aesdaeries1.atwater.local

- Atwater Elementary School District -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:99:7b:0c:68:fc:df:db:3c:a2:26:ec:00:70:4f:39 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atwater Elementary School District

Organization: Atwater Elementary School District
State / Province: CA
Locality: Atwater
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:99:7b:0c:68:fc:df:db:3c:a2:26:ec:00:70:4f:39
Serial Number (int): 2126145134752091286597672789328547641
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2c:67:3a:ca:74:a2:90:7c:0e:22:eb:6b:05:eb:2a:8d:92:1c:8d:60
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 4c:51:33:50:27:70:9e:78:8f:35:98:8a:cb:40:b7:84:2c:d1:fc:d3
Fingerprint (sha256): a1:49:ef:ab:1f:90:df:7b:37:54:a6:f7:06:b6:14:27:ca:fe:0b:26:32:be:10:8f:fe:92:0c:d3:72:fc:92:59

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate aesdaeries1.atwater.local

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aesdaeries1.atwater.local

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesdaeries1.atwater.local
owa.aesd.edu
aesdowa01.atwater.local
exchange.atwater.local
autodiscover.aesd.edu
aeries.aesd.edu

Other certificates including the domain name atwater.local

(limited to 100 certificates)
aesdaeries1.atwater.local
owa.aesd.edu
owa.aesd.edu
aeries.aesd.edu

Certificate

The complete raw certificate details for aesdaeries1.atwater.local in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGljCCBX6gAwIBAgIQAZl7DGj839s8oibsAHBPOTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTMxMDAxMDAwMDAwWhcN
MTUxMDIwMTIwMDAwWjB9MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExEDAOBgNV
BAcTB0F0d2F0ZXIxKzApBgNVBAoTIkF0d2F0ZXIgRWxlbWVudGFyeSBTY2hvb2wg
RGlzdHJpY3QxIjAgBgNVBAMTGWFlc2RhZXJpZXMxLmF0d2F0ZXIubG9jYWwwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDda+KAwmW4qXsFeevm6nZifVxH
GQO4qGrVDBwX8YC5Nme3Z7SXaLouOVP9MS8BiCBoDe/oSmZW2dfCAstU1dL0nUpG
F9CStMGciljfp/gviArlgVz9c00r8xbM0HjE/XgcfvUr5YrrTAtsQ1xYvOyYGnFo
4G32+m12wiIpfQXPWvd+Mz7AoI1+GFtMOgDqnZFmRnr3KPsM04QetlDNN/tiybo7
h7/ip4layKd8ak9Ni7xulxFTKjw6bWPx5OPpoJ40POP1CMDetnnfx9rHWipgr6O2
ZqeapmWdIb46WgaNc31Jsq4RDDvhIIPgn1ifz5LiImjsHhpxtSIK8pNDPNpvIXut
J0+ZEjiQIiHn9h1QgE9aGb9u95MpFum8i32EWhvVUWAg6usdID0lQEeHpY0jimmT
fBKcItw2sqS00htED+406Fk7q6QyrcsSPLHCYRhpAvmoTrLRfhBWIee0ReX1VVo7
WPrDjeArPmG+T7CwcjR7LFmYznPznQ+7vzzwjSgqwrrjFIgfXN9OOiHA6tDNmk4F
ZcIyNCcHbprGIDggmBAs/lmwKtl4nlA0HVycQgi0sOSy/Aiz69WJ6zmGEFZSh5iA
QTrrpP8VFXxOcmKGpQ98wpONiGcRxYUREowZYWvvkAi+nrW4q1RUJ1dOlhKizYYV
qp1UETYvwq+BjqOK0QIDAQABo4ICQDCCAjwwHwYDVR0jBBgwFoAUD4BhHIIxYdUv
KOeNRji0LOHG2eIwHQYDVR0OBBYEFCxnOsp0opB8DiLrawXrKo2SHI1gMIGNBgNV
HREEgYUwgYKCGWFlc2RhZXJpZXMxLmF0d2F0ZXIubG9jYWyCDG93YS5hZXNkLmVk
dYIXYWVzZG93YTAxLmF0d2F0ZXIubG9jYWyCFmV4Y2hhbmdlLmF0d2F0ZXIubG9j
YWyCFWF1dG9kaXNjb3Zlci5hZXNkLmVkdYIPYWVyaWVzLmFlc2QuZWR1MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0f
BGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1n
NC5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTIt
ZzQuY3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0
dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2
ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAfh3+8uN9
hfCl9pH9uKRbaEJkGetvvf59+eDUbwT0qCeBn/Fu4HkPvZOkH2nJqUElWxEOU8BC
aWnRgPfkUVChB9weHFvG1GuvhDmOAWtrDMLkUnViZsZiXGxRu5s29i1IIiTojH7r
jAXUC1MePy/Zb/ZVKZJq9emL7fX78+JiEALR6omMtDC80D58XIxpRjgu2w7u16/M
Bwui6eNtTbhtO1BNtveDImMssJh6nqIGsTn+RCijWMTMzvMlHFMojWYEwAfJ3JL2
XdU0ql7CZsOTi6SgD4FJ1odKjMgRP+foKGufrLVL9DKlYChF6lI/4DwIQXOLt8ae
oT51C4NkRl4HcA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2126145134752091286597672789328547641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atwater'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atwater Elementary School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aesdaeries1.atwater.local'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903320602670661137789376259631887532726889189484468200363996098234515148687980013821445656086975827698940464392385167324671373492377233838605691806178851047949054155609031401110469995172366992649720260329417007252414334076119280420852790197223397409269584824029707502062019804136183623889376278502757677589583828760087574837810041018719987580033804797390827533039156099750033054875842434116377298936254149482212332582210296796794971105102995021973314839130315600725807061167077907267267382808874431490347715903024032374949605692619421882764219992310412015113953124206317680708165030694201427414715643622498157429031727227672487644464927935823979650896028853643379282274044302528698941236679122070507939631124698597973340988218912100624720324812522739814008404516258713761750868857299095668031460173800780277033817016557769220442626895104017491767513323347786382042578765463352350297056776177812299240782675496824260723547932381557801392833710163595924529737240675205918612418849575944031860640602885364744908610260916165005974657146736045189450276486774429530745362215981916086331692259085094389722976767252622402706754051403456503992644136266436122579746294246093402719363012059658631079500243034091456711297980356608102413807880913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c673aca74a2907c0e22eb6b05eb2a8d921c8d60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesdaeries1.atwater.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesdowa01.atwater.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.atwater.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeries.aesd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007e1dfef2e37d85f0a5f691fdb8a45b68426419eb6fbdfe7df9e0d46f04f4a827819ff16ee0790fbd93a41f69c9a941255b110e53c0426969d180f7e45150a107dc1e1c5bc6d46baf84398e016b6b0cc2e452756266c6625c6c51bb9b36f62d482224e88c7eeb8c05d40b531e3f2fd96ff65529926af5e98bedf5fbf3e2621002d1ea898cb430bcd03e7c5c8c6946382edb0eeed7afcc070ba2e9e36d4db86d3b504db6f78322632cb0987a9ea206b139fe4428a358c4cccef3251c53288d6604c007c9dc92f65dd534aa5ec266c3938ba4a00f8149d6874a8cc8113fe7e8286b9facb54bf432a5602845ea523fe03c0841738bb7c69ea13e750b8364465e0770