gestionactivos.minagricultura.gov.co

- MINISTERIO DE AGRICULTURA Y DESARROLLO RURAL -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 09:5a:c6:ba:17:55:4b:f9:63:f4:01:c7:bb:62:d9:91 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MINISTERIO DE AGRICULTURA Y DESARROLLO RURAL

Company registration number: Government Entity
Organization: MINISTERIO DE AGRICULTURA Y DESARROLLO RURAL
Organization unit: GRUPO SISTEMAS
Locality: Bogota
Country: CO

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:5a:c6:ba:17:55:4b:f9:63:f4:01:c7:bb:62:d9:91
Serial Number (int): 12434389340093400725098795466097875345
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:29:3f:94:2f:49:3c:26:74:b0:05:fe:23:d5:2c:77:b9:ae:6a:86
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): aa:da:64:4a:e2:86:1e:47:80:17:e0:20:a8:e4:58:ce:8e:db:42:36
Fingerprint (sha256): d7:d5:1d:f8:be:78:be:3f:fe:5d:b6:98:97:50:f7:fc:d0:b9:19:26:3f:93:46:34:ab:ba:a2:82:9b:5e:2e:b8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate gestionactivos.minagricultura.gov.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gestionactivos.minagricultura.gov.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gestionactivos.minagricultura.gov.co

Other certificates including the domain name minagricultura.gov.co

(limited to 100 certificates)
correo.minagricultura.gov.co
serviciosmadr.minagricultura.gov.co
idesectorialagro.minagricultura.gov.co
EWS.minagricultura.gov.co
EWS.minagricultura.gov.co
elcampoinnova.minagricultura.gov.co
webconf.minagricultura.gov.co
formularios.minagricultura.gov.co
sip.minagricultura.gov.co
descubridor.minagricultura.gov.co
correo.minagricultura.gov.co
arcgis.minagricultura.gov.co
www.minagricultura.gov.co
arcgis.minagricultura.gov.co
productores360.minagricultura.gov.co
correo.minagricultura.gov.co
arcgis.minagricultura.gov.co
sioc.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
vuf.minagricultura.gov.co
sip.minagricultura.gov.co
descubridor.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
www.minagricultura.gov.co
camponet.minagricultura.gov.co
minagricultura.gov.co
descubridor.minagricultura.gov.co
vuf.minagricultura.gov.co
gestionactivos.minagricultura.gov.co
sioc.minagricultura.gov.co
pqr.minagricultura.gov.co
formularios.minagricultura.gov.co
idesectorialagro.minagricultura.gov.co
orfeo.minagricultura.gov.co
productores360.minagricultura.gov.co
orfeo.minagricultura.gov.co
visr.minagricultura.gov.co
productores360.minagricultura.gov.co
sgdea.minagricultura.gov.co
vuf.minagricultura.gov.co
www.minagricultura.gov.co
sioc.minagricultura.gov.co
pqr.minagricultura.gov.co
sgdea.minagricultura.gov.co
sip.minagricultura.gov.co
savia.minagricultura.gov.co
sioc.minagricultura.gov.co
orfeo.minagricultura.gov.co
sioc.minagricultura.gov.co
formularios.minagricultura.gov.co
EWS.minagricultura.gov.co
vuf.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
pqr.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
www.minagricultura.gov.co
vuf.minagricultura.gov.co
visr.minagricultura.gov.co
serviciosmadr.minagricultura.gov.co
descubridor.minagricultura.gov.co
sip.minagricultura.gov.co
sip.minagricultura.gov.co
www.minagricultura.gov.co
www.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
pruebasvisr.minagricultura.gov.co
descubridor.minagricultura.gov.co
visr.minagricultura.gov.co
orfeo.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
correo.minagricultura.gov.co
orfeo.minagricultura.gov.co
camponettest.minagricultura.gov.co
correo.minagricultura.gov.co
correo.minagricultura.gov.co
idesectorialagro.minagricultura.gov.co
serviciosmadr.minagricultura.gov.co
descubridor.minagricultura.gov.co
www.minagricultura.gov.co
sioc.minagricultura.gov.co
savia.minagricultura.gov.co
descubridor.minagricultura.gov.co
correo.minagricultura.gov.co
jovenesrurales.minagricultura.gov.co
camponet.minagricultura.gov.co
vuf.minagricultura.gov.co
correo.minagricultura.gov.co
sip.minagricultura.gov.co
savia.minagricultura.gov.co
www.minagricultura.gov.co
pqr.minagricultura.gov.co
alianzasproductivas.minagricultura.gov.co
gestionactivos.minagricultura.gov.co
EWS.Minagricultura.gov.co
www.minagricultura.gov.co
vuf.minagricultura.gov.co
sgdea.minagricultura.gov.co
EWS.minagricultura.gov.co
sioc.minagricultura.gov.co

Certificate

The complete raw certificate details for gestionactivos.minagricultura.gov.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFRe8P5aEgI7jzkXMKUY
3X7sAsrXj2BAjGt4ftSXCmadi8WwHyqYwooZkDaexZ+eWBqqKyfy837/UyWimLy7
KTGTtReBnzcAhXqMMH59zP1h11Wv+i7gMbQwA10/Iorc1qT/G7s//5MCZHU7csCM
0wNOE59qJ2dXngFsKRM96B67k8gDQ3/iapp+4jNq4zWa4Cm8XFx84bHamFdz78QF
wdniUReMKZ1QF1TsF4V1el8NuYk+1u2f1IVd5/o93P3vqN7zXcBvf6fd4Agr7wqs
G7PPMwhyQSPqZ9XBwbWEfq+nWu9IKbivhyne7v7EMA0R+X21oOdO3kO4eSruy4on
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12434389340093400725098795466097875345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bogota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MINISTERIO DE AGRICULTURA Y DESARROLLO RURAL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRUPO SISTEMAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gestionactivos.minagricultura.gov.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20239733618620457681803313171354203993415630690785490064041254177861249902984240952593234559567068419011340380411336300134076583610871033072539195074122538321887527923518777323730963666518770622701890149842450616118015248418441549212442753333923400807691470022261526680862608935094645501180869476471938499013565923984828262057683484126062082997525910552761047626144368160103076413017007751466100910398796876620328321296832504872002238834017117120567147601323497200494576529263202217939306902105705609145637531395463618884823356575197327000099389809929922156859964319722930574832722900762870913485862607610055276242801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39293f942f493c2674b005fe23d52c77b9ae6a86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionactivos.minagricultura.gov.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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