nsa.corp.inthosts.net

- Verizon Data Services LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 0b:e8:b6:08:2a:3f:ab:39:62:21:22:47:1c:eb:1b:80 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
Organization unit: Network Service Assurance
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:e8:b6:08:2a:3f:ab:39:62:21:22:47:1c:eb:1b:80
Serial Number (int): 15829812870262660652228979973543369600
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:7a:95:59:9b:e5:be:6a:b6:48:aa:dc:20:93:57:5b:46:19:c4:ce
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): 5d:b6:3c:b7:4f:f2:76:a0:e9:38:ee:6e:ea:1c:ee:66:20:5e:29:ef
Fingerprint (sha256): a5:af:2d:88:59:03:eb:b9:0d:4c:94:c2:66:2e:c4:95:e4:13:4b:34:93:4a:be:f7:d3:d3:0d:ea:04:a1:6a:25

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate nsa.corp.inthosts.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nsa.corp.inthosts.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nsa.corp.inthosts.net

Other certificates including the domain name inthosts.net

(limited to 100 certificates)
txdallcxw490.apps.inthosts.net
txdallsrpm502.apps.inthosts.net
plavzmedtst01.corp.inthosts.net
txplanepoc03.corp.inthosts.net
devvzint.apps.inthosts.net
cx-m-dev.apps.inthosts.net
txplanscadm320.inthosts.net
utsalt01-vs01.corp.inthosts.net
txdallsrpm501.apps.inthosts.net
xo360test.apps.inthosts.net
txdallsrpm402.apps.inthosts.net
xoprojects.xo.com
txplanepoc04.corp.inthosts.net
txplannmas301.corp.inthosts.net
txdallscms320.inthosts.net
xostats.corp.inthosts.net
plarunprd01.corp.inthosts.net
vzint.apps.inthosts.net
plawsoprd04.corp.inthosts.net
dalwsotst03.corp.inthosts.net
plaipmprd01.corp.inthosts.net
txplanscms320.inthosts.net
techspec.corp.inthosts.net
dalwsotst02.corp.inthosts.net
devvzint.apps.inthosts.net
xoprojects.xo.com
cpe.corp.inthosts.net
txdallcxm401.apps.inthosts.net
plaruntst01.corp.inthosts.net
xostatstst.corp.inthosts.net
txdallcxm502.apps.inthosts.net
txplan01-fm02.corp.inthosts.net
xostats.corp.inthosts.net
txdallcxw491.apps.inthosts.net
xofedtst.dal.dc.xo.com
txplanwb315.apps.inthosts.net
plavzmeddev01.corp.inthosts.net
xostats.corp.inthosts.net
nsamobile.apps.inthosts.net
xostats.corp.inthosts.net
plavzmedprd01.corp.inthosts.net
plawsoprd01.corp.inthosts.net
txdallscms320.inthosts.net
txplanscadm320.inthosts.net
txplancxm302.apps.inthosts.net
testvzint.apps.inthosts.net
txplancxm301.apps.inthosts.net
txplan01-vs01.corp.inthosts.net
vzint.apps.inthosts.net
txplansrpm302.apps.inthosts.net
cx-w-dev.apps.inthosts.net
txplansccm320.inthosts.net
devtechspec.corp.inthosts.net
txplansrpm301.apps.inthosts.net
txdallcxm501.apps.inthosts.net
plaxostst04.corp.inthosts.net
nsa.corp.inthosts.net
txplansccm320.inthosts.net
xofed.xo.com
txplancxw391.apps.inthosts.net
itetechspec.corp.inthosts.net
xofed.xo.com
api-uat.verizon.com
dalwsotst04.corp.inthosts.net
txdallcxm402.apps.inthosts.net
xofedtst.dal.dc.xo.com
onb.corp.inthosts.net
vendoript.corp.inthosts.net
clli.corp.inthosts.net
txplanvpxlb501.corp.inthosts.net
txplanvpxlb301.corp.inthosts.net
txdallsrpm401.apps.inthosts.net
txplanvcbck301.apps.inthosts.net
txdallsrpm501.apps.inthosts.net
txplancxw390.apps.inthosts.net
cx-m-test.apps.inthosts.net
testvendoript.corp.inthosts.net
nsamobile.apps.inthosts.net
txplanscms320.inthosts.net
plawsoprd03.corp.inthosts.net
txplanwb315.corp.inthosts.net
testvzint.apps.inthosts.net
xostats.corp.inthosts.net
devtechspec.corp.inthosts.net
inthosts.net

Certificate

The complete raw certificate details for nsa.corp.inthosts.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIQC+i2CCo/qzliISJHHOsbgDANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSMwIQYDVQQDExpEaWdpQ2VydCBCYWx0aW1vcmUgQ0Et
MiBHMjAeFw0xODA5MjQwMDAwMDBaFw0yMDA5MjgxMjAwMDBaMIGgMQswCQYDVQQG
EwJVUzEQMA4GA1UECBMHRmxvcmlkYTEXMBUGA1UEBxMOVGVtcGxlIFRlcnJhY2Ux
IjAgBgNVBAoTGVZlcml6b24gRGF0YSBTZXJ2aWNlcyBMTEMxIjAgBgNVBAsTGU5l
dHdvcmsgU2VydmljZSBBc3N1cmFuY2UxHjAcBgNVBAMTFW5zYS5jb3JwLmludGhv
c3RzLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMs+24NNX0CD
v3uythCeU40CDhZo7yv9qr0Kij3iljtrX/Hkg59Yk6w4zYz8lMPXBns3sNvaHrer
L+q+jrm/b0PUEeQjRLldaCjb9ZRpwkQX+a5ZdeVxdeOsFjKgOF3o2rYJ1lHAlriV
zyQGkVRJJbkH2IW0tcVsRgWyJ8D0Jt/WwRcoxfxli2UezePMeseyNVNBAWUfcRdS
3laqugv7+RL4lfF1ZklBpTQsdsjgZ4qbPvB6ptBjo6QD5fh+JHO4AgIvOZ6joTnE
jfe0qSWJ62f5tYHKKsIk7n8wQoWEJR1dahnQHOExMIRzHDbeyMojQ1NvaE/rCcph
tIOZwEO0f08CAwEAAaOCAgUwggIBMB8GA1UdIwQYMBaAFMASsih0aEZn6XAldBoA
RVsGfVxEMB0GA1UdDgQWBBQhepVZm+W+arZIqtwgk1dbRhnEzjAgBgNVHREEGTAX
ghVuc2EuY29ycC5pbnRob3N0cy5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBgQYDVR0fBHoweDA6oDigNoY0aHR0cDov
L2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QmFsdGltb3JlQ0EtMkcyLmNybDA6
oDigNoY0aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QmFsdGltb3Jl
Q0EtMkcyLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB
FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB5BggrBgEF
BQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBD
BggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
QmFsdGltb3JlQ0EtMkcyLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2js4g/VXs90A0LdmKVH/YUoG/rFQu
3cXfI9yD5TOrCdrJMAguxBbu5CSEEM1YxAHzC4CZav64zPjSxgXSGu2O8n/nzpzl
Exgw1VhrpVrgU3hQKSNFUQZZutsk2q+/YVDMcoMQn47OXjtshrg/0Rf6+grRBI8h
UAdoT6Oq+KM6lBHGc4w+HoMJZForr0z3bFf8OVeRx+EazpWq827sdmWkgqaOu7by
BFQwf4aGQRYK01V4swy1/PjjBKBxGXl2X4G0F1sHVSj53Y3b+syGDie9Z3+Y2Bcn
naZ9CtDfIeAr9ekRFmlrlsbOxuiIOwvZpwO8SZowlMKZ6a3OM+qGri8o
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz7bg01fQIO/e7K2EJ5T
jQIOFmjvK/2qvQqKPeKWO2tf8eSDn1iTrDjNjPyUw9cGezew29oet6sv6r6Oub9v
Q9QR5CNEuV1oKNv1lGnCRBf5rll15XF146wWMqA4XejatgnWUcCWuJXPJAaRVEkl
uQfYhbS1xWxGBbInwPQm39bBFyjF/GWLZR7N48x6x7I1U0EBZR9xF1LeVqq6C/v5
EviV8XVmSUGlNCx2yOBnips+8Hqm0GOjpAPl+H4kc7gCAi85nqOhOcSN97SpJYnr
Z/m1gcoqwiTufzBChYQlHV1qGdAc4TEwhHMcNt7IyiNDU29oT+sJymG0g5nAQ7R/
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15829812870262660652228979973543369600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Service Assurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsa.corp.inthosts.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25657372082926092096250194729592014755060251882255027825415284967760536829188821169589580915987630918398138576066141663040086145795531003787505265059921825733800135345674257805114337130151040876665631044530522183139847144293695065165028563862482456022156991939467619627412566171802731475139087231422291427514786367464507462151976432865711373233757522754518701309474094119069644781175135616486175267309244266169051386802875126630530877763320703340698854849730453479617986307546426271940862426322833242900201739736449871082827229345281639486950134979103667853596070843135162764837923364006023639328884695525053099704143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							217a95599be5be6ab648aadc2093575b4619c4ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsa.corp.inthosts.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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