mail.edalliance.org

- The Educational Alliance, Inc. -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 03:09:6e:4b:f5:d9:89:c2:01:3a:d1:03:50:32:e5:bd was issued on by DigiCert Inc.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • 6 DNS name(s) are bare public suffixes: orchestra, symphony, Concert, e-finesstri, rd-farm, terminal The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Educational Alliance, Inc.

Organization: The Educational Alliance, Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:6e:4b:f5:d9:89:c2:01:3a:d1:03:50:32:e5:bd
Serial Number (int): 4036651742336966172991182125619406269
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ef:7a:91:8a:13:5b:a0:4a:75:de:b8:05:dc:2e:90:2c:8b:d8:06:b2
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 42:af:9c:17:14:8c:7c:a4:94:5b:c8:46:d6:db:6c:b4:34:4c:72:ba
Fingerprint (sha256): c9:d9:2a:46:ab:88:70:25:8b:67:12:22:88:da:6c:88:60:98:77:e5:67:db:f1:d2:2c:eb:cd:78:a6:70:c7:58

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g6.crl

Check the revocation status for certificate mail.edalliance.org

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.edalliance.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.edalliance.org
trap.ea.edalliance.org
edtsg.edalliance.org
spirit.ea.edalliance.org
performer.ea.edalliance.org
intrepid.ea.edalliance.org
orchestra
orchestra.ea.edalliance.org
symphony
symphony.ea.edalliance.org
autodiscover.edalliance.org
owa.edalliance.org
autodiscover.ea.edalliance.org
owa.ea.edalliance.org
mail.ea.edalliance.org
Concert.edalliance.org
Concert
efinesstri.edalliance.org
e-finesstri
rd-farm.ea.edalliance.org
terminal.ea.edalliance.org
rd-farm
terminal

Other certificates including the domain name edalliance.org

(limited to 100 certificates)
tls.automattic.com
rd-farm
soporte.m4g.com.pe
soporte.m4g.com.pe
soporte.m4g.com.pe
support.thirskwinton.co.uk
rd-farm
soporte.m4g.com.pe
soporte.m4g.com.pe
desk.virtueller.io
tls.automattic.com
tls.automattic.com
edtsg.edalliance.org
soporte.m4g.com.pe
soporte.talenttecnologia.com
soporte.talenttecnologia.com
tls.automattic.com
mail.edalliance.org
tls.automattic.com
tls.automattic.com
tls.automattic.com
soporte.talenttecnologia.com
soporte.talenttecnologia.com
soporte.m4g.com.pe
soporte.talenttecnologia.com
soporte.talenttecnologia.com
tls.automattic.com
soporte.talenttecnologia.com
desk.kwikpe.in
mail.edalliance.org
soporte.m4g.com.pe
soporte.talenttecnologia.com
tls.automattic.com
soporte.m4g.com.pe
expe.edalliance.org
soporte.m4g.com.pe
soporte.talenttecnologia.com
soporte.m4g.com.pe
support.itree.mx
soporte.talenttecnologia.com
helpdesk.edalliance.org
sni.cloudflaressl.com
soporte.talenttecnologia.com
edtsg.edalliance.org
edalliance.org
soporte.m4g.com.pe
soporte.m4g.com.pe
soporte.m4g.com.pe
soporte.m4g.com.pe
rd-farm
soporte.m4g.com.pe
soporte.m4g.com.pe
tls.automattic.com
soporte.m4g.com.pe
soporte.talenttecnologia.com
tls.automattic.com
soporte.m4g.com.pe
soporte.m4g.com.pe
onlinereg.edalliance.org
soporte.talenttecnologia.com
tls.automattic.com
soporte.m4g.com.pe
rd-farm
soporte.m4g.com.pe
soporte.talenttecnologia.com
soporte.m4g.com.pe
tls.automattic.com
soporte.talenttecnologia.com
mail.edalliance.org
tls.automattic.com
mail.edalliance.org
tls.automattic.com
tls.automattic.com
onlinereg.edalliance.org
soporte.talenttecnologia.com
tls.automattic.com
soporte.m4g.com.pe
support.traveldatamart.aggregateintelligence.com
ether.ea.edalliance.org
soporte.m4g.com.pe
soporte.m4g.com.pe
tls.automattic.com
helpdesk.hancockcoingov.org

Certificate

The complete raw certificate details for mail.edalliance.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnp2yqhKx/uxZgaRL7zz
V/umED4J4MUQ80syUjhjJpgXvTw2xcmfQw5eP7wRNzIUNnAfU5YXDsB4nFPrNeLv
3Tiv60dxGYoMcR4k95wNStT+IUWOlp643xR1/EAXmYptnEP/83u8n3v+a5vQt154
rA4ZW25NISKuCflEyC/mzVSConSMWxujIuOzZfw/u/S1pWIkJleNWtdogebY/YXS
oaw/HmWQjs5UydloCmkxEilAQtYzvlub2Ek3obkMF8rHhGO1MebxxOLxowNsy+p3
kknpe06ehgZRkpF6n3uT+1LiN32eOlIlUHlrS8C6nz0s8GCsAArgEhRwySp/UY4L
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4036651742336966172991182125619406269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Educational Alliance, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.edalliance.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22025854327930413484293837700293630151533587417557054857103254229111701064405411390950116858330757633368103258777052375463742127098110154567274353946216015410634808214381429153505366248388963242631016199539485296350578073106412194902113194026759874564462357484768226607681772256201109658711029060265105311804252101193546045358251079009150427239020410000469298546654159063390329619427176551500095468153093112935674741437187791864538756216473207608114285694387464186836708403084227050218693383386137237295172901102576844160631953467395813652128099914275343858793565813646603604447806307467794149056083421951401185381139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef7a918a135ba04a75deb805dc2e902c8bd806b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (507 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trap.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edtsg.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spirit.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performer.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrepid.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchestra'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchestra.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symphony'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symphony.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Concert.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Concert'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efinesstri.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-finesstri'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd-farm.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminal.ea.edalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd-farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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