loyalty-redirect-prdwx.ext.gm.com

- General Motors LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 08:1c:36:90:fd:2c:25:99:36:81:a9:91:d4:20:9d:ec was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Motors LLC

Organization: General Motors LLC
State / Province: Michigan
Locality: Detroit
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:1c:36:90:fd:2c:25:99:36:81:a9:91:d4:20:9d:ec
Serial Number (int): 10780315015645379175799479320688238060
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4e:31:d8:c3:14:33:b8:a7:34:5b:65:44:f0:db:8e:d6:c3:01:3e:60
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): d4:2a:60:4c:02:9f:a7:60:49:c2:19:01:5f:21:ff:06:f9:ab:83:b8
Fingerprint (sha256): ec:0f:1c:a8:cc:5d:ad:71:f6:f3:b4:fa:3e:6b:15:e6:b8:c6:9b:8a:c8:cc:fd:6e:ab:8a:c0:b4:dc:21:72:57

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate loyalty-redirect-prdwx.ext.gm.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loyalty-redirect-prdwx.ext.gm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loyalty-redirect-prdwx.ext.gm.com
buypowercard.com
gmcard.com
gmcollegediscount.com
gmcollegeappreciation.com
gmeducatordiscount.com
gmeducatorappreciation.com
gmfirstresponderdiscount.com
gmfirstresponderappreciation.com
gmmilitarydiscount.com
gmmilitaryappreciation.com
gmpurchaseprograms.com
gmwelcometocanada.ca
gmfamilyfirst.com
gmfamilyfirst.ca
gmded.com
gmpreferredpricing.ca
gmsupplierdiscount.com

Other certificates including the domain name gm.com

(limited to 100 certificates)
d1mipvmstm002.edc.nam.gm.com
dcmidavmred0599.vra.dev.gm.com
epgidvldcss0016.epga.nam.gm.com
elmpplx.pp.xw.gm.com
dcwipavvdf015.edc.nam.gm.com
richcerttest1234.gm.com
dcmipph02n002.edc.nam.gm.com
www.gmwelcometocanada.ca
ebill.gm.com
my.gm.com
dcmidavadkd0101.vra.dev.gm.com
scsinscsv001-vl1729.scs.lam.gm.com
suricatoz-edc.gm.com
ars.gm.com
mgo-test1-container.gm.com
dcmidavbrd3516.nam.corp.gm.com
matador.gm.com
admin-gig.gm.com
wlsadmins.onstar.gm.com
pbr.gm.com
odnm-uat.gm.com
sduat1.gm.com
tmsii-fast.gm.com
dcmipavvdf014.edc.nam.gm.com
dcmspvmmas002.edc.nam.gm.com
game3-alpha-dev.dev.gm.com
usfwasa0pag01.fwa.mfg.ad.gm.com
manager-br-offers.gm.com
tdcapp30.eur.corp.gm.com
dcwidavbrd2486.nam.corp.gm.com
sabrix.gm.com
dcwitavtold0051.vra.dev.gm.com
dcwipphgrt001.edc.nam.gm.com
dcmidavgpd0690.nam.corp.gm.com
d2mimphxj3001.edc.nam.gm.com
testfinder.gm.com
www.gm.com
*.wpi.gm.com
sapccaip7a01.edc.nam.gm.com
game3-wap.pp.gm.com
epms-utility2.gm.com
ddpco3-staging.marketing.ext.gm.com
dcmidavism0002.epg.nam.gm.com
ptas-test-01.gm.com
gdapsolr-prdw.gm.com
phxsvn.gm.com
dcmitavbrd0100.epga.nam.gm.com
dcwipavemp001.edc.nam.gm.com
USSSHSA0BAU81.SSH.MFG.AD.GM.COM
vdmcorps-na.epg.nam.gm.com
www.cadillac.com
dcwipph14k002.edc.nam.gm.com
alm.gm.com
dcmidph02k002-ci.edc.nam.gm.com
dcwipavsp4001.edc.nam.gm.com
www.autopartners.net
epgidvwbrd1099.epga.nam.gm.com
dcmidavcee010.edc.nam.gm.com
sapupspa01.edc.nam.gm.com
vscms.gm.com
epgidvlcca1165.epga.nam.gm.com
gmeuut1dca.edc.nam.gm.com
testurlpcf.gm.com
wvpptvwpmc011.wvp.nam.gm.com
mobileapp.gm.com
dcmipph05k004.edc.nam.gm.com
pdgipvmgos002.nam.corp.gm.com
vdu-idt2-epgw.onstar.gm.com
dcwipvmdgc003.edc.nam.gm.com
mdpi-test.gm.com
dcmipavcmd009.edc.nam.gm.com
dcwidavtol0599.epg.nam.gm.com
np-idt1-epgw.onstar.gm.com
mgo-test1-container.gm.com
vdu-vval2-epgw.onstar.gm.com
dex.op5wi.gm.com
dcmipavgie004.edca.nam.gm.com
mediaarchiveext.gm.com
dps-portal.pp.gm.com
MPGSTVMTFD001.nam.corp.gm.com
dcwidavgml0201.epg.nam.gm.com
apachelbtestuat.gm.com
arsdevelopment.gm.com
dcmitavcca0189.epg.nam.gm.com
gmnaobitest.pp.gm.com
fwaacisepsn02.fwa.nam.gm.com
g2cars-za-uat.gm.com
epgidvlpsc1097.epga.nam.gm.com
dcwidavdsc0023.epg.nam.gm.com
dcmitavfin0131.epg.nam.gm.com
r5gsi-dit.gm.com
epgidvlpsc1045.epga.nam.gm.com
saiobitest.pp.gm.com
www.gmretiree.com
wpx.gm.com
tonptisepsn02.tny.nam.gm.com
dcwipavtesd0001.vra.dev.gm.com
naowb-devl.gm.com
pub-seg7-prd.gm.com
dcwipvmgif116.edc.nam.gm.com

Certificate

The complete raw certificate details for loyalty-redirect-prdwx.ext.gm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEGD3pHHz7zyyQZjPpQR
pc/bHpNof9fNfU8hYQBoDNHdpbie41fyrTMG62fMb7fLCTgx/V7a5EwhAdhsGMGp
56D+ZwTCr3fvoSPlYUEqTQo2DdjIidHGZImv8RPVPN/sslFrwbeHX0jIaR50/3rb
vMcWeOsIhjg2hto232WdpGb5Zo++a1+YO7IuXZxbnvY2FLCN/rHjQMCY+k2HL8N6
kN22VQ767+D6Q/n5kRkQOR0mOjdx3i+FctbSYHFnXmuqxyslYLHzzmOz/SFY0+We
cBbKumh06qPDQcCYQe/sW8P/0yiqbKa+aP3YlGiBOCZeq429yInWhLxV2Nis7wXs
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10780315015645379175799479320688238060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Detroit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Motors LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loyalty-redirect-prdwx.ext.gm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19220529062080819153812006287769620815112321134550412782805182794975717574958640399416230311920690597007947390025920868287933364337693436155740624943661218681350099309269355941478589642326194591126467865630293947735855302104104529825221886455987608058311109808337516443271880208693768163682606442858767554582640798998201177179587525663145954360714767546271178759369330085854287934192725664674554265338252755850089683162785288868589496765310058739892627094556529199861450997503408430295885682011393449005793828206343663638986933976234387749820687385415088650089509371631197530870569832649728232259906176586190470638677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e31d8c31433b8a7345b6544f0db8ed6c3013e60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (428 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalty-redirect-prdwx.ext.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buypowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcollegediscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcollegeappreciation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmeducatordiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmeducatorappreciation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmfirstresponderdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmfirstresponderappreciation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmmilitarydiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmmilitaryappreciation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmpurchaseprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmwelcometocanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmfamilyfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmfamilyfirst.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmpreferredpricing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmsupplierdiscount.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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