timewarnercable.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:ee:c5:e5:29:31:b6:9c:9d:7b:df:da:21:b9:b6:47 was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
Organization unit: eComm Ordering
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ee:c5:e5:29:31:b6:9c:9d:7b:df:da:21:b9:b6:47
Serial Number (int): 10544376413515820359099866313832117831
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f3:82:44:a7:75:e2:d5:86:fb:bc:a3:3a:b0:d0:e3:b9:2a:f8:48:a9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): bd:8d:b1:7b:83:c8:e7:00:6d:48:47:c0:cd:2f:29:fa:ca:fd:6c:36
Fingerprint (sha256): 90:5b:9b:a3:0b:59:24:80:30:ce:2a:ad:85:60:90:8d:39:d5:ea:cd:60:b9:e8:13:e0:31:fa:cb:72:64:c3:71

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate timewarnercable.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for timewarnercable.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bc2.timewarnercable.com
business.timewarnercable.com
business.twc.com
buy.timewarnercable.com
channelpartners.timewarnercable.com
contentmanager.timewarnercable.com
dci.timewarnercable.com
order.timewarnercable.com
timewarnercable.com
timewarnercablebusinessclass.com
twc.com
twcbc.com
www.timewarnercable.com
www.timewarnercablebusinessclass.com
www.twc.com
www.twcbc.com
se-contentmanager.timewarnercable.com

Other certificates including the domain name timewarnercable.com

(limited to 100 certificates)
ihtools.twcable.com
sps.timewarnercable.com
sacs.timewarnercable.com
pkvco-baks-01-data.timewarnercable.com
test-video-services.bhn.timewarnercable.com
myservices.timewarnercable.com
relay.timewarnercable.com
callhistory.timewarnercable.com
secure01.stage.lithium.com
sacs.timewarnercable.com
registration.timewarnercable.com
forums.timewarnercable.com
careportals.aws-prod.timewarnercable.com
www.timewarnercable.com
purchase.timewarnercable.com
secure01.stage.lithium.com
secure01.stage.lithium.com
vpns-sys.timewarnercable.com
chartersolutionchannel.com
eg.timewarnercable.com
voicemanager-staging.timewarnercable.com
espanol.charter.com
slm.timewarnercable.com
timewarnercable.com
login-atgqa.timewarnercable.com
video-services-stage.bhn.timewarnercable.com
stores.timewarnercable.com
bitbucket.conops.timewarnercable.com
cst-delphi-client.timewarnercable.com
videoservices-texas.timewarnercable.com
login.timewarnercable.com
mdvr.timewarnercable.com
vpns-gen.timewarnercable.com
stage.intelligenthome.timewarnercable.com
wayfarer.timewarnercable.com
appinterface.timewarnercable.com
secure05.lithium.com
secure01.stage.lithium.com
espanol.charter.com
wayfarer.timewarnercable.com
purchase.timewarnercable.com
secure01.stage.lithium.com
edge-vod.spectrum.net
video.timewarnercable.com
espanol.charter.com
hipchat.conops.timewarnercable.com
oasc18.247realmedia.com
stg-ihtools.twcable.com
conops.timewarnercable.com
secure05.lithium.com
vpns-gen.timewarnercable.com
secure05.lithium.com
payments.timewarnercable.com
sso-hrndva.timewarnercable.com
carrierethernet.timewarnercable.com
espanol.timewarnercable.com
video-services-stage.bhn.timewarnercable.com
payments.timewarnercable.com
exclusives.timewarnercable.com
secure05.lithium.com
registration.timewarnercable.com
payments.timewarnercable.com
wayfarer.timewarnercable.com
wwwqa.timewarnercable.com
services.timewarnercable.com
oasc18.247realmedia.com
appinterface.timewarnercable.com
careportals.portals-dev.timewarnercable.com
secure05.lithium.com
secure01.stage.lithium.com
wayfarer.timewarnercable.com
api0002.conops.timewarnercable.com
slm.timewarnercable.com
spectrumtv.com
secure01.stage.lithium.com
oasc18.247realmedia.com
voicezonestg.twcable.com
secure01.stage.lithium.com
vpns-gen.timewarnercable.com
sso-cdptpa.timewarnercable.com
espanol.charter.com
stage.intelligenthome.timewarnercable.com
tdcs-origin.spectrum.net
wayfarer.timewarnercable.com
purchase.timewarnercable.com
relay.timewarnercable.com
careportals.aws-prod.timewarnercable.com
mrs.timewarnercable.com
secure01.stage.lithium.com
voicemanager.timewarnercable.com
tridentity-staging.timewarnercable.com
myservices-int.atgeng.timewarnercable.com
carrier.timewarnercable.com
mupro.timewarnercable.com
supportcenter.timewarnercable.com
order.timewarnercable.com
secure05.lithium.com
secure05.lithium.com
es-staging.timewarnercable.com
vpns.timewarnercable.com

Certificate

The complete raw certificate details for timewarnercable.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2IxTmcrM5TRMp21VQCt
suwF1enDvA01edN0E/4ZzjXhxaLnHrp26ubinqx0YEiLgZcv4cugjVibeJGuYtuv
2NpQtDC8J5EJJGdGhxa+1mq9+r4FgEqLnOrIQrbYRnk6mD3JvbI1Yrto05B+CieA
nTPVxJyqVPg9Tou+FWlBqSwXA0LOkVCTc8Ix0LSUx/wfzuRgYu5pNOHHSghJ6c6w
D34BAZvm24eQ2xMeCvIz8GfFvsVZ+bZe/NqskjLotzmHJ/H/c1VVJfEJlbd5vFV2
VGwyIoGq9ZQyLiBqPI/t1ZCqfxEDO7P2uW05A0mQS2M/SLRCG9zjRCQDrKwJIH3K
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10544376413515820359099866313832117831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eComm Ordering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'timewarnercable.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20625264286461780320960142211530706079259020461538129846557817519758856183804201963164253389963381653378341017526135306608463091016928337151494028698684075097516619197156766112931522324863175773907897576906708367838185705508475665965361267051642674190137008836725554811704959548684328309037633491899996782126650943950355522236854392111820747040307068594518184094952546555912596438109608726477065252769793801986367727068185269975654359005969466929605097665673930606009913003854540431697030653155760718861779238852031744997681988094467268094197945962472349675447037376238589284364056394897667335979231362928886798994127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f38244a775e2d586fbbca33ab0d0e3b92af848a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (432 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bc2.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.twc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channelpartners.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentmanager.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dci.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timewarnercablebusinessclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twcbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timewarnercablebusinessclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twcbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se-contentmanager.timewarnercable.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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