lantern.wizards.com

- Wizards of the Coast LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:24:68:84:b2:a4:5c:bd:63:a8:68:09:bb:27:04:10 was issued on by DigiCert Inc.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wizards of the Coast LLC

Organization: Wizards of the Coast LLC
State / Province: Washington
Locality: Renton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:24:68:84:b2:a4:5c:bd:63:a8:68:09:bb:27:04:10
Serial Number (int): 16139778520329509460037814806125151248
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5e:c7:c7:51:3b:3f:59:38:5d:6d:74:2a:54:3a:26:1a:83:79:a4:40
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 17:5b:65:83:f1:24:bd:6f:cd:9b:d5:65:98:89:bd:97:27:e6:0e:cd
Fingerprint (sha256): f4:77:47:a2:cb:21:e3:19:8a:3a:d5:2c:ff:99:17:f7:22:08:9d:42:95:3e:44:25:cf:b7:f1:f9:b8:b8:42:39

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate lantern.wizards.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lantern.wizards.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lantern.wizards.com
api.drake.wizards.com
apigateway.des.tiamat.cloud
beta.spelltable.com
cdn.spelltable.wizards.com
clientlogging.api.mtgarena.wizards.com
dandd.wizards.com
deck.spellslingers.com
dev.api.drake.wizards.com
dev.dandd.wizards.com
dev.darkalliance.wizards.com
dev.magic.gg
marketing-stage.api.bi.wizards.com
matchclusteragent-qadev.api.mtgabeta.wizards.com
matchclusteragent-qegate.api.mtgabeta.wizards.com
matchclustermanagerdoor-a.api.mtgarena.wizards.com
matchclustermanagerdoor-b.api.mtgarena.wizards.com
matchclustermanagerdoor-qadev.api.mtgabeta.wizards.com
matchclustermanagerdoor-qegate.api.mtgabeta.wizards.com
matcherino.tabletop.wizards.com
play.mtgarena.com
spelltable.com
stage.api.drake.wizards.com
stage.dandd.wizards.com
stage.darkalliance.wizards.com
www.spelltable.com

Other certificates including the domain name wizards.com

(limited to 100 certificates)
tiamat.wizards.com
media2.wizards.com
events.wizards.com
media.wizards.com
tiamat.wizards.com
media.wizards.com
incapsula.com
tiamat.wizards.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
incapsula.com
mtgorackcaccounts.onlinegaming.wizards.com
sslcertificate2.queue-it.net
media.wizards.com
media.wizards.com
sni.cloudflaressl.com
sni.cloudflaressl.com
incapsula.com
mtgarena-support.wizards.com
mtgarena-support.wizards.com
support.wizards.com
incapsula.com
magicstore.wizards.com
lantern.wizards.com
tiamat.wizards.com
accounts.onlinegaming.wizards.com
tiamat.wizards.com
media.wizards.com
lantern.wizards.com
sslcertificate2.queue-it.net
media2.wizards.com
mtgarena-support.wizards.com
media2.wizards.com
tiamat.wizards.com
imperva.com
webapp.wizards.com
media.wizards.com
tiamat.wizards.com
media2.wizards.com
media.wizards.com
ssl953363.cloudflaressl.com
eusfbsip1.hasbro.com
media.wizards.com
san2.wizards.com
media.wizards.com
30thedition.wizards.com
media.wizards.com
media2.wizards.com
sslcertificate2.queue-it.net
media.wizards.com
eusfbsip1.hasbro.com
media.wizards.com
feedback.wizards.com
mtgarena-support.wizards.com
media.wizards.com
queue.ticketania.com
NASIP.hasbro.com
media.wizards.com
NASIP.hasbro.com
t.wizards.com
mtgarena-support.wizards.com
sslcertificate2.queue-it.net
media.wizards.com
tiamat.wizards.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
imperva.com
tiamat.wizards.com
sni.cloudflaressl.com
media.wizards.com
sslcertificate2.queue-it.net
san2.wizards.com
media.wizards.com
store.wizards.com
wizards.com
media2.wizards.com
media.wizards.com
sni.cloudflaressl.com
media.wizards.com
wizards.com
secretdrop.wizards.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
san1.wizards.com
media2.wizards.com
t.wizards.com
tableau.wizards.com
tableauqa.wizards.com
supportlogin.wizards.com
imperva.com
media.wizards.com
wotcvpn.wizards.com
tiamat.wizards.com
media.wizards.com
lantern.wizards.com
sslcertificate2.queue-it.net
queue.ticketania.com
wpn.wizards.com
sni.cloudflaressl.com
sslcertificate2.queue-it.net

Certificate

The complete raw certificate details for lantern.wizards.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEEAp+zDf37S4DbgqhOWG28kt6+dmI
6bLEs9SJOZQVJWdymBYI49qUOsiIRmRGQdTq05EreUjVhXKYpZpP4UyJ+A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16139778520329509460037814806125151248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Renton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wizards of the Coast LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lantern.wizards.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004100a7ecc37f7ed2e036e0aa13961b6f24b7af9d988e9b2c4b3d489399415256772981608e3da943ac88846644641d4ead3912b7948d5857298a59a4fe14c89f8
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ec7c7513b3f59385d6d742a543a261a8379a440
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (831 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantern.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.drake.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigateway.des.tiamat.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.spelltable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.spelltable.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientlogging.api.mtgarena.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dandd.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deck.spellslingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.drake.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dandd.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.darkalliance.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.magic.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing-stage.api.bi.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchclusteragent-qadev.api.mtgabeta.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchclusteragent-qegate.api.mtgabeta.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchclustermanagerdoor-a.api.mtgarena.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchclustermanagerdoor-b.api.mtgarena.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchclustermanagerdoor-qadev.api.mtgabeta.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchclustermanagerdoor-qegate.api.mtgabeta.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matcherino.tabletop.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.mtgarena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spelltable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.drake.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dandd.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.darkalliance.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spelltable.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a89c89deb0000040300473045022100d54ca9fd6d4abf98dec8527daf81f3a32cb55e09c779c6ed8f5691ea90dcebeb02207247607d0349b8f294686ad344f5e8f813f5a7f17084a3b33a150206f14bc1f500770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a89c89db60000040300483046022100a461777c17d04c8b0120280b0baf2422583615dc37d0058cb3d64f92c0bb3207022100c780d8c0e125459b0bc620d7a22d9c54bf257cfeee0a7f0a62a46e1d05f43780007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a89c89dcd00000403004830460221008efd6846c8a3b2474e283d4022a8c5e1334327ace9d1fb24cf9fc2639a64bf2e022100d6e1a31e5130be89e972f09e1c20b49d9b70605e59ce525897ed75210cf6f3b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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