citrix.itpartner.no

- IT Partner Tromsø AS -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:0a:6c:c2:7c:1c:af:ef:34:51:f8:5f:f0:c7:a0:bb was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IT Partner Tromsø AS

Organization: IT Partner Tromsø AS
Organization unit: IT
State / Province: Tromsø
Locality: Tromsø
Country: NO

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0a:6c:c2:7c:1c:af:ef:34:51:f8:5f:f0:c7:a0:bb
Serial Number (int): 16004864826915882866290670534612459707
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1d:84:8b:c1:ad:51:a9:d3:91:87:7d:3c:9d:5e:3a:29:36:34:87:35
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e4:e5:18:b7:44:57:9c:18:21:c6:d5:f3:16:f7:df:80:28:37:ba:71
Fingerprint (sha256): 9f:02:e9:bc:dd:c7:bb:60:0b:33:24:3b:13:62:fa:65:9a:f0:28:1b:25:83:3a:0a:a7:f4:fd:6b:16:08:f7:42

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate citrix.itpartner.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.itpartner.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.itpartner.no

Other certificates including the domain name itpartner.no

(limited to 100 certificates)
asp-lync.itpartner.no
cw.itpartner.no
ressurs.itpartner.no
webmail.wpuitstaging.itpartner.no
cw.itpartner.no
www.landing.mobilenews.production.itpartner.no
staging-ikt-skip.torghatten.k2.itpartner.no
kvensk.wpuitstaging.itpartner.no
git.itpartner.no
review-use-sentry-jzpgnw-ikt-skip.torghatten.k2.itpartner.no
citrix.itpartner.no
national-portal-fe.production.ads1.itpartner.no
*.itpartner.no
*.itpartner.no
dua.uit.no
homepage.derigo.production.itpartner.no
web.ressurs.itpartner.no
arc.wpuitstaging.itpartner.no
sip.itpartner.no
review-ls-402-add-wop0gc.development.ads1.itpartner.no
*.itpartner.no
cms.mobilenews.no
*.itpartner.no
national-portal-fe.production.ads1.itpartner.no
homepage.derigo.production.itpartner.no
cms.mobilenews.no
kvensk.uit.no
www.blogg.wpuitprod.itpartner.no
sop-47-sentry-sample-rate.t0.itpartner.no
www.kvensk.wpuitstaging.itpartner.no
mobilenews.no
www.amgg.wpuitprod.itpartner.no
*.itpartner.no
cms.mobilenews.no
site.wpuitstaging.itpartner.no
www.amgg.wpuitprod.itpartner.no
www.result.wpuitprod.itpartner.no
www.landing.mobilenews.production.itpartner.no
www.klassisk-harmoni.wpuitstaging.itpartner.no
sip.ressurs.itpartner.no
login.itpartner.no
oa.itpartnerharstad.no
national-portal-fe.production.ads1.itpartner.no
cms.mobilenews.no
ressurs.itpartner.no
ressurs.itpartner.no
www.arcex.wpuitprod.itpartner.no
deliverist.arkiv-troms.production.itpartner.no
sip.ressurs.itpartner.no
wiki.k0.itpartner.no
cms.mobilenews.no
result.wpuitprod.itpartner.no
citrix.itpartner.no
staging-statistics-portal.visit-svalbard.k2.itpartner.no
sip.itpartner.no
security.itpartner.no
web.ressurs.itpartner.no
oa.itpartnerharstad.no
oa.itpartnerharstad.no
result.wpuitprod.itpartner.no
homepage.derigo.production.itpartner.no
national-portal-fe.production.ads1.itpartner.no
security.itpartner.no
www.kvensk.wpuitprod.itpartner.no
www.arcex.wpuitprod.itpartner.no
*.itpartner.no
www.samiskutdanning.no
sip.ressurs.itpartner.no
*.itpartner.no
ressurs.itpartner.no
www.jusshjelpa.wpuitprod.itpartner.no
sip.itpartner.no
sip.ressurs.itpartner.no
sip.ressurs.itpartner.no
muligheter-med-yrkesfag.review.32.hkdir.itpartner.no
web.ressurs.itpartner.no
spamfilter.itpartner.no
cms.mobilenews.no
kunde.itpartner.no
*.itpartner.no
sip.ressurs.itpartner.no
sip.itpartner.no

Certificate

The complete raw certificate details for citrix.itpartner.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIQDApswnwcr+80Ufhf8MeguzANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xNjA2MDcwMDAwMDBaFw0xOTA2MTIxMjAwMDBa
MHwxCzAJBgNVBAYTAk5PMRAwDgYDVQQIDAdUcm9tc8O4MRAwDgYDVQQHDAdUcm9t
c8O4MR4wHAYDVQQKDBVJVCBQYXJ0bmVyIFRyb21zw7ggQVMxCzAJBgNVBAsTAklU
MRwwGgYDVQQDExNjaXRyaXguaXRwYXJ0bmVyLm5vMIICIjANBgkqhkiG9w0BAQEF
AAOCAg8AMIICCgKCAgEAvoY/QZ0Tm4B4UpYFv9Pa/xxo6Jn2QFIm8ZFdsJtB/D4W
D5ENKA5cS7GhNv7IrJB8y2Cbv8eT/91VA8kzEepopqDJ71Qk3SfGKUby/taZna6O
rWcDPu25ZPQS9WU4xqOfgPXI1ZBpqWWOr0WVyVdREONWzIZ9CBpZKtzC0ILHT4by
FAIurvXE6obqQxOc55TxDWOGhidb+uV18NJgaY8JcBX0Utn22M8fhgz9jykP0Uzl
AkhXGxZgkxCv0Bj/J0Oys1HBkq1+Rz8S4h+xjV6msXT0XzM05D1Zhvi/f7liWpQ+
Ft80chGQT0EOq0t/hfM5TNecyfrJGAA6yLXJljqtN4TJNL3JEI6ol2CgqiYeYb6H
BKxKlki+syxlDuf2Lms9FtAjppUaULYUsFALYQdvtNwJS0eLD5YjzxQQUXTAOCIe
XL9vUnmDgKH73k7P0M0ezgRkrM+AGiNmZuk7x+fDPFYg43TgdX/ksBpr6EK21JOq
ZoM/DEhc5haala6PoAA2ZhCjQMNn7bAKPSvl9EC2ks3CAljs7t53dmvO2x3cpm4X
liYmsxuekGEXFVK+YAuNwweyhFXpX3WeQA5+21FZdTD/BFOVNhXOVLFyNpDS6Dmf
r+7qpxXVuO4rtrpNwfFQMjWSIgrldfxF7UBYqDSznPU/RpsjeR4DpoSjqNXo5zsC
AwEAAaOCAewwggHoMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0G
A1UdDgQWBBQdhIvBrVGp05GHfTydXjopNjSHNTAeBgNVHREEFzAVghNjaXRyaXgu
aXRwYXJ0bmVyLm5vMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNl
cnQuY29tL3NoYTItaGEtc2VydmVyLWc1LmNybDA0oDKgMIYuaHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc1LmNybDBMBgNVHSAERTBDMDcG
CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhho
dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNl
cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVy
Q0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAFj8VEU7aUj1
RHJ5UbOd696AgHFQ1uF/mYbXRE9Mjosq1oYiHdbK2JHrsuFaDCqX1x5UeJVTj/Kr
YJvslENOyD2n24P0WGxc9w0XG9XrwZMRI5pncVJLcQqMbPOxMBE3gp+LOXrc5mMQ
xGApSf5B+cUBTxS5cV1OgLrsSYQl2pvefKaA9wt/CKaLFf3seRJe4uiCoEsue8kN
qK50sBv1W3YmCYXvCDN5rcTO5I923yxsjhb9LaXvQoLqPbf8a6nb4iSK5N3aru83
a4NAkIvUmvGT6aB4J5VARstkpiBlX202qmkSVqlSNEggLWKCjex24KTloRsds6WC
Jb9HUjGYbmw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16004864826915882866290670534612459707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tromsø'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tromsø'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Partner Tromsø AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix.itpartner.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777271749347634847574027909460146123026695896600416593075600384896426807227823412537903079144361459156987177257900699632683593801321958284402962783812517988720149053427115445977340615030864696871516264669448905738041757752660560518930628000658801066892650708446205229443740231238206975539671535632682587256304767965836684585596192520003820620793853935142238793710117324196478804468914730879908721670650104625096805722968535832552046896090909371432359908937161173717935631988476603714361705591220578435280983456462588304075096493127272804611776989260634137078169354891527828738435424371829078336009163649748992744672793860910044357857241809289240674002240302881190868296354761248742779022927223693942633241169839826202043764459937771518757129124854698335654983731895259186507419582655666569864714640198679578259493277227534697124940756191246779294360069760422193370882904106848104342403853956905290596782898741588613113472108962363312376347402389067474087149716839233899474548313817527288701667804261152817544501681460497754365715411962054236855879428143261128788040026579619967359200264755765316290974311032812167724745790990582181169837395037705036172048364617477015897095538577542337961254965964624927115200330621905346030689904443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d848bc1ad51a9d391877d3c9d5e3a2936348735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.itpartner.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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