www.ui-icon.org

- Conduent, Inc. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0e:f2:28:d4:82:96:3a:3c:99:96:3a:c4:47:88:9d:67 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Conduent, Inc.

Organization: Conduent, Inc.
Organization unit: UI-ICON
State / Province: New Jersey
Locality: Florham Park
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:f2:28:d4:82:96:3a:3c:99:96:3a:c4:47:88:9d:67
Serial Number (int): 19866555913923514762459008598385663335
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:26:87:3c:e3:49:83:6b:17:96:c6:ad:0a:97:09:12:52:e8:0f:84
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): e2:cd:23:ee:42:5c:31:54:d1:81:ae:6b:40:52:42:93:1b:1d:d8:9a
Fingerprint (sha256): dc:42:e0:c7:e4:98:5b:bf:d5:f7:6a:39:46:7b:c4:a3:f4:79:81:f3:5c:4e:d4:d2:e1:e1:fa:17:dc:de:49:12

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate www.ui-icon.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ui-icon.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ui-icon.org

Other certificates including the domain name ui-icon.org

(limited to 100 certificates)
uimail.ui-icon.org
uiaccts.ui-icon.org
uiaccts.ui-icon.org
uiaccts.ui-icon.org
ui-icon.org
www.ui-icon.org
uiaccts.ui-icon.org
www.ui-icon.org
fcccweb.ui-icon.org
fcccweb.ui-icon.org
fcccweb.ui-icon.org
fcccweb.ui-icon.org
www.ui-icon.org
uiaccts.ui-icon.org
fcccweb.ui-icon.org
fcccweb.ui-icon.org
ws.ui-icon.org
uimail.ui-icon.org
ws.ui-icon.org
uiaccts.ui-icon.org
ui-icon.org
fcccweb.ui-icon.org
ui-icon.org
www.ui-icon.org
uimail.ui-icon.org
www.ui-icon.org
www.ui-icon.org
fcccweb.ui-icon.org
fcccweb.ui-icon.org
fcccweb.ui-icon.org
uimail.ui-icon.org
uiaccts.ui-icon.org
fcccweb.ui-icon.org
www.ui-icon.org
uimail.ui-icon.org
uiaccts.ui-icon.org
ws.ui-icon.org
www.ui-icon.org
uiaccts.ui-icon.org
ui-icon.org
www.ui-icon.org
www.ui-icon.org
www.ui-icon.org
uimail.ui-icon.org
www.ui-icon.org
fcccweb.ui-icon.org
uiaccts.ui-icon.org
uiaccts.ui-icon.org
uimail.ui-icon.org
uiaccts.ui-icon.org

Certificate

The complete raw certificate details for www.ui-icon.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHLDCCBhSgAwIBAgIQDvIo1IKWOjyZljrER4idZzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwODE0MDAwMDAwWhcNMjAwODIzMTIw
MDAwWjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEVMBMGA1UE
BxMMRmxvcmhhbSBQYXJrMRcwFQYDVQQKEw5Db25kdWVudCwgSW5jLjEQMA4GA1UE
CxMHVUktSUNPTjEYMBYGA1UEAxMPd3d3LnVpLWljb24ub3JnMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEA1+sgleCgT9IqyVEB0H38XSIqFgwwVtlyOjms
QQwWUu3WxNPgFuPpntfIpdYAI76Gk4xbBQHji4ZE6ZqeKwitJ1eTvBndRe6UB5Zc
6VyhyIVhpNShSsBXV179Vh3nCgk6sqxJk8M4sGtw5nEOt8ssQ2wS5kdKwOboFskS
a/vG71BLKClAy8+mayrlZ6sL/LM68qL5HhJzXQs9YAAzvXWes/7sibu0a9ioJEsQ
1a+Qd3bNwBB5CJ70Z6HpiJVzinyxvswiFIvJqNl5s+iXysbe9D/RKy7vNAfmuRlG
5vXYzMOjrSGvqcZxhZ7FGe2lNqBruX0VG7b2Lq8lwM8pNvFDgXbLIhQzbVGXrgYk
Yd26u4zES1F9xXrAJpOF/uzfoLxIAlYagB148hKJwUY+f4sfSpxaQ5l7ZuBs84b0
p4KWLGld1WSjrcS5vTB915CC+sLXRcw6dY+YS+TGIjdpFGbigeB5igQOl8npL3X2
pyfEssWYudnzyGtbvcETeLnRbPeqYHbPAq/5bW+6EObZ0XC05+4VKpNz35kSMihT
EEHdG1TXnXKNH6iUdb3QCwr0Gn2+3BHS8CS0C5PC4OlvE64mdXKIVEjNCGbdYk5j
Ae8LDfMpwPtAulAHtnTx2hu0u0CRMxWcDQ1TadpJNJTOCol4IWG59ev3qvwSJ5G/
nN72vCsCAwEAAaOCAt4wggLaMB8GA1UdIwQYMBaAFCRuKy3QapJRUSVpAaqaR6aJ
50AgMB0GA1UdDgQWBBTcJoc840mDaxeWxq0KlwkSUugPhDAaBgNVHREEEzARgg93
d3cudWktaWNvbi5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjB3BgNVHR8EcDBuMDWgM6Axhi9odHRwOi8vY3JsMy5kaWdp
Y2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDA1oDOgMYYvaHR0cDovL2Ny
bDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmwwTAYDVR0gBEUw
QzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl
cnQuY29tL0NQUzAIBgZngQwBAgIwdAYIKwYBBQUHAQEEaDBmMCQGCCsGAQUFBzAB
hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9j
YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3J0MAkGA1Ud
EwQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgC72d+8H4pxtZOUI5eqkntH
OFeVCqtS6BqQlmQ2jh7RhQAAAWyRu/GeAAAEAwBHMEUCIQCTnZfdTTYebeJtHhSA
4qzZRKSF011iIk1aSa2+jk+8RAIgDR3l/OJYiT7H+edt7fmSPDKhNABIHWNORBjF
It97RcUAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWyRu/HZ
AAAEAwBGMEQCIEMDPAMI2wscvuhTlJcvZq38e4xsEm8Unus2Hr6uxzh3AiBHKn2Z
M1LisqEeS+5TnCFXSWtT+YgQyBxUqGKUzxYl/zANBgkqhkiG9w0BAQsFAAOCAQEA
MZB/p4nurmjwx6kdZFA+OdDvmy9L6L+V3Ag2sF+wVyv9XIRIj7NuVqgx+eCDcPrI
5dqI0MvGWIsgwfj2id5hpU09f3wdzIY4tjxeAvN7lDf14mMRQ/DJ+g73Cqz+Dx7f
6GReFZ8rYFxMcFTVFpfd26Ecmk9AFeTGhhByK41duFyxnfrR8iVV/TsH/M5dqNd6
UMM4vAZzrTdjgE+BNksMokotjERSsChKk/66CsIngRodKtqI7yW6N8DsaBzNs69w
Q2G+uZkWJ7e6ooS9BSWtRTyfAZ1ZaO8WPPCMtauFwyCMoWZ7WksnCsXkmGrVfaRI
IS1pMTod6JVpBQniirHm9A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19866555913923514762459008598385663335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florham Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Conduent, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UI-ICON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ui-icon.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880870488848657168408448301938228873712498228883807753043589739147633959663344712805266978162134430944573120485723886240977870003845573654362076122786041183646929609288297670454710643493938381636597348080214189594562081410417354693516298025525643475419470311895348340314050331701257715162990958704295078468485372565932566379670635516051182335020390345110965429704603429803251804416667450565615665319013573820483348018556905825964300576718108871889865521869226753437302345579688136165409338835359492852826993789988151522891809076448333297564865301997420178208690440951594973190103513890322271509144560236707652618819870183015314636966700048007826799559159665981393272911914226294624509037116575356571741076295032625577661803724623238867830201555077615311010540379903745300154293830303504601116274917903741254725166915008276262856798504797442417039479199017873641244801701715431249131378519220807422891618062641619412672649411051332000236905333261154862116085303524483742395197435732057048899369362033569446469022849715453474564946327011783138680901106225463227928658434605870055783444916326946635272046054913223690913856743144115916066135233809540448422384941900542921969710816595356897647060580885130235053756747110244643820092701739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc26873ce349836b1796c6ad0a97091252e80f84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ui-icon.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016c91bbf19e0000040300473045022100939d97dd4d361e6de26d1e1480e2acd944a485d35d62224d5a49adbe8e4fbc4402200d1de5fce258893ec7f9e76dedf9923c32a13400481d634e4418c522df7b45c50075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c91bbf1d90000040300463044022043033c0308db0b1cbee85394972f66adfc7b8c6c126f149eeb361ebeaec738770220472a7d993352e2b2a11e4bee539c2157496b53f98810c81c54a86294cf1625ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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