sip.oceana.co.za

- Oceana Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:b7:fb:3a:6c:f1:ec:1f:1b:01:da:69:0d:f2:1e:b9 was issued on by DigiCert Inc.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oceana Group

Organization: Oceana Group
Organization unit: IT
State / Province: Western Cape
Locality: Cape Town
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:b7:fb:3a:6c:f1:ec:1f:1b:01:da:69:0d:f2:1e:b9
Serial Number (int): 12918337800936905944280828789780520633
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:0e:07:cb:b1:dc:15:22:85:a2:f4:a2:5a:36:c5:ca:57:cd:5e:51
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3e:0f:19:7d:f0:be:60:35:6a:28:a9:c4:d2:86:c8:6d:60:c5:98:b7
Fingerprint (sha256): 94:be:c7:e5:dd:72:30:ca:3e:49:79:99:fb:3a:8d:c8:fb:e9:5a:6c:ee:e9:07:8c:cb:4e:c8:60:5a:73:82:49

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate sip.oceana.co.za

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.oceana.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.oceana.co.za
sip.ccslogistics.co.za
sip.comcold.com.na
sip.erongo.co.za
sip.etoshafish.com.na
sip.luckystar.co.za
lyncweb01.oceana.co.za
oos.oceana.co.za
meet.oceana.co.za
meet.ccslogistics.co.za
meet.luckystar.co.za
meet.erongo.co.za
meet.etoshafish.com.na
meet.comcold.com.na
dialin.oceana.co.za
lyncdiscover.oceana.co.za
lyncdiscover.ccslogistics.co.za
lyncdiscover.luckystar.co.za
lyncdiscover.erongo.co.za
lyncdiscover.etoshafish.com.na
lyncdiscover.comcold.com.na
lm.oceana.co.za

Other certificates including the domain name oceana.co.za

(limited to 100 certificates)
sip.oceana.co.za
ssl.oceana.co.za
help.celerity-uk.com
fsus-14.freshservice.com
fsus-14.freshservice.com
fsus-14.freshservice.com
*.oceana.co.za
fsus-14.freshservice.com
oceana.co.za
fsus-14.freshservice.com
oceana.co.za
fsus-14.freshservice.com
oceana.co.za
oceana.co.za
oceana.co.za
fsus-14.freshservice.com
oceana.co.za
webmail.oceana.co.za
fsus-14.freshservice.com
fsus-14.freshservice.com
oceana.co.za
fsus-14.freshservice.com
oceana.co.za
oceana.co.za
help.celerity-uk.com
lync.oceana.co.za
fsus-14.freshservice.com
fsus-14.freshservice.com
fsus-14.freshservice.com
oceana.co.za
oceana.co.za
ssl.oceana.co.za
fsus-14.freshservice.com
*.oceana.co.za
oceana.co.za
fsus-14.freshservice.com
oceana.co.za
oceana.co.za
fsus-14.freshservice.com
help.celerity-uk.com
ssl.oceana.co.za
webmail.oceana.co.za
fsus-14.freshservice.com
oceana.co.za
oceana.co.za
oceana.co.za
fsus-14.freshservice.com
*.oceana.co.za
fsus-14.freshservice.com
oceana.co.za
help.celerity-uk.com
fsus-14.freshservice.com
webmail.oceana.co.za
sip.oceana.co.za
fsus-14.freshservice.com
fsus-14.freshservice.com
oceana.co.za
help.celerity-uk.com
oceana.co.za
support.oceana.co.za
fsus-14.freshservice.com
oceana.co.za
fsus-14.freshservice.com
rdsweb.oceana.co.za
oceana.co.za
*.oceana.co.za
help.celerity-uk.com
fsus-14.freshservice.com
fsus-14.freshservice.com
help.celerity-uk.com
fsus-14.freshservice.com
ssl.oceana.co.za
fsus-14.freshservice.com
oceana.co.za
fsus-14.freshservice.com
help.celerity-uk.com
webmail.oceana.co.za
sip.oceana.co.za
oceana.co.za
oceana.co.za
oceana.co.za
ssl.oceana.co.za
oceana.co.za
oceana.co.za
fsus-14.freshservice.com
fsus-14.freshservice.com
fsus-14.freshservice.com
oceana.co.za
fsus-14.freshservice.com
oceana.co.za
*.oceana.co.za
fsus-14.freshservice.com

Certificate

The complete raw certificate details for sip.oceana.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGzCCBgOgAwIBAgIQCbf7Omzx7B8bAdppDfIeuTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTYwODEwMDAwMDAwWhcN
MTcwODE1MTIwMDAwWjB3MQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBD
YXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xFTATBgNVBAoTDE9jZWFuYSBHcm91cDEL
MAkGA1UECxMCSVQxGTAXBgNVBAMTEHNpcC5vY2VhbmEuY28uemEwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OJ8bBd6ReXpqapHLJFEKywBEicHF5PwP
SVAKceI0nPynXXUGiNYADggHJEP3E+EdrZXA4x9opbcXc2laL0fYOpoXNqGTt1IB
D0+Ql2A2yWKkEea7iQ2TfKaufVT0s3AvQBKnoOoyVNXtoverm/C9wNai6JBXgWv9
5eIzOGxVRZ5ZW80gyTavVmJ4KF+NofsTNDd2nKaf1QSXp8xZxRu2o9JyQ4WhFqsv
YQk+a4fjc9iB1i8VY7IOGLgsPhQA1Qn+ynDxLNtzPQEbOXcaotu8CAWCxXv3mgWT
xSYRGH69tUEvb11EqkuTMgGuZuUd8UU/MgmUHT7Nb06JvfcoY7sRAgMBAAGjggPL
MIIDxzAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU
eA4Hy7HcFSKFovSiWjbFylfNXlEwggINBgNVHREEggIEMIICAIIQc2lwLm9jZWFu
YS5jby56YYIWc2lwLmNjc2xvZ2lzdGljcy5jby56YYISc2lwLmNvbWNvbGQuY29t
Lm5hghBzaXAuZXJvbmdvLmNvLnphghVzaXAuZXRvc2hhZmlzaC5jb20ubmGCE3Np
cC5sdWNreXN0YXIuY28uemGCFmx5bmN3ZWIwMS5vY2VhbmEuY28uemGCEG9vcy5v
Y2VhbmEuY28uemGCEW1lZXQub2NlYW5hLmNvLnphghdtZWV0LmNjc2xvZ2lzdGlj
cy5jby56YYIUbWVldC5sdWNreXN0YXIuY28uemGCEW1lZXQuZXJvbmdvLmNvLnph
ghZtZWV0LmV0b3NoYWZpc2guY29tLm5hghNtZWV0LmNvbWNvbGQuY29tLm5hghNk
aWFsaW4ub2NlYW5hLmNvLnphghlseW5jZGlzY292ZXIub2NlYW5hLmNvLnphgh9s
eW5jZGlzY292ZXIuY2NzbG9naXN0aWNzLmNvLnphghxseW5jZGlzY292ZXIubHVj
a3lzdGFyLmNvLnphghlseW5jZGlzY292ZXIuZXJvbmdvLmNvLnphgh5seW5jZGlz
Y292ZXIuZXRvc2hhZmlzaC5jb20ubmGCG2x5bmNkaXNjb3Zlci5jb21jb2xkLmNv
bS5uYYIPbG0ub2NlYW5hLmNvLnphMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNS5jcmwwL6AtoCuGKWh0dHA6Ly9j
cmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzUuY3JsMEwGA1UdIARFMEMwNwYJ
YIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0
cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0
cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwG
A1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBALj0+zb39da1umBEANp7VgpD
rv04tcCF3HSWAR7x+4W/bPbIC/+SGdCrFzAcBbTPLHqBj8iSFW6N00B3mQKgGtJl
oM4NBb8XOkF77wAm1woZAKP+DrdKEeObiCW0pO7IzmaVVGEm4zupQMejrX7JCzl0
o2B0GBcTeMdwBgoxXRiJ96AN8rCDEkXXyDaDheWmPY7c0YfmzwH1Jqky3eZCvLZ9
o8lmCR9c3WHxtvxChUoN20A6if/wrjHIC8lnQMoWz7Hnt/fsuP7ZUuMAiFCpJSw+
CtJdkyCA/uCfzr+CgjZlg9QpF89v4rnwvp+Q7BL1KEpKFX3bootbV4MZ2tRRESE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTifGwXekXl6amqRyyRR
CssARInBxeT8D0lQCnHiNJz8p111BojWAA4IByRD9xPhHa2VwOMfaKW3F3NpWi9H
2DqaFzahk7dSAQ9PkJdgNslipBHmu4kNk3ymrn1U9LNwL0ASp6DqMlTV7aL3q5vw
vcDWouiQV4Fr/eXiMzhsVUWeWVvNIMk2r1ZieChfjaH7EzQ3dpymn9UEl6fMWcUb
tqPSckOFoRarL2EJPmuH43PYgdYvFWOyDhi4LD4UANUJ/spw8Szbcz0BGzl3GqLb
vAgFgsV795oFk8UmERh+vbVBL29dRKpLkzIBrmblHfFFPzIJlB0+zW9Oib33KGO7
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12918337800936905944280828789780520633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oceana Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip.oceana.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22877054304142028648049896108452938867157039543248767463986981896488564009188105515886479177228237642785746221797725262009873775977943784692275744746066032141549880494990630861458926865951117847812831418369398482884318104447102985147809533489852147885705475781217419309879937586488005969307554051828166697331452592022948754724617406255481809477540146920614942539597834490650184284292621618041135292052005438101314621560995248170556537690714159625695362509134714680601156022222914163672136204936783436112917862493685144545278825051257279841415575298638081813905670900678129061199569696276698182962099000560891883404049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							780e07cbb1dc152285a2f4a25a36c5ca57cd5e51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (516 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.oceana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ccslogistics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.comcold.com.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.erongo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.etoshafish.com.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.luckystar.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncweb01.oceana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.oceana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.oceana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ccslogistics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.luckystar.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.erongo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.etoshafish.com.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.comcold.com.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.oceana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.oceana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ccslogistics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.luckystar.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.erongo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.etoshafish.com.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.comcold.com.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.oceana.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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