click.e.beaconhealthsystem.org

- Beacon Health System, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:00:9a:86:d6:26:a3:b6:f6:fb:36:03:78:2e:fd:2c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Beacon Health System, Inc.

Organization: Beacon Health System, Inc.
Organization unit: Information Systems
State / Province: Indiana
Locality: South Bend
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:00:9a:86:d6:26:a3:b6:f6:fb:36:03:78:2e:fd:2c
Serial Number (int): 7978502148638738909843575297333460268
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ef:7f:17:3b:e5:86:2b:50:1c:01:b0:86:5b:d3:f7:8c:fa:3c:be:ed
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 20:05:38:8a:ff:24:52:1e:89:60:08:ce:bf:87:f4:2c:82:ba:8e:6a
Fingerprint (sha256): 9f:bf:4c:a3:14:c7:c7:03:11:cd:a2:79:18:5d:4d:a6:ce:f1:6d:53:cb:e6:a9:74:5d:c0:70:99:9c:c5:34:c8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate click.e.beaconhealthsystem.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for click.e.beaconhealthsystem.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

click.e.beaconhealthsystem.org

Other certificates including the domain name beaconhealthsystem.org

(limited to 100 certificates)
api.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
beaconhealthsystem.org
akamai-san77.exacttarget.com
click.e.beaconhealthsystem.org
mpagereach.beaconhealthsystem.org
vpn.beaconhealthsystem.org
join.beaconhealthsystem.org
www.beaconhealthsystem.org
beaconhealthsystem.org
selfservice.beaconhealthsystem.org
qualityoflife.org
credentialing.beaconhealthsystem.org
cloud.e.beaconhealthsystem.org
akamai-san77.exacttarget.com
akamai-san77.exacttarget.com
webmail.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
answers-embed.campusfederal.org.pagescdn.com
join.beaconhealthsystem.org
locations.beaconhealthsystem.org
docs.beaconhealthsystem.org
securemail.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
mpagereach.beaconhealthsystem.org
synergichealthcareers.yext-cdn.com
synergichealthcareers.yext-cdn.com
qualityoflife.org
docs.beaconhealthsystem.org
*.beaconhealthsystem.org
webmail.beaconhealthsystem.org
uc-vcs-e.beaconhealthsystem.org
beaconhealthsystem.org
click.e.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
webmail.beaconhealthsystem.org
webmail.beaconhealthsystem.org
*.beaconhealthsystem.org
ssl416046.cloudflaressl.com
bhs-adfs.beaconhealthsystem.org
employees.beaconhealthsystem.org
qualityoflife.org
locations.gwwade.com
view.e.beaconhealthsystem.org
api.beaconhealthsystem.org
qualityoflife.org
beaconhealthsystem.org
internalapps.beaconhealthsystem.org
docs.beaconhealthsystem.org
webmail.beaconhealthsystem.org
answers-embed.campusfederal.org.pagescdn.com
xmpp.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
answers.entenmanns.com.yext-cdn.com
answers-dallygoods.com.pagescdn.com
bhs-navadfs.beaconhealthsystem.org
answers-dallygoods.com.pagescdn.com
docs.beaconhealthsystem.org
*.beaconhealthsystem.org
akamai-san77.exacttarget.com
search.beaconhealthsystem.org
webmail.beaconhealthsystem.org
answers-bhhs.pagescdn.com
ssl416046.cloudflaressl.com
selfservice.beaconhealthsystem.org
beaconhealthsystem.org
employees.beaconhealthsystem.org
securemail.beaconhealthsystem.org
turn.beaconhealthsystem.org
join.beaconhealthsystem.org
sni.cloudflaressl.com
webmail.beaconhealthsystem.org
docs.beaconhealthsystem.org
vpn.beaconhealthsystem.org
webmail.beaconhealthsystem.org
webmail.beaconhealthsystem.org
vpn.beaconhealthsystem.org
uc-vcs-e.beaconhealthsystem.org
hctsportals.com
transfer.beaconhealthsystem.org
www.beaconhealthsystem.org
api.beaconhealthsystem.org
cloud.e.beaconhealthsystem.org
akamai-san77.exacttarget.com
beaconhealthsystem.org
*.beaconhealthsystem.org
transfer.beaconhealthsystem.org
employees.beaconhealthsystem.org
akamai-san77.exacttarget.com
credentialing.beaconhealthsystem.org
webmail.beaconhealthsystem.org
api.beaconhealthsystem.org
employees.beaconhealthsystem.org
beaconhealthsystem.org
cloud.e.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
click.e.beaconhealthsystem.org
selfservice.beaconhealthsystem.org

Certificate

The complete raw certificate details for click.e.beaconhealthsystem.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIQBgCahtYmo7b2+zYDeC79LDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkxMTE4MDAwMDAwWhcN
MjAxMTI1MTIwMDAwWjCBoDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0luZGlhbmEx
EzARBgNVBAcTClNvdXRoIEJlbmQxIzAhBgNVBAoTGkJlYWNvbiBIZWFsdGggU3lz
dGVtLCBJbmMuMRwwGgYDVQQLExNJbmZvcm1hdGlvbiBTeXN0ZW1zMScwJQYDVQQD
Ex5jbGljay5lLmJlYWNvbmhlYWx0aHN5c3RlbS5vcmcwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDUpbjXJ5mvlPJpCLdsDU+MPDgJrnfCLMG5bVKtluEB
QGNvml35vJ2664IraBMG/k94Ld8Sl9046KcpNjMRgccv8mJALbRynqOEXHA00kVI
bVErsZVk8eWCncBN3UPQEeXjGIe2aSQhIprueivzydbKHYm6t6STy/COmInTiHnd
Fd12Zc/FuSQDG/xRqg7kbK/O8FJk4jWnoZWu++XqNRcQQKaa/qVz6I+1JTXfhrBe
jQXueRSZBS3psKpRg0iDbKjJln86+UAzNxRU6M77wVuBUQ/YfiydcGva7p1ElMBI
KqUCfj+wuGaMGV8G51bPj47jzKsTdskkOVQilBulujerAgMBAAGjggLtMIIC6TAf
BgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU738XO+WG
K1AcAbCGW9P3jPo8vu0wKQYDVR0RBCIwIIIeY2xpY2suZS5iZWFjb25oZWFsdGhz
eXN0ZW0ub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQu
Y29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0
LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCow
KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM
AQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln
aWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j
b20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAw
ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb
37jjd80OyA3cEAAAAW6AIa8EAAAEAwBGMEQCIA+EPojvxgAzkQHLHc5eab3kEEP7
jn+pRpfet4cZp5YpAiAST5Ynd7RU0REtE/IeaZdE3x/6flyMH/62MKZEFjaRyAB3
AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABboAhrrAAAAQDAEgw
RgIhALiWDUGSEXgjFuqLj04eTjbhX81r1jq8y/zrDsJcoyAJAiEAxjvlZ1H8i/tO
6iERY/buJthGy1w5bRimTwpGuRV4WbgwDQYJKoZIhvcNAQELBQADggEBALrwijn5
vtGcLHxqHu1PvjqxJUkmUi0Oh/S4zX5FtsNOrqe0VhwmoJFPM0uwO0IFy2W25bSl
tH7rXIU56c9Gez7r1dDMY6i+xeyOGPmI8/Csu/X8maqpSW6CqOYSM0i6aocwX9C9
aYH2K9pNE3io7nNdBFgJrZIWQ/ZO+Z9HteIpNflCc1VEhqAUTS1iiCGghDCHcEo3
0Mwifu7meFczey1h03AYHFYmGrtOEmjuio1UDybsMWG3ARL3H4qHYYJnK9JOIWIK
t+/mR6DrxjcRBbDIJcEXYV0c+Iw7FdIURx60eu2mKuAG28l4fYBHeP/mmisFvIZc
CjUgwPpv8ZrrN1c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KW41yeZr5TyaQi3bA1P
jDw4Ca53wizBuW1SrZbhAUBjb5pd+byduuuCK2gTBv5PeC3fEpfdOOinKTYzEYHH
L/JiQC20cp6jhFxwNNJFSG1RK7GVZPHlgp3ATd1D0BHl4xiHtmkkISKa7nor88nW
yh2Jurekk8vwjpiJ04h53RXddmXPxbkkAxv8UaoO5GyvzvBSZOI1p6GVrvvl6jUX
EECmmv6lc+iPtSU134awXo0F7nkUmQUt6bCqUYNIg2yoyZZ/OvlAMzcUVOjO+8Fb
gVEP2H4snXBr2u6dRJTASCqlAn4/sLhmjBlfBudWz4+O48yrE3bJJDlUIpQbpbo3
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7978502148638738909843575297333460268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Bend'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beacon Health System, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'click.e.beaconhealthsystem.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26844241233044470075429280722961852179823630333077848436032559502527174478244343587119865823360698887411245302558964419184426814074639374535093053226029866678666562023481154982079108420694293755871205877145708815221921990497823950434031601041615560246695400672831526099256318765654921021730797095576692511831198673202666022490827832771900095600363401638269268162851598920603522324067147471625863646587829360736313672781211896380943788690724970622095910678193006588132940262377335430576397377955108489442360954958123730292404135448768719573337386923354590460066815594244560204602042306382368235495458784532645914752939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef7f173be5862b501c01b0865bd3f78cfa3cbeed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.e.beaconhealthsystem.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e8021af04000004030046304402200f843e88efc600339101cb1dce5e69bde41043fb8e7fa94697deb78719a796290220124f962777b454d1112d13f21e699744df1ffa7e5c8c1ffeb630a644163691c80077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e8021aeb00000040300483046022100b8960d419211782316ea8b8f4e1e4e36e15fcd6bd63abccbfceb0ec25ca32009022100c63be56751fc8bfb4eea211163f6ee26d846cb5c396d18a64f0a46b9157859b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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