mygas-qa2.airliquide.fr

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:85:bf:3b:b8:6c:e0:ad:c2:02:9d:7c:6c:33:d0:e1 was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
State / Province: Île-de-France
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:85:bf:3b:b8:6c:e0:ad:c2:02:9d:7c:6c:33:d0:e1
Serial Number (int): 3352910145527716442053731575972221153
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: af:aa:d2:2a:9b:ac:1e:51:e5:ba:47:b8:45:00:43:fd:a2:b1:d2:b2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 79:3e:63:d8:14:e5:aa:fb:0a:2f:b0:21:7c:2c:c3:4e:d0:ac:f7:6d
Fingerprint (sha256): fa:d3:80:d4:8b:24:39:5e:fc:83:b9:06:09:42:20:10:d4:ae:39:1d:b0:cd:54:61:bb:1e:bb:e4:52:49:b4:f8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate mygas-qa2.airliquide.fr

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mygas-qa2.airliquide.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mygas-qa2.airliquide.fr
mygas-qa2.airliquide.dk
mygas-qa2.airliquide.no
mygas-qa2.airliquide.se
mygas-qa2.airliquide.fi
mygas-qa2.airliquide.de
mygas-qa2.airliquide.be
mygas-qa2.airliquide.nl
mygas-qa2.airliquide.lu
mygas-qa2.airliquide.ch
mygas-qa2.airliquide.it
mygas-qa2.airliquide.pt
mygas-qa2.airliquide.es

Other certificates including the domain name airliquide.fr

(limited to 100 certificates)
www.airliquide.com
alpin.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
mygas.airliquide.fr
mygas-qa2.airliquide.fr
www.airliquide.com
sante.airliquide.fr
www.airliquide.com
distributor.airliquide.com
mygas-qa1.airliquide.fr
mixtureguide.airliquide.fr
kergis.airliquide.fr
myinstallations.airliquide.fr
www.macommandegaz.airliquide.fr
pleingaz.airliquide.fr
mygas-qa3.airliquide.fr
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas-pprd.airliquide.fr
kergis.airliquide.fr
sante-pprd.airliquide.fr
myinstallations.airliquide.fr
mygas-qa2.airliquide.fr
pleingaz.airliquide.fr
distributor.airliquide.com
sante.airliquide.fr
mygas-pprd.airliquide.fr
sante-pprd.airliquide.fr
mygas-pprd.airliquide.fr
mygas.airliquide.fr
kergis.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa1.airliquide.fr
try.airliquide.fr
industrie.airliquide.fr
myinstallations-pprd.airliquide.fr
www.airliquide.com
www.airliquide.com
kergis.airliquide.fr
mygas.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
alpin.airliquide.fr
mygas-pprd.airliquide.fr
www.airliquide.com
www.airliquide.com
www.airliquide.com
sante-pprd.airliquide.fr
myinstallations-pprd.airliquide.fr
sante-pprd.airliquide.fr
industrie.airliquide.fr
pleingaz-pprd.airliquide.fr
mygas.airliquide.fr
mygas.airliquide.fr
mixtureguide.airliquide.fr
sante-pprd.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
alpin.airliquide.fr
industrie.airliquide.fr
sante-pprd.airliquide.fr
mygas.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
pleingaz.airliquide.fr
mygas-qa4.airliquide.fr
www.airliquide.com
alpin.airliquide.fr
myinstallations-pprd.airliquide.fr
www.macommandegaz.airliquide.fr
distributor.airliquide.com
mygas-pprd.airliquide.fr
sante-pprd.airliquide.fr
mixtureguide.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
mygas-pprd.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
pleingaz.airliquide.fr
www.macommandegaz.airliquide.fr
try.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
www.airliquide.com
mediatheque-alfi.airliquide.fr
mygas-qa4.airliquide.fr
alpin.airliquide.fr
sante-pprd.airliquide.fr
mygas.airliquide.fr

Certificate

The complete raw certificate details for mygas-qa2.airliquide.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIHWp75pr2mnXcMWCO+7
2Zis3X5htbPSXZ0YjzX453isOZX1kE7zSnmIiVOQ5Riyc+TqslXTWZxun7rRCqXp
lGycBj8dI3ch5tSPlV7EKXuhu/26e62apm9yRLeYCDYyh0Rp1QkXJJb+ealnClt3
OdyVYu9uL6+PKmKcmZSp/keFo9BN7EEYz0bBLfCAo4GXYl4HhZY9h+GAVICT9l5z
V7gokURtgNGR9IeKv/jc8K4K7iTijcO6o0n4Fz+J/QRyTl+zqejjp0BjTH0yinow
CZlLByfcwEyZ5i1NZHeKWphCHV04y47xuOXJ/Kf3dwU9GA4bHAIptRYJBhibv5SN
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3352910145527716442053731575972221153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mygas-qa2.airliquide.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23291873862931004531299481887116694374817670522166387698496678184138284260007120426230196363223760518418753520024255527387420948907803463868992548497771294490447557060993181751827499560656221102998990197924461031647690644279145503661016369682596203111590982851939612026044447935898265232304125960651021229412037920875825666516594714058717714877785714374378362252203153875156592108626203153876120485487090230947054597279364935658072895319374043695603230501499097059309449337827368464752310714185743900489027474627731210462041232259184644637634907014534740506641197897656085016510216381993782349387835613088215343599063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afaad22a9bac1e51e5ba47b8450043fda2b1d2b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygas-qa2.airliquide.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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