*.thesims3.com

- Electronic Arts, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:c8:8b:8d:48:45:c9:a4:f3:60:74:30:a7:6b:3f:16 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
State / Province: CALIFORNIA
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c8:8b:8d:48:45:c9:a4:f3:60:74:30:a7:6b:3f:16
Serial Number (int): 6358201803319739937938340814181318422
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 41:20:67:b8:28:25:34:17:17:27:e1:66:f0:d8:a8:79:50:37:e5:96
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 24:f2:f2:ce:b4:64:37:92:55:2e:eb:95:d4:0b:bf:f4:01:5a:4e:33
Fingerprint (sha256): b0:7f:19:45:b6:37:73:70:8c:0c:3a:9c:cc:12:5e:fb:37:88:cc:e1:3c:15:ff:56:db:4f:be:c6:9e:4d:fc:6f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate *.thesims3.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.thesims3.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.thesims3.com
*.store.thesims3.com

Other certificates including the domain name thesims3.com

(limited to 100 certificates)
igs.thesims3.com
*.thesims3.com
*.thesims3.com
xroads.thesims3.com
lvlt.store.thesims3.com
llnw.igs.thesims3.com
*.thesims3.com
lvlt.store.thesims3.com
www.origin.com
wildcard.thesims3.com
mypage.thesims3.com
lvlt.store.thesims3.com
*.store.thesims3.com
checkout.preprod.mobile.thesims3.com
mypage.thesims3.com
lvlt.store.thesims3.com
checkout.preprod.mobile.thesims3.com
*.thesims3.com
*.store.thesims3.com
lvlt.store.thesims3.com
*.thesims3.com
dlc-cdn.scorpion-ea.com
forum.thesims3.com
cdn.stagea.easports.com
xroads.thesims3.com
*.thesims3.com
*.thesims3.com
*.thesims3.com
*.thesims3.com
dlc-cdn.scorpion-ea.com
staging.store.thesims3.com
mypage.thesims3.com
lvlt.store.thesims3.com
dlc-cdn.scorpion-ea.com
lvlt.store.thesims3.com
mypage.thesims3.com
dlc-cdn.scorpion-ea.com
lvlt.store.thesims3.com
*.thesims3.com
*.thesims3.com
lvlt.store.thesims3.com
*.thesims3.com
mypage.thesims3.com
lvlt.store.thesims3.com
*.thesims3.com
xroads.thesims3.com
*.thesims3.com
lvlt.store.thesims3.com
lvlt.store.thesims3.com
*.thesims3.com
lvlt.store.thesims3.com
forum.thesims3.com
igs.thesims3.com
www.origin.com
store.thesims3.com
igs.thesims3.com
igs.thesims3.com
lvlt.store.thesims3.com
*.store.thesims3.com
xroads.thesims3.com
igs.thesims3.com
forum.thesims3.com
*.thesims3.com
mypage.beta.thesims3.com
*.thesims3.com
llnw.store.thesims3.com
lvlt.store.thesims3.com
mypage.thesims3.com
*.thesims3.com
lvlt.store.thesims3.com
*.thesims3.com
*.store.thesims3.com
*.thesims3.com
llnw.igs.thesims3.com
lvlt.store.thesims3.com
store.thesims3.com
*.thesims3.com
lvlt.store.thesims3.com
llnw.store.thesims3.com
*.thesims3.com
igs.thesims3.com

Certificate

The complete raw certificate details for *.thesims3.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzTCCBbWgAwIBAgIQBMiLjUhFyaTzYHQwp2s/FjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjMwNzE1MDAwMDAwWhcN
MjQwODE0MjM1OTU5WjByMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ0FMSUZPUk5J
QTEVMBMGA1UEBxMMUmVkd29vZCBDaXR5MR4wHAYDVQQKExVFbGVjdHJvbmljIEFy
dHMsIEluYy4xFzAVBgNVBAMMDioudGhlc2ltczMuY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAvlAOgHqBLUJPf2vkwd6xeeT8lkCEywnpVsnvOoI3
BlFl4GUzNQUDrH/7Ha1J+o5ZJqOVDau0Gihh6C9/MTUCrmSl6dpo2cI4uZi650Dj
w1jmRPKZH8rf5fsf05xuyCp91EHnLsIwAoU3BqP6xExPuG9VD32JNbLjxCZ0LLlz
xyN65WLK0P6HneVVruZ6K4/8BWRRaU0A9sphUqRMYbq35MBL6jKJwZl3YbWTYj4n
CtJtOdbkRZFw+IDP5pKY/Lds9yfjgkgmxWAkDY55EOqpfPSCxsTUbCLei/WrZJQw
Y+BosFfRIijbngRdApmA2Dvfbzsnw2x9nH1DMjeX0IE/IQIDAQABo4IDgjCCA34w
HwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFEEgZ7go
JTQXFyfhZvDYqHlQN+WWMC8GA1UdEQQoMCaCDioudGhlc2ltczMuY29tghQqLnN0
b3JlLnRoZXNpbXMzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6Ly9jcmwz
LmRpZ2ljZXJ0LmNvbS9EaWdpY2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS0xLmNybDA/
oD2gO4Y5aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2ljZXJ0U0hBMlNlY3Vy
ZVNlcnZlckNBLTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUH
AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB+BggrBgEFBQcBAQRyMHAw
JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBIBggrBgEFBQcw
AoY8aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3Vy
ZVNlcnZlckNBLTIuY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSC
AWsBaQB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiVemh+AA
AAQDAEYwRAIgLnrnvVN68npseaoh01oyskf74xYVpHfeFxyr5kQSBVQCIFml86+1
TbRP5id3JX88CZqMEjkpvBVQsHp4N213CMgvAHcASLDja9qmRzQP5WoC+p0w6xxS
ActW3SyB2bu/qznYhHMAAAGJV6aHuAAABAMASDBGAiEAgxkmj8Aafg065sGc2igE
y3U/9bBdoL7kLWkTHROPzxsCIQD+r23LjgeMDKF2GnfZSKVlEiVni3RwZmeEOvgQ
rj23gAB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiVemh0AA
AAQDAEgwRgIhAPN7LzNREd/hqR0CcT3LK/nNbwa9ZW2KXD9RDWbWeDYEAiEA0MlN
UQUTlPh0dYNy3uTl3CaKzqj46gjfWHCKhaHlupMwDQYJKoZIhvcNAQELBQADggEB
AL9lO9mXFWGfGVySmHe1QLCb4vuEdJWcz074rUP3IOUJr7w1Q5hJHDpT5frNd4i4
HzK0xkaHk4EMo4Tpl5EaZwSW/npCZzGxS04m8Y/GeUuHFa7VrP6Gjqkz/BjbRdnc
7N3P14hdsu3QAYxY7ar+H3tIGp/lPj1DUqmihXMzUY6AiGUQY+SyPVIgF46KLN+O
fDmH3cEY5qpDd6G+foV29vBEED1EVbSRDPVjyqGg+ClANtMADh92MgQC6quFHZxX
iHW7iYWklUpKGQ/4vP0aBGa13roPM3EXqW4iSLBSBy9tu1+fs3b8vmPoMIs06S7g
YgdLnVr0rB+ZhXVu+LGnMa4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlAOgHqBLUJPf2vkwd6x
eeT8lkCEywnpVsnvOoI3BlFl4GUzNQUDrH/7Ha1J+o5ZJqOVDau0Gihh6C9/MTUC
rmSl6dpo2cI4uZi650Djw1jmRPKZH8rf5fsf05xuyCp91EHnLsIwAoU3BqP6xExP
uG9VD32JNbLjxCZ0LLlzxyN65WLK0P6HneVVruZ6K4/8BWRRaU0A9sphUqRMYbq3
5MBL6jKJwZl3YbWTYj4nCtJtOdbkRZFw+IDP5pKY/Lds9yfjgkgmxWAkDY55EOqp
fPSCxsTUbCLei/WrZJQwY+BosFfRIijbngRdApmA2Dvfbzsnw2x9nH1DMjeX0IE/
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6358201803319739937938340814181318422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CALIFORNIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.thesims3.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24024755347986877249266378179691903011557417707419126838039092585422508902883949560280491380454763368672764367466460196662938969822998233519593226621038252944539778255955594577601558180609316715729875059957736854831554411430191391637304720009412310209433417035024752038010140787158064104399010273460446747419977058294981397118203997138740804575026535976255850091665819961211530002937902116890368624204973640134529748550075460481711054352281865283084801487516117827162956733991441584915786648259192580038439484201776240768481253732001596956741553432210531782396534041041544188227559127482129386683822647043227853602593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							412067b8282534171727e166f0d8a8795037e596
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesims3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.thesims3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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