mygas-qa3.airliquide.fr

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:a0:cd:1d:e5:b1:1f:1f:5e:d0:bf:cf:8f:06:d5:6a was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
State / Province: Île-de-France
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a0:cd:1d:e5:b1:1f:1f:5e:d0:bf:cf:8f:06:d5:6a
Serial Number (int): 20773347696810966111426701594963924330
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:07:92:60:dc:20:a6:93:91:34:90:a2:a1:f6:c3:97:b9:67:b9:8c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fa:d0:1d:c7:e0:81:7a:3e:91:06:0c:f3:d4:7c:ec:01:45:f6:82:28
Fingerprint (sha256): 93:fd:18:6f:2f:7e:aa:b0:c0:60:36:36:41:9b:b2:3c:a5:c2:ec:38:28:25:15:59:0d:92:a3:26:e3:3c:49:1e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate mygas-qa3.airliquide.fr

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mygas-qa3.airliquide.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mygas-qa3.airliquide.fr
mygas-qa3.airliquide.dk
mygas-qa3.airliquide.no
mygas-qa3.airliquide.se
mygas-qa3.airliquide.fi
mygas-qa3.airliquide.de
mygas-qa3.airliquide.be
mygas-qa3.airliquide.nl
mygas-qa3.airliquide.lu
mygas-qa3.airliquide.ch
mygas-qa3.airliquide.it
mygas-qa3.airliquide.pt
mygas-qa3.airliquide.es

Other certificates including the domain name airliquide.fr

(limited to 100 certificates)
www.airliquide.com
alpin.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
mygas.airliquide.fr
mygas-qa2.airliquide.fr
www.airliquide.com
sante.airliquide.fr
www.airliquide.com
distributor.airliquide.com
mygas-qa1.airliquide.fr
mixtureguide.airliquide.fr
kergis.airliquide.fr
myinstallations.airliquide.fr
www.macommandegaz.airliquide.fr
pleingaz.airliquide.fr
mygas-qa3.airliquide.fr
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas-pprd.airliquide.fr
kergis.airliquide.fr
sante-pprd.airliquide.fr
myinstallations.airliquide.fr
mygas-qa2.airliquide.fr
pleingaz.airliquide.fr
distributor.airliquide.com
sante.airliquide.fr
mygas-pprd.airliquide.fr
sante-pprd.airliquide.fr
mygas-pprd.airliquide.fr
mygas.airliquide.fr
kergis.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa1.airliquide.fr
try.airliquide.fr
industrie.airliquide.fr
myinstallations-pprd.airliquide.fr
www.airliquide.com
www.airliquide.com
kergis.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
alpin.airliquide.fr
mygas-pprd.airliquide.fr
www.airliquide.com
www.airliquide.com
www.airliquide.com
sante-pprd.airliquide.fr
myinstallations-pprd.airliquide.fr
sante-pprd.airliquide.fr
industrie.airliquide.fr
pleingaz-pprd.airliquide.fr
mygas.airliquide.fr
mygas.airliquide.fr
mixtureguide.airliquide.fr
sante-pprd.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
alpin.airliquide.fr
industrie.airliquide.fr
sante-pprd.airliquide.fr
mygas.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
pleingaz.airliquide.fr
mygas-qa4.airliquide.fr
www.airliquide.com
alpin.airliquide.fr
myinstallations-pprd.airliquide.fr
www.macommandegaz.airliquide.fr
distributor.airliquide.com
mygas-pprd.airliquide.fr
sante-pprd.airliquide.fr
mixtureguide.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
mygas-pprd.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
pleingaz.airliquide.fr
www.macommandegaz.airliquide.fr
try.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
www.airliquide.com
mediatheque-alfi.airliquide.fr
mygas-qa4.airliquide.fr
alpin.airliquide.fr
sante-pprd.airliquide.fr
mygas.airliquide.fr
myinstallations.airliquide.fr

Certificate

The complete raw certificate details for mygas-qa3.airliquide.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vdwvv8kH/DhDB6G+voc
CI59OqjTNfl1ckNMI5oRkoXsgY/+xuI7M1upYG8Anu6V4PkV+q4DBDcn1YJRn+PL
C9lZJQOBOwjbF16k8GglxZgUXudMhu6dWXFFe9sUW3rtxBwh5CA5S7HYt6B0cwRR
I0O3BLsF2y9MAkeNoqxQm7Dh218s7I5wn36xAKeBozCy1Ldaa6qWoMV+bzzpLYLF
7OFgKAWoJDpIgV/ogeknbZDcgNEkxV2lBRo30YkSTqUqwP88Ib2fkLi8DdBXhyp8
6gfbKhOxn1UbaU/DdJcfDJYdKaO5gZik2vwvWmAMlSJvN5x0HDY9WT3XpBppRD2t
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20773347696810966111426701594963924330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mygas-qa3.airliquide.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26632061458853236218061666421699077720701884044858323522777443157262721871279274503113367359300163633010823090143329092116260796165940826388340194011943480315464147101392540078673557307474187323462969165910277784193552092729804433228676616568883991410748761479861194444974886587966253028780970453062936407992420317754737447591676099102466432438704832009471836432580722005202834231234910348796791531753625157114356025773062661009251958698609482744219835260259199511230028801524893217902529573285311355199691730495438202360103487189351475601239799864108694163811583274734573393192062412787215914747517107312941273558381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b079260dc20a693913490a2a1f6c397b967b98c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa3.airliquide.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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