Zone Media OÜ

- Zone Media OÜ -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0b:3b:ca:61:04:90:db:fb:2b:29:b8:ba:4e:72:2d:8d was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Zone Media OÜ

Company registration number: 10577829
Organization: Zone Media OÜ
Address: Lõõtsa 5
Locality: Tallinn
Country: EE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:3b:ca:61:04:90:db:fb:2b:29:b8:ba:4e:72:2d:8d
Serial Number (int): 14931958201572395141904178822482374029
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: eb:8a:54:06:ae:a8:17:b5:18:94:5c:69:8b:84:01:c3:04:c4:88:d2
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 89:e3:e9:4c:02:72:bb:52:b0:67:ad:e1:8f:3e:b4:98:38:3a:6c:f8
Fingerprint (sha256): bc:76:9c:6c:53:2d:68:d5:6c:d5:5f:ad:5d:67:33:89:09:51:2e:01:41:ab:6c:07:a7:bf:f5:b8:20:a4:cf:db

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Zone Media OÜ

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Zone Media OÜ

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zone.ee
zone.ee

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Zone Media OÜ in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILWzCCCUOgAwIBAgIQCzvKYQSQ2/srKbi6TnItjTANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjIxMTE2MDAwMDAwWhcNMjMxMTE2MjM1OTU5WjCB/TETMBEGCysGAQQBgjc8
AgEDEwJFRTEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUT
CDEwNTc3ODI5MQswCQYDVQQGEwJFRTEQMA4GA1UEBxMHVGFsbGlubjETMBEGA1UE
CQwKTMO1w7V0c2EgNTEXMBUGA1UECgwOWm9uZSBNZWRpYSBPw5wxFzAVBgNVBAMM
DlpvbmUgTWVkaWEgT8OcMR8wHQYKKwYBBAGDnl8BDRMPUmVnaXN0ZXJlZCBNYXJr
MRIwEAYKKwYBBAGDnl8BAxMCRU0xGTAXBgorBgEEAYOeXwEEEwkwMTgwMTk4MTAw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHdunD4ZDoxfs3j9Icegh
ZgjKMxdsAecLgRlZtMwZ4VOjXcoQKkSMOPzSMoJs9N48gUR0OLLK4lV3AW5b13MM
365hySVY0E1jg4GiuQyPapfqw2WtAya7v91HQ+G3/WC1YD5IODwuOgnHSZqHs5//
a4r7sVETBA+4uPaamlxkmKN1HLgerebOUhW8UEAPUXpWpHgFN0I/WlZApbgG8BOD
yK/fzBCVUbbwRJ2bRfKYb5hggt0ofPiSbD2q2nk+RwNg8SWTKpTcaiKr7R9mTXkp
UtGyl/VW6IerYBTq2rxZtMiOJaJXMxbv/4UL6zt3QIvm+YLBZgtGFqj0r8yqXtAt
AgMBAAGjggZyMIIGbjAfBgNVHSMEGDAWgBS+n72NV22Vta1jw5dOq6iEXToH9TAd
BgNVHQ4EFgQU64pUBq6oF7UYlFxpi4QBwwTEiNIwHwYDVR0RBBgwFoILd3d3Lnpv
bmUuZWWCB3pvbmUuZWUwEwYDVR0lBAwwCgYIKwYBBQUHAx8wgaUGA1UdHwSBnTCB
mjBLoEmgR4ZFaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VmVyaWZp
ZWRNYXJrUlNBNDA5NlNIQTI1NjIwMjFDQTEuY3JsMEugSaBHhkVodHRwOi8vY3Js
NC5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJpZmllZE1hcmtSU0E0MDk2U0hBMjU2
MjAyMUNBMS5jcmwwUAYDVR0gBEkwRzA3BgpghkgBhv1sAAIFMCkwJwYIKwYBBQUH
AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAMBgorBgEEAYOeXwEBMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIaHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0VmVyaWZpZWRNYXJrUlNBNDA5NlNIQTI1NjIwMjFDQTEu
Y3J0MAwGA1UdEwEB/wQCMAAwggP4BggrBgEFBQcBDASCA+owggPmooID4qCCA94w
ggPaMIID1jCCA9IWDWltYWdlL3N2Zyt4bWwwIzAhMAkGBSsOAwIaBQAEFHYJAYWg
6zFkxkTbqgxM5gOZuR2xMIIDmhaCA5ZkYXRhOmltYWdlL3N2Zyt4bWw7YmFzZTY0
LEg0c0lBQUFBQUFBQUNwMVR3VzdiTUF3OUwxL0JhYWNCa2l6SmttSUhkb3ExSzdv
Q0NWWmdRQTY3cFlrYkcvUHNJSEdjck4reXY5bVBqWlRYTm9laWh4a3dRVDJTajQr
VW5WMmNmdGJRRjd0OTFUWTUwMUl4S0pwVnU2NmFUYzRPM1lOSTJNVjBsTDBYQW02
S3B0Z3R1M1kzZ1UvcjlyNkEyN28rN0xzQWdYSFN5SmpEdDhVTlhKKzI3YTZEdS9x
d0ViY055QUF1aGg0VDhGSXB1RHhVOVJyVVJ3QWhrSDdmYjg1RkdBYjN5MzF4dDJz
ZnFycklXVmMxdjhSMnp3REZOdnZKcWE2YUh6a3J1MjQ3aWFMajhTaVBzV3gzbTBp
bmFScUZLSU8rS282WDdTbG5DaFE0RmQ1L0JLK1ZHcVZVaERMWWRBU1FkVlZYRjlQ
dmJWUEF2RmhYUy9qNjUzY1dEZWdvMjB4SDc3THRzaXNCNWRVNSszQjlxVDhieDJD
ZHMzbmlwT1VtU2FXZmVjMk5qV1ZTYXkyZDhGTFh4bUxRT3BuTVh0SWVZZTZ0eEZU
bnBhK0ZTZVdZWTBadHBPUGFrSU9Jb0pxWHRFZkFaNjdWR0hPTkdXT1NvS0RBZklj
VVQ1V2hnTERaV1NyMlN4VTN5a20zVXFqS0NDZFFZUHhpVm9SeUZYdytCRGtaN0xs
U25HS09QNFBCWENXT0crMnhCVkVqTWpqVWcwSDAxcnFNU3BERE9DMXRMWnlUS2Rj
NGJ1bGRyMk1abDhMaGFTVlFOdW1oRWIyMGc0TW1EZ09NdWNVRjRaaUdheVZUb1du
bFJDV0lDa1dYd3NmUzl4U0l2NkNvVmFEanhJTFQyTUVodWl1REZRWXZ6WkltVFpk
bGJJckpaeXBoYnBLRWtzWmE2bEpZVDh5eGxhNGtkeEhnNFhwaXBRT0JEanBUMUpN
SVBTWlpUNllVOFpqV2pURWFEeEUrcEhBeVBmMVR1SENLSnZ3WkRxWU1oYUV1bk1X
UUVJcXg5eUoweFp1T0UwM3kzOVRnVE85cEZscFBMeXd1cDhTdjF2YkJJM0IyeG5M
dUk3OTFZVEhETGx3c0hUYkhSU3ZwU3pvTk94OGlyOEEya2NsL1RVK0Z3NnBuWndv
ZXc3ZVdSUnN5K0M5UC93S0dsbmRaM2dRQUFBPT0wgYsGCisGAQQB1nkCBAIEfQR7
AHkAdwBVWVOuMJYAgGzS61IIpsmekxgorBBWtEIcVTYVTF91rAAAAYSA8oFxAAAE
AwBIMEYCIQDglCF3keQuAOaiendFOiCibTQxbOm+LyXbZKDPtuOoMgIhAMyFBaY1
ZHKMchWTr59TaJ5kBWZbBnR6a4E4awY5Skr2MA0GCSqGSIb3DQEBCwUAA4ICAQDA
pTzrA+Mpv1fpfCqb3rH2HdCRTBdEvxP/R1dx4Kgm8PdTzOraxBqo4Djd9ZP611V9
16beyTguvoMya5CdtkYKvAQMvHFpcZa+DJCV7S1aHI209+qChq752HUWwAhFNHHN
rVJc30NX/mzsM6ypHX7DvsB7K5TrDNO3+sAot/9kB7VvX6xdh275c+bifzbJQTHv
oFa6Bm04UB+x1WNhNvuf6df92DnhWvlmyGvm+hz7l1U9OEiIoocfhQo3NBW3RpqQ
+FuK1oM6jpX35cBrgFrqw4WZIwJtgXV3RzRAKWEFG4qdjKDj/Mvvk/b8RzlqRxne
zd/UXNx9KqxJ4zqcP1b8a3CNdcYpttfwFKtQtYC4QmHhqC2ruLmBJBKkphXegr/f
iQleEe1prI16ZnWKarpZI2/doL1cpSbPDQz0hrTDV58Se773/LY0yGD9vPMiE7Sp
M17PBisUEo57D3LaKd8AZdSGLKl8jDdqSoBakz0of1eM1CfXpnDgUiGyL5zQE9PT
4fw4sj/WxSyTIzzNPWg1NiYCst4So5LbfNNJ0clQT9GcDXux4Z0qxQz0wUb/TeXj
VY1YRw8Z5ln03Nmtfge7ZBnOh6ARwX5nrNNH0UT5CT9yR8bSQje+rhZVM33F1hrl
aLGwHNS2yN7AL0sYkGUpJnkHOUG0qo+duqN/Wa/lXg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h3bpw+GQ6MX7N4/SHHo
IWYIyjMXbAHnC4EZWbTMGeFTo13KECpEjDj80jKCbPTePIFEdDiyyuJVdwFuW9dz
DN+uYcklWNBNY4OBorkMj2qX6sNlrQMmu7/dR0Pht/1gtWA+SDg8LjoJx0mah7Of
/2uK+7FREwQPuLj2mppcZJijdRy4Hq3mzlIVvFBAD1F6VqR4BTdCP1pWQKW4BvAT
g8iv38wQlVG28ESdm0XymG+YYILdKHz4kmw9qtp5PkcDYPElkyqU3Goiq+0fZk15
KVLRspf1VuiHq2AU6tq8WbTIjiWiVzMW7/+FC+s7d0CL5vmCwWYLRhao9K/Mql7Q
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14931958201572395141904178822482374029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10577829'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tallinn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lõõtsa 5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zone Media OÜ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zone Media OÜ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018019810'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28544580459706091168476104750779956993536904557973009415314370365369415134383522041669887983388615318224724975617263617553457799026714632310611897533885994831467808158987231081335109763193522218617696618762461011057624895512147187717720078261070346654352199341679893438493156518880518180694493754477919525042627114797931126267803567630656543481484879006528583174846600690588882798111096209858491357631729943728543649971954323350358833373644366197102348276341222647877715822855561738719997437685445598632396503290722336162357428605804940515188562077826659082808449091262811429395525595866887497895833381807731014291501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb8a5406aea817b518945c698b8401c304c488d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zone.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zone.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1002 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															76090185a0eb3164c644dbaa0c4ce60399b91db1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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