www.dot.gov

- United States Department of Transportation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:8e:e8:dd:a3:c1:82:38:08:85:b1:72:f1:62:af:45 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United States Department of Transportation

Organization: United States Department of Transportation
State / Province: District Of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:8e:e8:dd:a3:c1:82:38:08:85:b1:72:f1:62:af:45
Serial Number (int): 10046625203538313698874346682133425989
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a1:ec:bc:56:b6:60:99:fe:42:5e:6a:0c:9e:a1:aa:61:5a:0e:39:49
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c6:d2:32:5b:f6:c6:d5:44:14:1b:03:4c:1d:20:22:ac:48:0e:89:1b
Fingerprint (sha256): a3:cb:ca:46:d9:15:a8:a7:bb:85:df:ac:f6:e1:00:d2:65:62:c5:f8:b5:3e:26:fa:47:96:1b:30:13:13:3f:d8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate www.dot.gov

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dot.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dot.gov
www7.transportation.gov
www7.phmsa.dot.gov
www7.highways.dot.gov
www7.fta.dot.gov
www7.fmcsa.dot.gov
www7.bts.dot.gov
www.volpe.dot.gov
www.usmma.edu
www.tsi.dot.gov
www.transportation.gov
www.transit.dot.gov
www.sharetheroadsafely.gov
www.secure.dot.gov
www.seaway.dot.gov
www.rita.dot.gov
www.protectyourmove.gov
www.portal.dot.gov
www.phmsa.dot.gov
www.permits.performance.gov
www.osdbu.dot.gov
www.maritime.dot.gov
www.marad.dot.gov
www.fta.dot.gov
www.fmcsa.dot.gov
www.data.fra.dot.gov
www.civilrights.dot.gov
www.checkthebox.dot.gov
www.bts.gov
www.bts.dot.gov
volpe.dot.gov
utc.dot.gov
tsi.dot.gov
transit.dot.gov
transerve.dot.gov
sharetheroadsafely.gov
sfm.fmcsa.dot.gov
secure.dot.gov
seaway.dot.gov
score.fmcsa.dot.gov
railroads.fra.dot.gov
railroads.dot.gov
protectyourmove.gov
portal.dot.gov
pnt.rita.dot.gov
pipelinesafety.dot.gov
phmsa.dot.gov
osdbu.dot.gov
ntl.bts.gov
ntcscheduler.fmcsa.dot.gov
nationalregistry.fmcsa.dot.gov
maritime.dot.gov
marad.dot.gov
highways.fhwa.dot.gov
highways.dot.gov
hazmatsafety.dot.gov
hazmat.dot.gov
fta.dot.gov
fra.portal.dot.gov
fmcsa.portal.dot.gov
fmcsa.lms.dot.gov
fmcsa.dot.gov
dotcms.fra.dot.gov
dot.gov
cms8.phmsa.dot.gov
cms8.marad.dot.gov
cms8.fmcsa.dot.gov
cms8.fhwa.dot.gov
cms8.dot.gov
cms8.bts.dot.gov
cms7.phmsa.dot.gov
cms7.marad.dot.gov
cms7.fta.dot.gov
cms7.fra.dot.gov
cms7.fmcsa.dot.gov
cms7.fhwa.dot.gov
cms7.dot.gov
cms7.bts.dot.gov
cms.volpe.dot.gov
cms.usmma.edu
cms.secure.dot.gov
cms.seaway.dot.gov
cms.phmsa.dot.gov
cms.permits.performance.gov
cms.marad.dot.gov
cms.intranet.dot.gov
cms.fta.dot.gov
cms.fra.dot.gov
cms.fmcsa.secure.dot.gov
cms.fmcsa.dot.gov
cms.fhwa.dot.gov
cms.dot.gov
cms.buildamerica.dot.gov
cms.bts.gov
cms.bts.dot.gov
cms.aviation.dot.gov
civilrights.dot.gov
checkthebox.dot.gov
buildamerica.dot.gov

Other certificates including the domain name dot.gov

(limited to 100 certificates)
www.psp.fmcsa.dot.gov
www.dot.gov
acquia-sites.com
*.phmsa.dot.gov
vsa.volpe.dot.gov
marad.dot.gov
acquia-sites.com
www.standards.its.dot.gov
origin-www-esv.nhtsa.dot.gov
*.volpe.dot.gov
faces.fta.dot.gov
1c3rs.rita.dot.gov
itsdpro.ornl.gov
facesuat.fta.dot.gov
its2010.ornl.gov
www.faa.gov
ftp.nhtsa.dot.gov
rsac.fra.dot.gov
fl17vgisweb.hfl17do1.wfl.fld.fhwa.dot.gov
marapps.dot.gov
ask.fmcsa.dot.gov
crashstats.nhtsa.dot.gov
TSMART.VOLPE.DOT.GOV
www.dot.gov
acquia-sites.com
mcmis.fmcsa.dot.gov
its2010.ornl.gov
safeconsole.volpe.dot.gov
nhtsa.dot.gov
acquia-sites.com
NHTHQNF5B-M.nhtsa.dot.gov
fhw2xavwmup02.dmz.fhwa.dot.gov
pmars.marad.dot.gov
acquia-sites.com
dotcmsreporting.dot.gov
oetcrt.dot.gov
itsassets.ornl.gov
acquia-sites.com
acquia-sites.com
safercar.gov
enepa.fhwa.dot.gov
rspcb.safety.fhwa.dot.gov
itsassets.ornl.gov
marapps.dot.gov
www-odi.nhtsa.dot.gov
PoolSFC.dot.gov
fhw1xavwmup01.dmz.fhwa.dot.gov
flh.fhwa.dot.gov
swim.volpe.dot.gov
Access.dot.gov
www.dot.gov
www-nass.nhtsa.dot.gov
itsassets.ornl.gov
ftp.nhtsa.dot.gov
its.dot.gov
ftajira.ad.dot.gov
sphome.volpe.dot.gov
crashstats.nhtsa.dot.gov
www.environment.fhwa.dot.gov
scm.nhtsa.dot.gov
www.faa.gov
www.dot.gov
test.cdlis.dot.gov
elmsstaging.dot.gov
eas.dot.gov
crashviewer.nhtsa.dot.gov
PoolSFC.dot.gov
eas.dot.gov
transportation.gov
safety.fhwa.dot.gov
nhthqnlas865.ad.dot.gov
nhthqnwas603.ad.dot.gov
sftp.phmsa.dot.gov
score.fmcsa.dot.gov
eas.dot.gov
origin-www-odi.nhtsa.dot.gov
www.npms.phmsa.dot.gov
slfts.fhwa.dot.gov
CSAM.DOT.GOV
email.dot.gov
itsdpro.ornl.gov
www.dot.gov
fhfl15gisweb.flhd.fhwa.dot.gov
*.phmsa.dot.gov
VOLPEPHONEMGR.VOLPE.DOT.GOV
mscs.marad.dot.gov
faces.fta.dot.gov
facesdev5.fta.dot.gov
dtrack2013.ornl.gov
sra.volpe.dot.gov
hostedsites.volpe.dot.gov
smtp10.dot.gov
*.infopave.fhwa.dot.gov
www.faa.gov
nhthqnwas813.ad.dot.gov
transitapp.ost.dot.gov
elmsstaging.dot.gov
acquia-sites.com
nhthqnlas803.ad.dot.gov
rspcb.safety.fhwa.dot.gov

Certificate

The complete raw certificate details for www.dot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOQDCCDSigAwIBAgIQB47o3aPBgjgIhbFy8WKvRTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA0MTUwMDAwMDBa
Fw0yMjExMjkyMzU5NTlaMIGMMQswCQYDVQQGEwJVUzEdMBsGA1UECBMURGlzdHJp
Y3QgT2YgQ29sdW1iaWExEzARBgNVBAcTCldhc2hpbmd0b24xMzAxBgNVBAoTKlVu
aXRlZCBTdGF0ZXMgRGVwYXJ0bWVudCBvZiBUcmFuc3BvcnRhdGlvbjEUMBIGA1UE
AxMLd3d3LmRvdC5nb3YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr
RaD7asFIxXBlWHwW+0W/93lMUSChjbd6Q2NTRMZDwT3ZMbu2xJX+euSSHvjhzrHs
CqJV+jVduqOIbKWOdwa62epZHTr1M+nr39udRQ89YbxMXZuS31vi3f3m+oCQEoYb
ZS4RphzjrWTef0Mvz8VrBOfwJ8yVkAN7uCLRtCTkxbpzhXHLbB2Fy7NLfrS/guCx
DBJ30iXmWJUqnM313RiWQOguY/cRqqPcTWoHka5yna95+Z03/9pH+lTOE5982vGK
pACTPqMWBoXRA6Ac464mKs9UjPZiBvg+S3EeGvZz6IbEe861Tyrqt4kJogYAZZ9V
7WVeiFEWQKtmJjr3ADRhAgMBAAGjggrYMIIK1DAfBgNVHSMEGDAWgBS3a6LqqKqE
jHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUoey8VrZgmf5CXmoMnqGqYVoOOUkwggeD
BgNVHREEggd6MIIHdoILd3d3LmRvdC5nb3aCF3d3dzcudHJhbnNwb3J0YXRpb24u
Z292ghJ3d3c3LnBobXNhLmRvdC5nb3aCFXd3dzcuaGlnaHdheXMuZG90LmdvdoIQ
d3d3Ny5mdGEuZG90LmdvdoISd3d3Ny5mbWNzYS5kb3QuZ292ghB3d3c3LmJ0cy5k
b3QuZ292ghF3d3cudm9scGUuZG90LmdvdoINd3d3LnVzbW1hLmVkdYIPd3d3LnRz
aS5kb3QuZ292ghZ3d3cudHJhbnNwb3J0YXRpb24uZ292ghN3d3cudHJhbnNpdC5k
b3QuZ292ghp3d3cuc2hhcmV0aGVyb2Fkc2FmZWx5LmdvdoISd3d3LnNlY3VyZS5k
b3QuZ292ghJ3d3cuc2Vhd2F5LmRvdC5nb3aCEHd3dy5yaXRhLmRvdC5nb3aCF3d3
dy5wcm90ZWN0eW91cm1vdmUuZ292ghJ3d3cucG9ydGFsLmRvdC5nb3aCEXd3dy5w
aG1zYS5kb3QuZ292ght3d3cucGVybWl0cy5wZXJmb3JtYW5jZS5nb3aCEXd3dy5v
c2RidS5kb3QuZ292ghR3d3cubWFyaXRpbWUuZG90LmdvdoIRd3d3Lm1hcmFkLmRv
dC5nb3aCD3d3dy5mdGEuZG90LmdvdoIRd3d3LmZtY3NhLmRvdC5nb3aCFHd3dy5k
YXRhLmZyYS5kb3QuZ292ghd3d3cuY2l2aWxyaWdodHMuZG90LmdvdoIXd3d3LmNo
ZWNrdGhlYm94LmRvdC5nb3aCC3d3dy5idHMuZ292gg93d3cuYnRzLmRvdC5nb3aC
DXZvbHBlLmRvdC5nb3aCC3V0Yy5kb3QuZ292ggt0c2kuZG90LmdvdoIPdHJhbnNp
dC5kb3QuZ292ghF0cmFuc2VydmUuZG90LmdvdoIWc2hhcmV0aGVyb2Fkc2FmZWx5
LmdvdoIRc2ZtLmZtY3NhLmRvdC5nb3aCDnNlY3VyZS5kb3QuZ292gg5zZWF3YXku
ZG90LmdvdoITc2NvcmUuZm1jc2EuZG90LmdvdoIVcmFpbHJvYWRzLmZyYS5kb3Qu
Z292ghFyYWlscm9hZHMuZG90LmdvdoITcHJvdGVjdHlvdXJtb3ZlLmdvdoIOcG9y
dGFsLmRvdC5nb3aCEHBudC5yaXRhLmRvdC5nb3aCFnBpcGVsaW5lc2FmZXR5LmRv
dC5nb3aCDXBobXNhLmRvdC5nb3aCDW9zZGJ1LmRvdC5nb3aCC250bC5idHMuZ292
ghpudGNzY2hlZHVsZXIuZm1jc2EuZG90LmdvdoIebmF0aW9uYWxyZWdpc3RyeS5m
bWNzYS5kb3QuZ292ghBtYXJpdGltZS5kb3QuZ292gg1tYXJhZC5kb3QuZ292ghVo
aWdod2F5cy5maHdhLmRvdC5nb3aCEGhpZ2h3YXlzLmRvdC5nb3aCFGhhem1hdHNh
ZmV0eS5kb3QuZ292gg5oYXptYXQuZG90LmdvdoILZnRhLmRvdC5nb3aCEmZyYS5w
b3J0YWwuZG90LmdvdoIUZm1jc2EucG9ydGFsLmRvdC5nb3aCEWZtY3NhLmxtcy5k
b3QuZ292gg1mbWNzYS5kb3QuZ292ghJkb3RjbXMuZnJhLmRvdC5nb3aCB2RvdC5n
b3aCEmNtczgucGhtc2EuZG90LmdvdoISY21zOC5tYXJhZC5kb3QuZ292ghJjbXM4
LmZtY3NhLmRvdC5nb3aCEWNtczguZmh3YS5kb3QuZ292ggxjbXM4LmRvdC5nb3aC
EGNtczguYnRzLmRvdC5nb3aCEmNtczcucGhtc2EuZG90LmdvdoISY21zNy5tYXJh
ZC5kb3QuZ292ghBjbXM3LmZ0YS5kb3QuZ292ghBjbXM3LmZyYS5kb3QuZ292ghJj
bXM3LmZtY3NhLmRvdC5nb3aCEWNtczcuZmh3YS5kb3QuZ292ggxjbXM3LmRvdC5n
b3aCEGNtczcuYnRzLmRvdC5nb3aCEWNtcy52b2xwZS5kb3QuZ292gg1jbXMudXNt
bWEuZWR1ghJjbXMuc2VjdXJlLmRvdC5nb3aCEmNtcy5zZWF3YXkuZG90LmdvdoIR
Y21zLnBobXNhLmRvdC5nb3aCG2Ntcy5wZXJtaXRzLnBlcmZvcm1hbmNlLmdvdoIR
Y21zLm1hcmFkLmRvdC5nb3aCFGNtcy5pbnRyYW5ldC5kb3QuZ292gg9jbXMuZnRh
LmRvdC5nb3aCD2Ntcy5mcmEuZG90LmdvdoIYY21zLmZtY3NhLnNlY3VyZS5kb3Qu
Z292ghFjbXMuZm1jc2EuZG90LmdvdoIQY21zLmZod2EuZG90LmdvdoILY21zLmRv
dC5nb3aCGGNtcy5idWlsZGFtZXJpY2EuZG90LmdvdoILY21zLmJ0cy5nb3aCD2Nt
cy5idHMuZG90LmdvdoIUY21zLmF2aWF0aW9uLmRvdC5nb3aCE2NpdmlscmlnaHRz
LmRvdC5nb3aCE2NoZWNrdGhlYm94LmRvdC5nb3aCFGJ1aWxkYW1lcmljYS5kb3Qu
Z292MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0yLmNybDBAoD6gPIY6aHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0y
LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfQYIKwYBBQUHAQEEcTBvMCQGCCsGAQUFBzAB
hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRwYIKwYBBQUHMAKGO2h0dHA6Ly9j
YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEu
Y3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1ACl5vvCe
OTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABgC2xQvcAAAQDAEYwRAIgfWE8
Xse9+3Ok/tfvJj+vrMww523GRKse/LXApW1Lg7YCIH/c40gmFvwy6K1FurzGxOV+
G7K16tPXXOfOYrC6dgO9AHYAUaOw9f0BeZxWbbg3eI8MpHrMGyfL956IQpoN/tSL
BeUAAAGALbFDcQAABAMARzBFAiBVIG1C9EE2nxSXxeCPrse82LgghNNTtHLOQ6QJ
WNEMRQIhAJ6caqc5CgkNZosv5OCFDBmFoEnGgw8fixjjYGW+zzzyAHcAQcjKsd8i
RkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGALbFC8AAABAMASDBGAiEAvUqV
3nlM5c5Kwm8fA9IOnr6Dxihv34KVew5lMICMp7ECIQDFHO1usa0YnnOLaTOkCexl
6mBi4uDo2uyKraD9XO4xYjANBgkqhkiG9w0BAQsFAAOCAQEAH60a26WM7APey5LA
NszDoR1sPkMjRQB5jCbW2R0W8VlrPWgWEOBY+yj2IlYNPvWWTKMKrHniuCL0ZlBH
wbTGDIWV9qYPdiF18nIuYM0NyB9wPvLSxuR8lUPy0bzAXvUHn/uJFzk77s4NlUcK
3uR+Xzt9mJkDhEngN6zCwBXL8WYoPDokzr0GUJmy/UOX/KS2EydcTrVYjz0W2rK2
anVqh3WFmov5hiaqgtNMVTYDCczlTP/X91Jdd6AFg1ptM0m/tyT2lH1f98P0G04g
846+ZAcLzR9DmWXje2CD8CGUfTnxlbQTv5z24cBy1GNcgjMbyG6zQFECXucSdgz6
1VDoBQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Wg+2rBSMVwZVh8FvtF
v/d5TFEgoY23ekNjU0TGQ8E92TG7tsSV/nrkkh744c6x7AqiVfo1XbqjiGyljncG
utnqWR069TPp69/bnUUPPWG8TF2bkt9b4t395vqAkBKGG2UuEaYc461k3n9DL8/F
awTn8CfMlZADe7gi0bQk5MW6c4Vxy2wdhcuzS360v4LgsQwSd9Il5liVKpzN9d0Y
lkDoLmP3Eaqj3E1qB5Gucp2vefmdN//aR/pUzhOffNrxiqQAkz6jFgaF0QOgHOOu
JirPVIz2Ygb4PktxHhr2c+iGxHvOtU8q6reJCaIGAGWfVe1lXohRFkCrZiY69wA0
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10046625203538313698874346682133425989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District Of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29700336925905372238743573875331508570585155377948590355666885791115133521927923046273728134974907460359339971863107145491238671533198565151659255489820448898820132092862024536584927595411815698617959029645292670772502629468993614256946548094018747639553216547723290270891598794598031622018191460217087998030182175055587952753547036743874890110274519253939623232914131801596327052357017406107900520910357624830587648754195866183507108145424350582706892030797801002668135011737771163320115370405326154973860283024036046668756848911347496994685697659770377260324178602655652088263784819963846555544375482475014638285921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1ecbc56b66099fe425e6a0c9ea1aa615a0e3949
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.transportation.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.highways.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volpe.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usmma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsi.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transportation.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transit.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharetheroadsafely.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaway.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rita.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectyourmove.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.permits.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osdbu.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritime.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilrights.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkthebox.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volpe.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utc.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsi.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transerve.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharetheroadsafely.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfm.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaway.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'score.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railroads.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railroads.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectyourmove.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnt.rita.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipelinesafety.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osdbu.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntl.bts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntcscheduler.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalregistry.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritime.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highways.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highways.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazmatsafety.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazmat.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fra.portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcsa.portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcsa.lms.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcms.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.volpe.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.usmma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.seaway.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.permits.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.intranet.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fmcsa.secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.buildamerica.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.aviation.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilrights.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkthebox.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildamerica.dot.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001fad1adba58cec03decb92c036ccc3a11d6c3e43234500798c26d6d91d16f1596b3d681610e058fb28f622560d3ef5964ca30aac79e2b822f4665047c1b4c60c8595f6a60f762175f2722e60cd0dc81f703ef2d2c6e47c9543f2d1bcc05ef5079ffb8917393beece0d95470adee47e5f3b7d9899038449e037acc2c015cbf166283c3a24cebd065099b2fd4397fca4b613275c4eb5588f3d16dab2b66a756a8775859a8bf98626aa82d34c55360309cce54cffd7f7525d77a005835a6d3349bfb724f6947d5ff7c3f41b4e20f38ebe64070bcd1f439965e37b6083f021947d39f195b413bf9cf6e1c072d4635c82331bc86eb34051025ee712760cfad550e805