corp.roblox.com

- Roblox Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:a9:3e:52:8f:4d:f8:fc:4b:c2:e9:36:47:53:c2:d9 was issued on by DigiCert Inc.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Roblox Corporation

Organization: Roblox Corporation
State / Province: California
Locality: San Mateo
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:a9:3e:52:8f:4d:f8:fc:4b:c2:e9:36:47:53:c2:d9
Serial Number (int): 14171042177396916664990803521202012889
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 70:a4:f7:e1:90:76:56:e0:ce:ed:1e:99:60:dc:5b:33:39:2e:2b:36
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e4:39:9c:b0:65:04:4e:36:74:c0:1d:02:6b:d6:cc:bf:a8:a3:90:b0
Fingerprint (sha256): a4:83:80:29:b9:1d:64:2b:2d:ff:e9:4d:e4:3c:a0:dd:ad:f1:3c:d2:b4:64:2b:e4:bd:4e:97:10:aa:26:04:b1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate corp.roblox.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corp.roblox.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corp.roblox.com
altdevforum.roblox.com
bash.video
blog.roblox.com
byfron.com
careers.roblox.com
clientsettingscdn.roblox.com
corporate.roblox.com
devforum.roblox.com
education.roblox.com
getsway.app
hamul.gg
headshotz.ai
jidomaps.com
jobs.roblox.com
nakama.us
nakamalabs.com
research.roblox.com
techblog.roblox.com
tym.so
wiki.roblox.com
www.bash.video
www.byfron.com
www.getsway.app
www.hamul.gg
www.headshotz.ai
www.jidomaps.com
www.tym.so

Other certificates including the domain name roblox.com

(limited to 100 certificates)
vpn.cn.roblox.com
roblox.com
devforum.roblox.com
devforum.roblox.com
*.sitetest3.roblox.com
*.rlb.roblox.com
*.eightfold.ai
roblox.com
vpn.roblox.com
*.eightfold.ai
*.eightfold.ai
developer.roblox.com
*.eightfold.ai
datagrail.roblox.com
survey.roblox.com
*.help.roblox.com
devforum.roblox.com
rightsportal.roblox.com
status.roblox.com
advertise.roblox.com
corp.roblox.com
create.roblox.com
*.roblox.com
vpn.cn.roblox.com
email.recruiting.roblox.com
jira.roblox.com
*.eightfold.ai
ir.roblox.com
jira.roblox.com
careers.roblox.com
create.roblox.com
roblox.com
datagrail.roblox.com
*.roblox.com
ir.roblox.com
developer.roblox.com
*.roblox.com
affiliates.roblox.com
*.roblox.com
rightsportal.roblox.com
devforum.roblox.com
vpn.cn.roblox.com
developer.roblox.com
create.roblox.com
fonts.roblox.com
email.recruiting.roblox.com
ir.roblox.com
developer.roblox.com
*.help.roblox.com
*.eightfold.ai
authorize.roblox.com
roblox.com
*.eightfold.ai
*.help.roblox.com
roblox.com
*.roblox.com
roblox.com
talent.roblox.com
services.gametest.roblox.com
devrel.roblox.com
api.roblox.com
vpn.cn.roblox.com
*.roblox.com
altdevforum.roblox.com
upload.crashes.roblox.com
*.roblox.com
corp.roblox.com
careers.roblox.com
talent.roblox.com
jira.roblox.com
*.gametest1.roblox.com
*.gametest2.roblox.com
roblox.com
uiblox.roblox.com
uiblox.roblox.com
*.eightfold.ai
events.roblox.com
authorize.roblox.com
*.eightfold.ai
education.roblox.com
developer.roblox.com
education.roblox.com
status.roblox.com
socialauth.roblox.com
corp.roblox.com
roblox.com
email.recruiting.roblox.com
*.api.gametest4.roblox.com
*.eightfold.ai
devforum.roblox.com
roblox.com
uiblox.roblox.com
prod.docsiteassets.roblox.com
devrel.roblox.com
devforum.roblox.com
roblox.com
*.roblox.com
events.roblox.com
*.api.roblox.com
developer.roblox.com

Certificate

The complete raw certificate details for corp.roblox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHuTCCBqGgAwIBAgIQCqk+Uo9N+PxLwuk2R1PC2TANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA5MDgwMDAwMDBa
Fw0yNDA1MTEyMzU5NTlaMG0xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y
bmlhMRIwEAYDVQQHEwlTYW4gTWF0ZW8xGzAZBgNVBAoTElJvYmxveCBDb3Jwb3Jh
dGlvbjEYMBYGA1UEAxMPY29ycC5yb2Jsb3guY29tMFkwEwYHKoZIzj0CAQYIKoZI
zj0DAQcDQgAEpBUj7rJnFeBYu29tjb8zZxLt6KhqHIGkMIFOsZGAjpiUcFuzS9Pt
lQIQl70MEEh+9UHoB5KrJRPByixkePx4AaOCBTwwggU4MB8GA1UdIwQYMBaAFLdr
ouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBRwpPfhkHZW4M7tHplg3FszOS4r
NjCCAeMGA1UdEQSCAdowggHWgg9jb3JwLnJvYmxveC5jb22CFmFsdGRldmZvcnVt
LnJvYmxveC5jb22CCmJhc2gudmlkZW+CD2Jsb2cucm9ibG94LmNvbYIKYnlmcm9u
LmNvbYISY2FyZWVycy5yb2Jsb3guY29tghxjbGllbnRzZXR0aW5nc2Nkbi5yb2Js
b3guY29tghRjb3Jwb3JhdGUucm9ibG94LmNvbYITZGV2Zm9ydW0ucm9ibG94LmNv
bYIUZWR1Y2F0aW9uLnJvYmxveC5jb22CC2dldHN3YXkuYXBwgghoYW11bC5nZ4IM
aGVhZHNob3R6LmFpggxqaWRvbWFwcy5jb22CD2pvYnMucm9ibG94LmNvbYIJbmFr
YW1hLnVzgg5uYWthbWFsYWJzLmNvbYITcmVzZWFyY2gucm9ibG94LmNvbYITdGVj
aGJsb2cucm9ibG94LmNvbYIGdHltLnNvgg93aWtpLnJvYmxveC5jb22CDnd3dy5i
YXNoLnZpZGVvgg53d3cuYnlmcm9uLmNvbYIPd3d3LmdldHN3YXkuYXBwggx3d3cu
aGFtdWwuZ2eCEHd3dy5oZWFkc2hvdHouYWmCEHd3dy5qaWRvbWFwcy5jb22CCnd3
dy50eW0uc28wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0
cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUE
FjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENB
MS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDB/BggrBgEFBQcBAQRzMHEwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0
cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAy
MENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFp
AWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYp2fLwIAAAE
AwBGMEQCIHxldqc31HsCXSUX/Y3z6pAiaqhfwWI+QO3GpUr5P4cMAiAQiFTbXi76
OHBLtwKM1S81cOiBCPGZtllMqdJKl8o4YAB3AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABinZ8vEIAAAQDAEgwRgIhAKxjm62n3kDdJNETkm88ze6k
NSFvi9esnLp+xOqbgKtAAiEA18TX3HMhWqnsNZ9rGSbJhzsO0lfsdpqqbsnJ1ryO
2YwAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYp2fLxRAAAE
AwBGMEQCID03BjorrCAEzIMcorR8wqsEbqwRDu901+HDbevtS9UfAiAtuv2cGj3L
6QimrN9+hAJkm2jCjwXqXxNGcOuVrzsvTjANBgkqhkiG9w0BAQsFAAOCAQEAAiau
R7ZOxNqgN2KsOuPh8HQwLVbj7iEaavTSHySZIxfkMgogxntsRrMfnGIXP+cvQYJ8
nvDHj6Y5AXQGsM7EXUpy1bC4pf9L3kY4/DkZx+RztSz6h6TxT4YqCKQFOM4ot+mA
ZaCkKoZgQudEvP6wrzxY6dIqbiaQOh6bkwayUJKNxVElUC5EGmJ+KAg6ojRcYFEz
7O78Gt97z3/kGVOSF5YQkO+zkchs1jkVXUzaNVG7gGb3Kb+JZfr+ipxGg8dUpTgI
QSkGYaO+ouJ41eo5iRcXz45Rq7vSfSnmtQH1KDv0CmezCC91plw7AFfrNWihDj4x
7/yTRw7DUBvzXxpe7Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpBUj7rJnFeBYu29tjb8zZxLt6Khq
HIGkMIFOsZGAjpiUcFuzS9PtlQIQl70MEEh+9UHoB5KrJRPByixkePx4AQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14171042177396916664990803521202012889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Mateo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roblox Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corp.roblox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a41523eeb26715e058bb6f6d8dbf336712ede8a86a1c81a430814eb191808e9894705bb34bd3ed95021097bd0c10487ef541e80792ab2513c1ca2c6478fc7801
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70a4f7e1907656e0ceed1e9960dc5b33392e2b36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altdevforum.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bash.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byfron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsettingscdn.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devforum.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsway.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamul.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headshotz.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jidomaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakama.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakamalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techblog.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tym.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.roblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bash.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byfron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsway.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamul.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headshotz.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jidomaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tym.so'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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