wacert.fiatitem.com

- Fiat Group Automobiles S.p.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:ff:96:e3:70:98:fd:8b:73:bc:34:2a:f6:25:cd:e5 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fiat Group Automobiles S.p.A.

Organization: Fiat Group Automobiles S.p.A.
Organization unit: FCA ITEM
Locality: Torino
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ff:96:e3:70:98:fd:8b:73:bc:34:2a:f6:25:cd:e5
Serial Number (int): 14619376037856253418610834555628015077
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bc:24:fa:5a:a2:d9:62:67:e9:84:01:30:0a:73:30:24:f0:68:73:b5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6e:d8:b2:02:bd:c9:3e:70:2c:95:5f:1d:32:f3:68:d9:5e:59:13:2b
Fingerprint (sha256): a9:d8:ea:a4:ff:72:10:52:0f:aa:d7:27:63:d1:6e:02:a4:23:46:fb:e6:73:12:dd:ae:65:52:5b:af:a2:87:7a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate wacert.fiatitem.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wacert.fiatitem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wacert.fiatitem.com

Other certificates including the domain name fiatitem.com

(limited to 100 certificates)
vpnssl.fiatitem.com
fex.fiatitem.com
mose.fiatitem.com
rdsc4t.fiatitem.com
otrsitem.fiatitem.com
fwauthfi.fiatitem.com
lab.maserati.tss.fiatitem.com
mose-cert.fiatitem.com
rdsc4t.fiatitem.com
www.appl1.fiatitem.com
mose.fiatitem.com
mose.fiatitem.com
vpnssl.fiatitem.com
lab.fca.tss.fiatitem.com
ws.tss.fiatitem.com
edocma.fiatitem.com
mose.fiatitem.com
vpnssl.fiatitem.com
irise.fiatitem.com
otrsitem.fiatitem.com
vpnssl.fiatitem.com
lab.fca.tss.fiatitem.com
lab.fca.tss.fiatitem.com
mosefsa.fiatitem.com
vdi.fiatitem.com
fwauthfi.fiatitem.com
email.fiatgroup.com
dcsupport.datacenter.fiatitem.com
email.fcagroup.com
bug.maserati.tss.fiatitem.com
ws-bug.tss.fiatitem.com
mose.fiatitem.com
cartsan.fiatitem.com
vpnssl.fiatitem.com
mose.fiatitem.com
fex.fiatitem.com
www.appl1.fiatitem.com
dcsupport.datacenter.fiatitem.com
email.fcagroup.com
ws.tss.fiatitem.com
ws.tss.fiatitem.com
irise.fiatitem.com
www.appl1.fiatitem.com
edocma.fiatitem.com
otrsitem.fiatitem.com
lab.fca.tss.fiatitem.com
cartsan.fiatitem.com
www.appl1.fiatitem.com
fex.fiatitem.com
epm11.fiatitem.com
bug.maserati.tss.fiatitem.com
lab.fca.tss.fiatitem.com
fex.fiatitem.com
ADPIPCP.fiatitem.com
lab.maserati.tss.fiatitem.com
fex.fiatitem.com
auth.fiatitem.com
irise.fiatitem.com
otrsitem.fiatitem.com
fex.fiatitem.com
ixp.fiatitem.com
fwauthfi.fiatitem.com
mose-cert.fiatitem.com
www.appl2.fiatitem.com
vdi.fiatitem.com
dcsupport.datacenter.fiatitem.com
mose.fiatitem.com
bug.fca.tss.fiatitem.com
bug.fca.tss.fiatitem.com
ws.cnhi.tss.fiatitem.com
ixp.fiatitem.com
bug.fca.tss.fiatitem.com
lab.ferrari.tss.fiatitem.com
cartsan.fiatitem.com
dcsupport.datacenter.fiatitem.com
lab.fca.tss.fiatitem.com
mose-cert.fiatitem.com
dcsupport.datacenter.fiatitem.com
auth.fiatitem.com
email.fcagroup.com
idash.fiatitem.com
wacert.fiatitem.com
bug.fca.tss.fiatitem.com
mose.fiatitem.com
irise.fiatitem.com
ws.tss.fiatitem.com
ws-lab.tss.fiatitem.com
dcsupport.datacenter.fiatitem.com
mose-cert.fiatitem.com
www.appl2.fiatitem.com
ws-bug.tss.fiatitem.com
mose-cert.fiatitem.com
bug.fca.tss.fiatitem.com
lab.fca.tss.fiatitem.com
fex.fiatitem.com
email.fcagroup.com
mose.fiatitem.com
fwauthfs.fiatitem.com
mose-cert.fiatitem.com
www.appl1.fiatitem.com

Certificate

The complete raw certificate details for wacert.fiatitem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIQCv+W43CY/YtzvDQq9iXN5TANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNTIyMDAwMDAwWhcN
MTkwNjE5MTIwMDAwWjB3MQswCQYDVQQGEwJJVDEPMA0GA1UEBxMGVG9yaW5vMSYw
JAYDVQQKEx1GaWF0IEdyb3VwIEF1dG9tb2JpbGVzIFMucC5BLjERMA8GA1UECxMI
RkNBIElURU0xHDAaBgNVBAMTE3dhY2VydC5maWF0aXRlbS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4T8vli2W9y1nQP5pXJqj7magjbdCnlPW6
yREyYSQnpfB3ILwIjiv+QGGR2XIx9/pIuVSQUkugTC1pRjO5zBkrKts4XM3FKnAO
1KIY3MrZzuMh6wk8Z5M4tb62OLesAEEWwnkNlnN1DXTZf/NyKUt9SMnOUlfW6jte
axPTre7GtHAopnsrfchMTvVkNsuMyUshi1fW97L2MEkHtmnSq8bMwsI7v6quHsor
f8d4t8js2pEfOvh69XcDO7H5YbM/6kU586YFiPyuj+LsEw3jLDROcjl3xKhCEV92
31LdpLC9Z45UqIwwgLmo+nlhz/rBwTmyp2PmbOCcvcPjY/cvlksfAgMBAAGjggHs
MIIB6DAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU
vCT6WqLZYmfphAEwCnMwJPBoc7UwHgYDVR0RBBcwFYITd2FjZXJ0LmZpYXRpdGVt
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9z
c2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
c3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsG
AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8
BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0
LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp
Z2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdKY2ISHcpGGkJov3mX4G7
Tk4cNSEHHO7cCYwLeGIlQ3RLVcLduUmrSx9U5M8Ebb7Z18ZQeQGVPHW01c3UeppO
9b7BPv6nI0aHVc8GfzWiGjmSsrBwB2U4iOdntXUMP7Yn/v0t3w66fl4fmPJfD2LT
EsxSKLN0RLalvj4bl0Uv/2e00fzKPx+h7EwDn4nZiWeVjXaN6sVV4U9etHvgPzIn
ZtLNfPYEo4R3QgiIyZ07x22yMrxYPgVFz16ji1hQwHR83boKDShe5sP0g+NRfPEx
XqDalalc9FAH/TyWyORy9MdlqjFjbQghSz1fBnMeZiRmLcOmOYZr1qkZUX6kfwcI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE/L5YtlvctZ0D+aVyao
+5moI23Qp5T1uskRMmEkJ6XwdyC8CI4r/kBhkdlyMff6SLlUkFJLoEwtaUYzucwZ
KyrbOFzNxSpwDtSiGNzK2c7jIesJPGeTOLW+tji3rABBFsJ5DZZzdQ102X/zcilL
fUjJzlJX1uo7XmsT063uxrRwKKZ7K33ITE71ZDbLjMlLIYtX1vey9jBJB7Zp0qvG
zMLCO7+qrh7KK3/HeLfI7NqRHzr4evV3Azux+WGzP+pFOfOmBYj8ro/i7BMN4yw0
TnI5d8SoQhFfdt9S3aSwvWeOVKiMMIC5qPp5Yc/6wcE5sqdj5mzgnL3D42P3L5ZL
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14619376037856253418610834555628015077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fiat Group Automobiles S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FCA ITEM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wacert.fiatitem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23267197220324669159683389626731581803918866355345783170165952119657560717155839542933886980930673238742099173882398452904857922718246075907509692848633408663784106092442993590026208184775412628415106082578880597812833892859656401278444909899662859831124662073236101803855269859658955316558474662363732536657390410657295592765223477573507712110023475479572883622596385450484770364852807486341970996640378370623925271676941427118844206540627061903620754639673207711038440194112605337666306546619111648902692455656249093292402849089310328592941582177122960238029397834083057134807098210461301851023993652019327348919071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc24fa5aa2d96267e98401300a733024f06873b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wacert.fiatitem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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