vcaballet.vancleefarpels.com

- Richemont International SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:60:58:4a:0d:81:b2:20:16:0b:c6:82:c9:1d:93:75 was issued on by DigiCert Inc.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
State / Province: Genève
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:60:58:4a:0d:81:b2:20:16:0b:c6:82:c9:1d:93:75
Serial Number (int): 20438671154302326679980438603289170805
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2e:d9:50:15:16:3d:be:e5:3e:22:97:29:cf:8a:9a:9c:4a:8e:6a:d6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 41:7f:ff:3c:35:f1:40:87:b1:65:68:4b:23:31:27:3c:d5:98:6f:4c
Fingerprint (sha256): ab:42:3d:de:12:4d:61:ba:79:b4:a2:f7:ce:99:5f:9a:29:0b:20:82:75:03:91:5e:b7:82:31:41:69:82:9b:a3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate vcaballet.vancleefarpels.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vcaballet.vancleefarpels.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vcaballet.vancleefarpels.com
www.vcaportal.com
www.vancleefarpels.com
www.vancleefarpels.cn
www.vancleefarpels-event.com
www.lecolevancleefarpels.com
www.lecolevancleefarpels.cn
www.dancereflections.vancleefarpels.cn
www.dancereflections-vancleefarpels.com
www.dancereflections-vancleefarpels.cn
whenelegancemeetsart.vancleefarpels.com
weboutique.vancleefarpels.com
vod-video.vancleefarpels.cn
vancleefarpels.com
us.lecolevancleefarpels.com
tracking.vancleefarpels.com
timenaturelove.vancleefarpels.com
payment.vancleefarpels.com
mediastorage.vancleefarpels.com
media.weboutique.vancleefarpels.com
me.lecolevancleefarpels.com
maisonstory.vancleefarpels.cn
jp.lecolevancleefarpels.com
i-video.vancleefarpels.cn
hk.lecolevancleefarpels.com
fr.lecolevancleefarpels.com
e-video.vancleefarpels.cn
diamondcheck.vancleefarpels.com
demainsenmains.vancleefarpels.com
d-video.vancleefarpels.cn
cn.vancleefarpels.com
careers.vancleefarpels.com
ca-video.vancleefarpels.cn
c-video.vancleefarpels.cn
blob-video.vancleefarpels.cn
bjexpo.vancleefarpels.com
api.weboutique.vancleefarpels.com
360workshopsvisit.vancleefarpels.com

Other certificates including the domain name vancleefarpels.com

(limited to 100 certificates)
secure.cn.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
dam.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
presslounge.vancleefarpels.com
linemedia.preprod.richemont.com
media.richemont.com
www.vancleefarpels.com
www.preprod2.vancleefarpels.cn
diamondcheck.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
media.richemont.com
vcaballet.vancleefarpels.com
weboutique.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
intranet.staging.richemont.com
www.lecolevancleefarpels.com
intranet.quality.richemont.com
vcaballet.vancleefarpels.com
secure-www.vancleefarpels.com
weboutique.dev.vancleefarpels.com
intranet.dev.richemont.com
www.vancleefarpels.com
intranet.staging.richemont.com
8-seconds-of-luck.vancleefarpels.com
vcs.richemont.com
diamondcheck.vancleefarpels.com
intranet.richemont.com
linemedia.preprod.richemont.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
sihh2014.vancleefarpels.com
media.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
yps.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
secure.www.vancleefarpels.com
intranet.richemont.com
vcaballet.vancleefarpels.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
intranet.staging.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
intranet.richemont.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
linemedia.preprod.richemont.com
whenelegancemeetsart.quality.vancleefarpels.com
sihh2016.vancleefarpels.com
intranet.richemont.com
presslounge.vancleefarpels.com
api.weboutique.quality.iwc.cn
sihh2014.vancleefarpels.com
intranet.richemont.com
wwsip.richemont.com
sihh2016.vancleefarpels.com

Certificate

The complete raw certificate details for vcaballet.vancleefarpels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDn4OcUv4/t7cQyOAQWn
jpZW8/6QFQxhdFO6I46NP2ELfzvOoFfGId8Z9Rog1BVUUVFP3T8w0o4+qJwRZ29p
/QJVH/+qZwqoBB2rrYVFpkVsrq7BPxIO34HHk47k//Zui6LqosifkyyHVzk/h4qo
Vn0M5EJPaF8HdFc8nXeqxg1Fbc8igWTXn/1+4UGI84OosRnAyoDdSk/f2u5pNQQR
Onwa53p7UPtyURLjhY/jCATg9V/vZmUrbYQdO4KJlxRjps4QcJCallt1PhE9ktpZ
7ybK1g5xK0wX6+FsPlijyElIgEHiPMT/KGe900BRmAO0jWnXJ438sH4pnH8czibJ
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20438671154302326679980438603289170805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcaballet.vancleefarpels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22751480784596030671308300533366084652755127260160309551981075814508732646827999274042553597710819746244405375111357425928138882561691751794115205901773164992209121426118685789917666873945566690797070944377495003428644250003218188573400961054185545727318384472707856003018277655404435064760390037690263471609732223767299839059140513269153094722160999783853732592159939819709076035995092623578744182923280316252159288057042807188261304841299773887649148959946454085922673277736434365555759776980633907446575990943415497534117554145787619869014129271195771432251195583436847593319735252293666933105763171782877812017543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ed95015163dbee53e229729cf8a9a9c4a8e6ad6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vcaportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecolevancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections-vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections-vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vod-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timenaturelove.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastorage.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisonstory.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondcheck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demainsenmains.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blob-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360workshopsvisit.vancleefarpels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181d45800a6000004030047304502204633546a584d24b3e9aae9301888dbbf44e6007f1f3e99f43911ec1c7b3b6276022100ea28e1ac9d4b9310753a7f8a2e0a043872ac7fe7a8964e24b54b94817d32831a00760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e500000181d45800d30000040300473045022100a71bb0d96dea6b88d2982a6d784cb783810fc584ecb6c3ef8b5e54ded7d1641102204adba07e505233fa6cd00ccccbf5a60bfff361b2eb3513e0382453c84dda3e3500760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181d4580070000004030047304502205040c409db546eb715b104d0d4f98389207ab7b1d7b58ca39d529a2604474677022100f265b5163861d93bc455353b4a63e8f81b667cf61531c21f304572fa6c306dbb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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