secures.scene7.com

- Adobe Systems Incorporated -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:ff:c9:25:ab:16:51:ae:fe:8d:65:18:6f:c2:32:bb was issued on by DigiCert Inc.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Adobe Systems Incorporated

Organization: Adobe Systems Incorporated
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:ff:c9:25:ab:16:51:ae:fe:8d:65:18:6f:c2:32:bb
Serial Number (int): 9303483422357142083476361157751747259
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fe:49:f7:fc:10:b7:2b:87:00:df:03:e3:04:6b:c6:a0:d2:25:72:fb
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): f7:d6:75:75:46:34:a9:38:da:11:76:ef:89:6d:e2:9f:f3:9b:22:aa
Fingerprint (sha256): 95:55:5a:3c:7a:33:27:98:1a:3b:8c:c7:41:1a:93:6c:01:2c:e8:c3:d2:23:a1:dc:38:cf:44:9c:1c:f9:bc:0b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate secures.scene7.com

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secures.scene7.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secures.scene7.com
asset1.marksandspencer.com
asset2.marksandspencer.com
assets-produit.referentiel.galec.net
assets-produit.referentiel.ppd.galec.net
assets.cox.com
assets.gs1us.org
assets.infineon.com
assets.onetrust.com
assets.parkerpen.com
assets.pidilite.com
cdn.thesting.com
cdn1.sportsmith.net
cdnv.llbean.com
dm.henkel-dam.com
documents.trex.com
dynamicassets.am.pictet.com
dynamicmedia.dow.com
gw-assets.assaabloy.com
images.acer.com
images.am.kohls.com
images.borek.de
images.carphonewarehouse.com
images.city-parfuemerie.com
images.coach.com
images.crocs.com
images.dymo.com
images.fashiontofigure.com
images.hugoboss.com
images.imm-muenze.at
images.jansport.com
images.katespade.com
images.kkeu.de
images.mdm.de
images.napapijri.com
images.nyandcompany.com
images.planet-sports.com
images.promotionalstore.com
images.selfridges.com
images.stuartweitzman.com
images.synopsys.com
images.thenorthface.com
images.zgallerie.com
imageserver.grainger.com
media.chainreactioncycles.com
media.cisco.com
media.eastman.com
media.interface.com
media.lifetime.life
media.manufactum.de
media.musiciansfriend.com
media.ochsnersport.ch
media.tractorsupply.com
media.vorwerk.com
pictures.raja.fr
s7.bluegreenvacations.com
s7.jcrew.com
s7.madewell.com
s7.sears.com

Other certificates including the domain name scene7.com

(limited to 100 certificates)
secure3.scene7.com
cdn08.cdnsvc.com
cdn08.cdnsvc.com
secure4s.scene7.com
secure5s.scene7.com
cdn08.cdnsvc.com
cdn05.cdnsvc.com
securecn.scene7.com
cdn08.cdnsvc.com
securecn.scene7.com
cdn07.cdnsvc.com
securecn.scene7.com
secure6.scene7.com
cdn10.cdnsvc.com
*.scene7.com
cdn10.cdnsvc.com
cdn06.cdnsvc.com
*.scene7.com
securescn.scene7.com
cdn10.cdnsvc.com
securecn.scene7.com
cdn06.cdnsvc.com
cdn08.cdnsvc.com
securecn.scene7.com
secure4.scene7.com
secure7.scene7.com
secure7.scene7.com
secure5.scene7.com
secure5.scene7.com
cdn10.cdnsvc.com
*.scene7.com
secure5.scene7.com
cdn10.cdnsvc.com
secure.scene7.com
secure5.scene7.com
secure5s.scene7.com
secure5s.scene7.com
cdn08.cdnsvc.com
secure5s.scene7.com
securecn.scene7.com
securecn.scene7.com
*.scene7.com
secure4.scene7.com
secure2s.scene7.com
cdn08.cdnsvc.com
secure2s.scene7.com
securecn.scene7.com
cdn10.cdnsvc.com
cdn07.cdnsvc.com
cdn06.cdnsvc.com
www1.scene7.com
secure.scene7.com
cdn08.cdnsvc.com
*.scene7.com
securecn.scene7.com
secure.scene7.com
secures.scene7.com
cdn08.cdnsvc.com
cdn08.cdnsvc.com
cdn08.cdnsvc.com
securecn.scene7.com
cdn04.ccedge.net
cdn08.cdnsvc.com
securescn.scene7.com
securecn.scene7.com
cdn01.ccedge.net
*.scene7.com
cdn10.cdnsvc.com
cdn05.cdnsvc.com
cdn05.cdnsvc.com
cdn05.cdnsvc.com
secure2s.scene7.com
s7sps3apissl-staging.scene7.com
securecn.scene7.com
securecn.scene7.com
secure3s.scene7.com
cdn08.cdnsvc.com
secure6s.scene7.com
secure.scene7.com
securecn.scene7.com
securescn.scene7.com
cdn05.cdnsvc.com
securecn.scene7.com
cdn04.ccedge.net
cdn04.ccedge.net
secure2.scene7.com
securecn.scene7.com
*.scene7.com
cdn08.cdnsvc.com
*.scene7.com
cdn08.cdnsvc.com
secure7s.scene7.com
securescn.scene7.com
secure.scene7.com
cdn08.cdnsvc.com
cdn10.cdnsvc.com
cdn05.cdnsvc.com
cdn06.cdnsvc.com
secure6.scene7.com
cdn07.cdnsvc.com

Certificate

The complete raw certificate details for secures.scene7.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBAQIzyBy4FMurRlG6SQZrVJZFSG3
Utio5KY/qZbUrzcHw1TLdsagnGxvynm6Hjejoh/vkR6se/c+u1xB27Ik3A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9303483422357142083476361157751747259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Systems Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secures.scene7.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004040408cf2072e0532ead1946e92419ad52591521b752d8a8e4a63fa996d4af3707c354cb76c6a09c6c6fca79ba1e37a3a21fef911eac7bf73ebb5c41dbb224dc
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe49f7fc10b72b8700df03e3046bc6a0d22572fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secures.scene7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset1.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset2.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-produit.referentiel.galec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-produit.referentiel.ppd.galec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.gs1us.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.infineon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.onetrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.parkerpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.pidilite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.sportsmith.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnv.llbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dm.henkel-dam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.trex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicassets.am.pictet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicmedia.dow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-assets.assaabloy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.acer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.am.kohls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.borek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.carphonewarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.city-parfuemerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.crocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.dymo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.fashiontofigure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.hugoboss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.imm-muenze.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.jansport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.katespade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.kkeu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.mdm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.napapijri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.nyandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.planet-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.promotionalstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.selfridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stuartweitzman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.synopsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.thenorthface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.zgallerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageserver.grainger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.chainreactioncycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.cisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.eastman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.interface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lifetime.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.manufactum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.musiciansfriend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.ochsnersport.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.tractorsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vorwerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictures.raja.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's7.bluegreenvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's7.jcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's7.madewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's7.sears.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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