stage.ghostbusters.com

- Sony Pictures Entertainment -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 09:fd:3c:c9:3d:5b:10:a1:50:82:c0:55:d4:4a:d4:d4 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sony Pictures Entertainment

Organization: Sony Pictures Entertainment
Organization unit: IST
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:fd:3c:c9:3d:5b:10:a1:50:82:c0:55:d4:4a:d4:d4
Serial Number (int): 13277935955699115095787685224771146964
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: af:7c:12:2c:0f:59:1f:1a:5c:7b:de:50:38:54:f6:f2:7f:e8:b5:eb
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 5c:d9:c2:77:13:b6:74:7b:ff:6c:26:c9:4c:18:a1:00:8b:09:17:81
Fingerprint (sha256): d2:2c:f3:8e:47:34:06:49:6c:63:f8:8a:da:c6:54:24:56:10:c0:f2:62:0f:9f:ac:68:43:18:cc:97:e8:a4:d4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate stage.ghostbusters.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.ghostbusters.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.ghostbusters.com
stg.ghostbusters.com
dev.ghostbusters.com
dev.stage6films.com
stg.stage6films.com
stg.sonypictures-guilds.com
stg.sonypictures-awards.com
dev.sonypictures-guilds.com
dev.sonypictures-awards.com
stg.thedailybugle.net
dev.thedailybugle.net

Other certificates including the domain name ghostbusters.com

(limited to 100 certificates)
ukshop.ghostbusters.com
www.shop.ghostbusters.com
edge-micros1.sonypictures.com
edge-micros2.sonypictures.com
microsites.sonypictures.com
shop.ghostbusters.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
shop.ghostbusters.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros2.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros2.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
ukshop.ghostbusters.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros2.sonypictures.com
edge-micros1.sonypictures.com
edge-micros2.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
microsites.sonypictures.com
shop.ghostbusters.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros2.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
sony-prod.actioniq.mr-in.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
www.shop.ghostbusters.com
edge-micros2.sonypictures.com
edge-micros2.sonypictures.com
stage.ghostbusters.com
ukshop.ghostbusters.com
microsites.sonypictures.com
sites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
stage-microsites.sonypictures.com
eushop.ghostbusters.com
edge-micros1.sonypictures.com
microsites.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
edge-micros1.sonypictures.com
eushop.ghostbusters.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com
stage-microsites.sonypictures.com
shop.ghostbusters.com
edge-micros2.sonypictures.com
stage-microsites.sonypictures.com
edge-micros1.sonypictures.com

Certificate

The complete raw certificate details for stage.ghostbusters.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m8kBY4Q/3l/PBWx5a9X
14tuUg6Q6io/1RQPU5TjKkPwhZ3SMa/wrptLNSPg5gO9CfWCjxsqJAACJL1ADfLN
Ek99eC36jyxLcvJHNEHGDwhgBjhnkCeMiSPebBGfGuwF2mnBDvPEC/EY8gHLRJuB
bfU/rbq/vL27nMWiJG2/91Y2zC0OmaWfMqHmOOGa5FJ3DXR49H1iXWOuCr2PhJH4
q+KbpAv80z6zDfexoa0cBwEHWTKQ7JrGDtFpEfkUq+o6XwLaAZJjHpXrIMv3AMaQ
kt3/NMfF2DWBQ76M8ND/EMLO6EmTEUV7ZdwtccwlVobqAIeQHhDiNb4JaL22DDEN
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13277935955699115095787685224771146964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sony Pictures Entertainment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IST'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.ghostbusters.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28584662448942723573014950274566407068769431134597828310370889903318612626252946427656181773721512792144764090267101955712617268423165738250516381485176418969342788750258416140197570285643022302396186598246428808088284273349188978274240121952138300567112496837329100174897000088215953804717038806688858251476776878230202732101794446047955491606099836336904013621856531113955807477118451712632218659793960211250083301484045500796087014644315263881145014884676037834012360542748458463742861510352743786504331586729899945824309704073166294809833512374562106752366219945428847612099283168663507080904848758366790210358673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af7c122c0f591f1a5c7bde503854f6f27fe8b5eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ghostbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.stage6films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures-guilds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sonypictures-awards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sonypictures-guilds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sonypictures-awards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.thedailybugle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.thedailybugle.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016face4ecdc0000040300473045022100eb600160b78559ef8a28effbdb634388dc7845f04f100db91218bed1260764f802206f8716c4c8bccf162a28e40702f4724140a28d712a600be57a0c34c670550fcc0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016face4ec450000040300463044022045c84463103ea2c3ab94ea6488c6bdc35b69aa73a77996e616f7f5284dd60b6d02202d7faa82649c9034e6f7ddeecd5599a99502050adc2003445076d97b9307cd32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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