCNcXSF
dTSWoiORTRRQYt6UKBhlL9eOtwoRrieS8p8/HgA9wVQ2/2Jaa6shZmuKpKDVZNK/
2ryn3svgEb74eWwEVo3uOPXuwkkLAkhyxT0GJum8IHjaTzMX1qtVxfsRQ92x+p4R
FmIa+v1Ar/Q/Vy/5tS0NSGmbe61NNWYVpFvC/abmXmzcDy496z3YTorAyyLwYzlf
ayqNn2iOUsSxMRVCz+sUWIJcvYnGREAS0mBBP8SvnmMOd2ls5WFzvlOcY/xlqelY
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5341003997120948000859755743615091229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil-Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sagemcom SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail-ext.sagemcom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21342431087959410973820857263522148350545232112004529719601677928854388262406436562238009906980515400626293155160653825858438413258528810543390377391237244460099654136497373175575319543133325803553198765787019030217103839814685314567924556408486319001029006566163677768270423755214745325111403172095985844419718956196846513006819088588449705339017975027091075620053401708026875091165723742119334362874932977053698289259908764851732220458500676498795232433629402479669742747379778524413422418031146706836888379026169533161809826657515242859990033665360236085818499502895509009094449197672468490819893526241483166406859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b613b88fd9c0133c159db18cb90a009025f6dae2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (427 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-ext.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-int.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevilly.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rueil.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconfdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federation.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.apogeefrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailphone.sagemcom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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