bjcidm.carenet.org

- BJC Healthcare -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 92:1c:6e:59:53:67:e6:43:12:12:ed:f8:cf:d0:d3:eb was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BJC Healthcare

Organization: BJC Healthcare
Organization unit: Information Security
Organization unit: Enterprise SSL
Address: 4901 Forest Park Ave
Postal code: 63110
State / Province: MO
Locality: St. Louis
Country: US

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 92:1c:6e:59:53:67:e6:43:12:12:ed:f8:cf:d0:d3:eb
Serial Number (int): 194214909838812420626944590082449921003
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 28:04:d4:bf:69:b6:67:cb:99:7c:0a:ee:e2:d3:42:49:b5:d2:c0:24
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 1b:fb:63:70:86:89:cd:7c:96:6b:bb:65:3b:33:08:01:2e:40:8c:d7
Fingerprint (sha256): f1:66:a2:b1:29:05:fb:77:1d:f2:80:c3:19:7a:65:b3:d4:2c:be:bd:7b:75:5d:d7:e6:46:3c:d5:94:a6:93:45

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate bjcidm.carenet.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bjcidm.carenet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bjcidm.carenet.org
www.bjcidm.carenet.org

Other certificates including the domain name carenet.org

(limited to 100 certificates)
bcaweb.carenet.org
esstest.carenet.org
bjcpsft-prod.carenet.org
carenet.org
pswebhrtst.carenet.org
mybjcnet.carenet.org
bjcexconl01.bjc-nt.bjc.org
bjcfmdtest.bjc.org
ess.carenet.org
bjcidm.carenet.org
fmd.bjc.org
joinbjctest.carenet.org
bjcmgphysicians.carenet.org
BJCIAM.CARENET.ORG
ldmobile.carenet.org
vpn.bjc.org
smartweb.carenet.org
bjcpsft-nonprodext.carenet.org
pswebtst.carenet.org
bjcpsft-nonprodext.carenet.org
myhr.carenet.org
bjcidm.carenet.org
ctxremote.carenet.org
mytime.carenet.org
bcaweb.carenet.org
smartweb.carenet.org
mytime.carenet.org
fmdtest.bjc.org
bjcportal.bjc.org
ctxremotetest.carenet.org
BJCIAM.CARENET.ORG
myhr.carenet.org
mobileenroll.bjc.org
ess.carenet.org
bjcpsft-nonprodext.carenet.org
myhrtest.carenet.org
bjcidm.carenet.org
fmd.bjc.org
fmdtest.bjc.org
BJCIAMTEST.CARENET.ORG
bjcmgphysicians.carenet.org
joinbjc.carenet.org
mytime.carenet.org
ess.carenet.org
bjchcm.psoft.carenet.org
slchoppe.carenet.org
BJCIAMTEST.CARENET.ORG
bjcfmdtest.bjc.org
ctxremote.carenet.org
carenet.org
epicdevmgr.carenet.org
epicdevmgr.carenet.org
vpn.bjc.org
bjcris-prod.carenet.org
sni.cloudflaressl.com
bjcphysicians.carenet.org
bjchcm.carenet.org
bjcportal.bjc.org
rxprofile.bjc.org
bjcfmdtest.bjc.org
mytime.carenet.org
mybjcnet.carenet.org
BJCIAM.CARENET.ORG
BJCIAM.CARENET.ORG
ctxremote.carenet.org
joinbjctest2.carenet.org
joinbjc.carenet.org
bjcpsft-prod.carenet.org
vpn.bjc.org
wuecvfmd.carenet.org
bjcidm.carenet.org
ctxremotetest.carenet.org
joinbjctest.carenet.org
joinbjctest.carenet.org
fmd.bjc.org
epicvalidation.carenet.org
joinbjc.carenet.org
bjcpsft-joinbjc.carenet.org
carenet.org
mobileenroll.bjc.org
bjcfmdtest.bjc.org
hipobdmzt.carenet.org
joinbjctest.carenet.org
bjcris-prod.carenet.org
bjcidm.carenet.org
esstest.carenet.org
bjcportal.bjc.org
bjcportal.bjc.org
epicvalidation.carenet.org

Certificate

The complete raw certificate details for bjcidm.carenet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIRAJIcbllTZ+ZDEhLt+M/Q0+swDQYJKoZIhvcNAQELBQAw
gYYxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJERTETMBEGA1UEBxMKV2lsbWluZ3Rv
bjEkMCIGA1UEChMbQ29ycG9yYXRpb24gU2VydmljZSBDb21wYW55MS8wLQYDVQQD
EyZUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgNTAeFw0xODA5
MDQwMDAwMDBaFw0yMDA5MDMyMzU5NTlaMIHLMQswCQYDVQQGEwJVUzEOMAwGA1UE
ERMFNjMxMTAxCzAJBgNVBAgTAk1PMRIwEAYDVQQHEwlTdC4gTG91aXMxHTAbBgNV
BAkTFDQ5MDEgRm9yZXN0IFBhcmsgQXZlMRcwFQYDVQQKEw5CSkMgSGVhbHRoY2Fy
ZTEdMBsGA1UECxMUSW5mb3JtYXRpb24gU2VjdXJpdHkxFzAVBgNVBAsTDkVudGVy
cHJpc2UgU1NMMRswGQYDVQQDExJiamNpZG0uY2FyZW5ldC5vcmcwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHd+Sk1pKdV2XIKcHWqJBwqBAU8+K+SBj
Bojav7fs93EuW29yZlQjCO/6gzCOJUKMY0xuwbEhAAQWLbvT5hXOMX0D6NDzUvHX
2+BfrR+E4K80wPg2r/KmDpVoyiyMNhSdgmdDMixY7smC+iGaOTWTrFsczCtLoPKy
uNnfVOo9dc10mPRFptWUdJNaZ9UgnYkfsr6MgPggSrDSvnNp5YefIklWsao7RLx6
BA2QI6yluS3jZFSvW90PjMG5ELaiwysROM+FT+t9zIe6y6L02ovLjYgV2rudX+cA
Zldt+vfAg5Zwh3bRN5ytm+ufAPbUr3vBdywRKPswkra/vz1OcH4VAgMBAAGjggNc
MIIDWDAfBgNVHSMEGDAWgBTyu1Xu/I/P0D8UaBqVfnkOqxcw9DAdBgNVHQ4EFgQU
KATUv2m2Z8uZfAru4tNCSbXSwCQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC
MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYL
KwYBBAGyMQECAggwJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0
LmNvbTAIBgZngQwBAgIwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2NybC51c2Vy
dHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1dGhvcml0eTUuY3Js
MIGCBggrBgEFBQcBAQR2MHQwSwYIKwYBBQUHMAKGP2h0dHA6Ly9jcnQudXNlcnRy
dXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNhdGVBdXRob3JpdHk1LmNydDAl
BggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTA1BgNVHREELjAs
ghJiamNpZG0uY2FyZW5ldC5vcmeCFnd3dy5iamNpZG0uY2FyZW5ldC5vcmcwggF8
BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLY
gwDEe4l6qP3LAAABZaWnmfkAAAQDAEYwRAIgaRfLx0n3/3X6fZAIGNSSZQvthP2x
liF0RiqdC20pnp4CICY4fT20q6Lsm7dNdbDUu+O8wzSI1MvT1gMtoki/og43AHYA
Xqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFlpaeaLgAABAMARzBF
AiEA6f68UOf4x6146aeKEfNKXSR8f7DH5vxyCcVtmH5VrvUCIGzVkzc9tbQgGKPN
nMB1tKyY42SOhz0elbgsFoj83u5CAHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgX
L6OqHQcT0wwAAAFlpaeaDwAABAMARjBEAiAuQRxOrCNBkNLWDe1lLgDr5ycAejGz
f+ROKPgf4If+GAIgEgo7h1mQ5DefwF9HYgGRtSs2NvuuNZWjkjw0giREIxAwDQYJ
KoZIhvcNAQELBQADggEBAC0cH7VnNBz5zNViL4/sAjsWBGp+8lhC/D7ZdTUALa6F
ycJvi+k5ixxH+ceufqwTNMXpE42VmUEoBVYJOwHfiMGUDOPyA3rdcAq1qOhVDpWJ
RkJDCXJwsd6DUGhs4XYK7WxDj52s+igjBYOn51G0OcIMsTIZUYx6tPF/hlI3EzVB
2Z0vqqLZLexnvpS+WuXg5ho74GsoJHZv4BAqgVGPjWIwX8TXiXg4FCdwXOUwCiDH
CRn3IEuzh1v22ItN8uwnFSrkpCH8Og3JqwBcxUCS5uqTejWrTpTfwdWaSswGtqxS
a62voaPKHTC+H3DlWwyEmODFKHZ5+sGB/qrPb4LdXps=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h3fkpNaSnVdlyCnB1qi
QcKgQFPPivkgYwaI2r+37PdxLltvcmZUIwjv+oMwjiVCjGNMbsGxIQAEFi270+YV
zjF9A+jQ81Lx19vgX60fhOCvNMD4Nq/ypg6VaMosjDYUnYJnQzIsWO7Jgvohmjk1
k6xbHMwrS6DysrjZ31TqPXXNdJj0RabVlHSTWmfVIJ2JH7K+jID4IEqw0r5zaeWH
nyJJVrGqO0S8egQNkCOspbkt42RUr1vdD4zBuRC2osMrETjPhU/rfcyHusui9NqL
y42IFdq7nV/nAGZXbfr3wIOWcId20TecrZvrnwD21K97wXcsESj7MJK2v789TnB+
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 194214909838812420626944590082449921003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '63110'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4901 Forest Park Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BJC Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bjcidm.carenet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26524775131086360264904320978102226440970849540862947070785029858116315222430240312867996494124545241125523502035136009078075974676047783574967047567239123277748249235150062991388651353088981576947099094159517416333560804378965970705304893731595195030206696028409833087591644010730605278423789892367435810406703853473975652889861937540053049390403918368831395615675768214405208664328307156266734280753412243711738047673071973377442847952573398191901076410454090219405478068720742945338877101725322355772100191775871668261802389979854581625238217464456441670314635980463584685704357671554818058674899945810330645462549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2804d4bf69b667cb997c0aeee2d34249b5d2c024
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjcidm.carenet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bjcidm.carenet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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