investAka2.investorhq.businesswire.com

- Business Wire, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:ec:06:d9:3b:5a:5d:6f:53:af:06:c2:38:98:30:55 was issued on by DigiCert Inc.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Business Wire, Inc.

Organization: Business Wire, Inc.
Organization unit: HQ
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:ec:06:d9:3b:5a:5d:6f:53:af:06:c2:38:98:30:55
Serial Number (int): 18505484909155873310392710996451405909
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e0:30:e8:67:08:cb:62:11:d4:de:96:f2:a4:fe:d7:4f:c1:50:0c:2d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c7:14:cb:fb:8f:ef:b3:07:4f:89:e3:e2:2c:a8:d2:4a:ec:39:4a:2c
Fingerprint (sha256): b7:88:38:34:6a:26:63:3a:d0:01:bb:19:1c:56:f2:6c:b8:8c:d5:71:1a:85:ee:64:36:9f:d8:0c:6c:3c:c2:d6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate investAka2.investorhq.businesswire.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for investAka2.investorhq.businesswire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

investAka2.investorhq.businesswire.com
www.pacificcoastoiltrust.com
www.envivapartners.com
ir.williams-sonomainc.com
ir.vishay.com
ir.standex.com
ir.pavm.com
ir.kindermorgan.com
ir.eqtmidstreampartners.com
ir.eqt.com
ir.eqm-midstreampartners.com
ir.envivapartners.com
ir.envivabiomass.com
ir.eclipseresources.com
investors.servicemaster.com
investors.jernigancapital.com
investors.gannett.com
investorrelations.granaymontero.com.pe
investorrelations.bebe.com
investor.zoetis.com
investor.williams.com
investor.voxeljet.com
investor.usdpartners.com
investor.usa-truck.com
investor.tremorvideo.com
investor.tenethealth.com
investor.telaria.com
investor.pumabiotechnology.com
investor.pseg.com
investor.protective.com
investor.orioncarbons.com
investor.mixtelematics.com
investor.mckesson.com
investor.maximus.com
investor.knighttrans.com
investor.knight-swift.com
investor.jalexandersholdings.com
investor.hcahealthcare.com
investor.ff-inc.com
investor.emsc.net
investor.eagleus.com
investor.cloudpeakenergy.com
investor.catalent.com
investor.caleres.com
investor.amberroad.com

Other certificates including the domain name businesswire.com

(limited to 100 certificates)
bw-webproxy-v1.dev.aws.businesswire.com
platform.int.aws.businesswire.com
acsc2.businesswire.com
membership.businesswire.com
*.test.businesswire.com
careers.businesswire.com
platform-internal.test.aws.businesswire.com
pr.businesswire.com
careers.businesswire.com
api-docs-web-v2r1.int.aws.businesswire.com
ir.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
news-search.aws.businesswire.com
platform.dev.aws.businesswire.com
mtadmz2.nyprod.businesswire.com
platform-internal.dev.aws.businesswire.com
interactive.businesswire.com
*.businesswire.com
newstrak-testing.dev.aws.businesswire.com
*.hqprod.businesswire.com
pr.businesswire.com
platform-internal.int.aws.businesswire.com
*.businesswire.com
platform-duffytest.sandbox.aws.businesswire.com
*.test.newshq.businesswire.com
www-origin.staging.aws.businesswire.com
yahoo-feed.aws.businesswire.com
apidocs.int.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com
connect.businesswire.com
resources.businesswire.com
es.dev.aws.businesswire.com
platform-v2.dev.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
etools.osimail3.us
snrtrak.aws.businesswire.com
www.businesswire.com
membership.businesswire.com
secure.businesswire.com
newsroom.businesswire.com
api-docs-web-v2r1.dev.aws.businesswire.com
www-origin.dev.aws.businesswire.com
platform.aws.businesswire.com
*.newshq.businesswire.com
www.businesswire.com
careers.businesswire.com
*.investorhq.businesswire.com
blog.businesswire.com
etools.osimail3.us
platform.prod.aws.businesswire.com
apidocs.int.aws.businesswire.com
*.newshq.businesswire.com
snrtrak-proxy-v1.dev.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
access.businesswire.com
www.test.businesswire.com
platform-internal.int.aws.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
platform.sandbox.aws.businesswire.com
platform.sandbox.aws.businesswire.com
test-aws.businesswire.com
services.businesswire.com
odysseyresorts3.test.newshq.businesswire.com
tradeshow.businesswire.com
go.sandbox.aws.businesswire.com
newsroom.businesswire.com
etools.osimail3.us
bw-webproxy-v1.test.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
*.qa.investorhq.businesswire.com
*.test.investorhq.businesswire.com
*.newshq.businesswire.com
etools.osimail3.us
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
*.test.newshq.businesswire.com
newsroom.businesswire.com
mtadmz1.scprod.businesswire.com
apidocs.int.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
platform-internal.int.aws.businesswire.com
newsroom.businesswire.com
akamai-logs-v2r1.dev.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
cmwb-e.test.investorhq.businesswire.com
education.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
investAka2.investorhq.businesswire.com
connect5.dev.aws.businesswire.com
education.businesswire.com
platform-internal.int.aws.businesswire.com
www.businesswire.com
av.dev.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com

Certificate

The complete raw certificate details for investAka2.investorhq.businesswire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxqGJi+zX3vKaDmGxrBG
JR109sN9IEn/1ZMMvzxo3tzHx194AoBylkcmpdqh1cwMnh1dKrDTLMVMYzzfFRN3
Mzhk4O1niCeEhHTAkkoE1Fy2KmZKtnvbp0qkYjVrsZ7VjfoXNOy7UjL/zgOz9aWi
gOYZktV3Pqns8yWk2yP4vO/dWiwklYDGfLei4y2MsP5KrrcNeYKH9AS5RCGqX87G
VTqSOjWbE0/l5rm8Dbiixzk3xfhCcPbesf3sBZAq/5xRSLZnu9K6pAu/jU9k32oG
uCMWLFGUoil2Ilri5dDJBRTE4M0AXhxQXF2AkZvC/XCAHhV+SxfdLh3AJLKYuUTM
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18505484909155873310392710996451405909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Business Wire, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'investAka2.investorhq.businesswire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20084969971431645158714836796802012635460282723346213943883526592364890978474799182868844215549899387404897270865471455776603848215772998039015006350327919248998895159276610934787832316791814342482055511136204496359096233971354533770276836363435461683207870873160100488922799326047405213728277894097991302025923934788444309405939772902686893308974721249225633899783282857352769028660351949666356629291328540916595318985964139831705477928614598857515207423029523594224383972089541308385208108066238664239939174870697093897666870868140510818117014126634537504678345798088132546966593456660085297061687368025914917309681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e030e86708cb6211d4de96f2a4fed74fc1500c2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investAka2.investorhq.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificcoastoiltrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envivapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.williams-sonomainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vishay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.standex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kindermorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eqtmidstreampartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eqm-midstreampartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.envivapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.envivabiomass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eclipseresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.servicemaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jernigancapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gannett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.granaymontero.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.bebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.zoetis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.williams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.voxeljet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.usdpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.usa-truck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tremorvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tenethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.telaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pumabiotechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pseg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.protective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.orioncarbons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mixtelematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mckesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.maximus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.knighttrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.knight-swift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.jalexandersholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.hcahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ff-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.emsc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eagleus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cloudpeakenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.catalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.caleres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.amberroad.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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