lyncweb.rwe.com

- innogy SE -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 07:48:bb:24:a1:2d:6a:dc:ce:5c:8d:29:53:60:c4:3f was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

innogy SE

Organization: innogy SE
Organization unit: AFT-IU
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:48:bb:24:a1:2d:6a:dc:ce:5c:8d:29:53:60:c4:3f
Serial Number (int): 9682237057000644962586286715587052607
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3f:16:7e:f0:d3:90:c8:3c:11:c2:49:ba:f9:92:fe:08:95:d3:46:33
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 29:13:3c:d1:8b:97:71:ac:d5:52:88:ec:35:f3:ff:6b:f8:7d:34:6e
Fingerprint (sha256): a8:2f:ea:d0:4e:48:f0:b1:3d:12:a6:6a:a8:31:97:35:51:66:af:73:47:04:34:3e:e9:f9:cb:f5:f8:26:17:af

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate lyncweb.rwe.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncweb.rwe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meet.innogy.com
meet.rwe.com
meet.rwe.cz
meet.westnetz.de
meet.essent.nl
dialin.rwe.com
dialin.innogy.com
lyncdiscover.innogy.com
lyncdiscover.rwe.com
lyncdiscover.rwe.cz
lyncdiscover.westnetz.de
lyncdiscover.essent.nl
sfbweb01.innogy.com
sfbweb01.rwe.com
lyncweb.rwe.com

Other certificates including the domain name rwe.com

(limited to 100 certificates)
virtuadesktest.rwe.com
sentinel.rwe.com
www.hr-fb.rwe.com
rwestra.rwe.com
gis.rwe.com
news.rwe.com
lyncweb.rwe.com
group.rwe
autodiscover.rwe.com
supplierqs.rwe.com
supplierdev.innogy.com
vdi2.stpa.rwe.com
www.rwe.com
wlanguestaccess.rwe.com
easkkw.rwe.com
autodiscover.rwe.com
virtuadesk.rwe.com
b2edev.innogy.com
a-mdmsentry.rwe.com
www.rwe.com
chefdml.rwe.com
supplierdev.innogy.com
sodra-midsjobanken.rwe.com
lyncweb.rwe.com
medaco.rwe.com
crs.rwe.com
rwestguestaccess.rwe.com
fdl.rwe.com
sentinel.rwe.com
gastro.rwe.com
mx1.rwe.com
proper.rwe.com
b2edev.innogy.com
americas.rwe.com
csab.rwe.com
osuc-mobile.rwe.com
v99-exp01p-ext.rwe.com
rweg-uk-dedcwvsr-uc902.rwe.com
mail.rwe.com
webmarket.rwe.com
themis.rwe.com
info-securelogin.rwe.com
gateway.stpa.rwe.com
pfm.rwe.com
teamwork.rwe.com
cage-d-pdn.rwe.com
maintenance.rwe.com
gbg.rwe.com
mars.rwe.com
virtuadesk.rwe.com
smartpool-portal.rwe.com
sip.innogy.com
prod.nexus.aws-eu1.rwe.com
proper.rwe.com
rsdr.rwe.com
virtuadesk.rwe.com
jira.tgb.rwe.com
wg003045.rwe.com
mx4.rwe.com
testconnect.rwe.com
survey.rwe.com
webmarket.innogy.com
gateway1.stpa.rwe.com
b2e.innogy.com
pod.rwe.com
secmail.rwe.com
crstest.rwe.com
maintenance.rwe.com
gis.rwe.com
portal.gasstorage-west.rwe.com
info-mdm.rwe.com
properbackendnonprod.rwe.com
a-mdmcore.rwe.com
rga.rwe.com
view.rwe.com
lyncweb.rwe.com
hportal.rwe.com
mail.rwe.com
vmgmail25.rwe.com
hportal.rwe.com
connect.rwe.com
essmobile.rwe.com
ukrga.rwenpower.com
info-securelogin.rwe.com
lyncweb.rwe.com
info-isp.rwe.com
login.rwe.com
mars.rwe.com
druckcockpit.rwe.com
gfh-portal.rwe.com
access02.rwe.com
rdsgw.tgb.rwe.com
sup.rwe.com
inubit-test.rwe.com
acc-login.rwe.com
ecoflex.rwe.com
esourcing.rwe.com
epos-marktplatz.rwe.com
bee360.rwe.com
sip.rwe.com

Certificate

The complete raw certificate details for lyncweb.rwe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA397BYMNNZW8mPWQk+fPn
XOGQhh5/x34tbnzmUIzRLb8rppNA8YnOdKaW9ZNklTj4M2/hGuOzQla6odBJejje
wrKJf76qXV2JclJd/CU15sshqIRxX9/rLTiCie6ucK+JI4i2cm/6Plmdl1eio7dS
pR12WBmnfmOoq9dpEhvLl918bNIcYmPbIeLDYUlPnd2tk9U+/s3cyL9K2tgx1bVz
LyF3ConDorfF89+nO3wFWvIxgbm7X/9iqU8AxnHv3avXBfOUqhdXAHAjS5e5sqaP
sKmwZZF+rEI4iaK9oHtzhbZujPaLKaetgzDK4qNpD7AAeHDYQY52uYm6pDEZEE6f
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9682237057000644962586286715587052607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innogy SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AFT-IU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncweb.rwe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28260986780628303747828237123136261123166624232464271848502112228364465253741964791853636372843013627165922790869854011119913122468345289569926649941167048643281604971860449577539268777978660201799088174319038519345453706799026189367728726673110770714652758989725208630086699892168567899764854258661918129795079741952286183822282806748211310931850931533697737514024544746975837824155534366843020444573877019155935550005945521352170549241301314644151554075680324315472389381783817373437008296750877962641362193239616687440339756047512102183126623205664870817420295263645374380355255765545858367857757883970674827894711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f167ef0d390c83c11c249baf992fe0895d34633
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.innogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.rwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.westnetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.essent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.rwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.innogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.innogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rwe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.westnetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.essent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbweb01.innogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbweb01.rwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncweb.rwe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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