www.visitbarbados.org

- Barbados Tourism Marketing, Inc. -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 06:71:31:d2:cf:30:3f:a4:94:61:8f:99:2b:d1:0e:a8 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Barbados Tourism Marketing, Inc.

Company registration number: 38446
Organization: Barbados Tourism Marketing, Inc.
Locality: Warrens
Country: BB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:71:31:d2:cf:30:3f:a4:94:61:8f:99:2b:d1:0e:a8
Serial Number (int): 8563108059830363704214821687239184040
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6c:4a:29:ea:f3:72:aa:18:8c:55:bc:2e:7d:0b:7b:69:15:b3:fa:c3
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): b0:b1:10:41:bb:d1:c3:2f:93:36:34:7b:6c:20:17:3a:dd:b9:59:dd
Fingerprint (sha256): ff:91:72:47:d1:01:9c:26:c8:6e:a0:de:cd:ad:49:9b:30:1d:dc:cd:5d:f3:87:6b:df:a5:6b:fe:f9:a2:bb:41

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate www.visitbarbados.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.visitbarbados.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.visitbarbados.org
visitbarbados.org

Other certificates including the domain name visitbarbados.org

(limited to 100 certificates)
servicedesk1.adaresec.com
tickets.ec-comptech.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
corporate.visitbarbados.org
corporate.visitbarbados.org
remotehq.visitbarbados.org
ssl415659.cloudflaressl.com
helpdesk.visitbarbados.org
helpdesk.anfalservices.com.sa
mail3.visitbarbados.org
www.visitbarbados.org
ssl415659.cloudflaressl.com
helpdesk.brazos.org
servicedesk.melnor.com
helpdesk.visitbarbados.org
ssl415659.cloudflaressl.com
helpdesk.porticopm.com
remotedr.visitbarbados.org
clfhelpdesk.clf.uk
ssl415658.cloudflaressl.com
ssl415657.cloudflaressl.com
servicedesk1.adaresec.com
touristortraveler.visitbarbados.org
helpdesk.porticopm.com
corporate.visitbarbados.org
helpdesk.brazos.org
corporate.visitbarbados.org
servicedesk.chiranogold.com
connect.visitbarbados.org
ssl415657.cloudflaressl.com
ssl415659.cloudflaressl.com
ssl415658.cloudflaressl.com
helpdesk.brazos.org
www.visitbarbados.org
sni.cloudflaressl.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
mail.visitbarbados.org
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
serviceportal.lbfoster.com
www.visitbarbados.org
ssl415659.cloudflaressl.com
sni.cloudflaressl.com
helpdesk.brazos.org
tickets.ec-comptech.com
ssl415658.cloudflaressl.com
visitbarbados.org
ssl415659.cloudflaressl.com
ssl415659.cloudflaressl.com
servicedesk.melnor.com
ssl415657.cloudflaressl.com
*.visitbarbados.org
cwsupport.wefreight.com
ssl415657.cloudflaressl.com
www.visitbarbados.org
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
servicedesk.melnor.com
mail2.visitbarbados.org
connect.visitbarbados.org
connect.visitbarbados.org
www.visitbarbados.org
ssl415658.cloudflaressl.com
tickets.ec-comptech.com
mail2.visitbarbados.org
www.visitbarbados.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
mail.visitbarbados.org
ssl415658.cloudflaressl.com
www.visitbarbados.org
servicedesk.melnor.com
clfhelpdesk.clf.uk
mail.visitbarbados.org
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
connect.visitbarbados.org
helpdesk.visitbarbados.org
ssl415658.cloudflaressl.com
ssl415659.cloudflaressl.com
serviceportal.lbfoster.com
www.visitbarbados.org
ssl415657.cloudflaressl.com
cwsupport.wefreight.com
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
serviceportal.lbfoster.com
servicedesk.chiranogold.com
corp.visitbarbados.org
www.visitbarbados.org

Certificate

The complete raw certificate details for www.visitbarbados.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIQBnEx0s8wP6SUYY+ZK9EOqDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjQwNTEwMDAwMDAwWhcNMjUwNTI4MjM1
OTU5WjCBrjETMBEGCysGAQQBgjc8AgEDEwJCQjEdMBsGA1UEDwwUUHJpdmF0ZSBP
cmdhbml6YXRpb24xDjAMBgNVBAUTBTM4NDQ2MQswCQYDVQQGEwJCQjEQMA4GA1UE
BxMHV2FycmVuczEpMCcGA1UEChMgQmFyYmFkb3MgVG91cmlzbSBNYXJrZXRpbmcs
IEluYy4xHjAcBgNVBAMTFXd3dy52aXNpdGJhcmJhZG9zLm9yZzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAJjfyX1kZtMMVMR2cTze3HjYZ+DSTaX4PwoZ
dA1W+5ERribpmGCcMke3HcZsbpT18QyUxei6WSOhuGFI1EPA5AcqVl6c0oSeTYWQ
+6IkeRvIytFoIhPkeLREehQeHoJApkQq2NQX57qmiq0Sx/QjbaKcIwc5fORaPSUc
E1XYvuF6xC1KR5ySsN+H6snDURpk462K/cekS70bsUJTaSwMN1Mnd+UWAJ3jhYet
uijASYCUdq6GEReuhdi7fUdH9VkYuoqEgBA+EErbCUuH+WfXNbxsKSArjQcA955p
m3lwAO2EGB8xU7NAdi1bRJPLj9SVgjDmzrYf3sa5ingyvO98S18CAwEAAaOCA24w
ggNqMB8GA1UdIwQYMBaAFGpOUL+YaJ1beyB11FkBeUhmkjIGMB0GA1UdDgQWBBRs
Sinq83KqGIxVvC59C3tpFbP6wzAzBgNVHREELDAqghV3d3cudmlzaXRiYXJiYWRv
cy5vcmeCEXZpc2l0YmFyYmFkb3Mub3JnMEoGA1UdIARDMEEwCwYJYIZIAYb9bAIB
MDIGBWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydEVWUlNBQ0FHMi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydEVWUlNBQ0FHMi5jcmwwcwYIKwYBBQUHAQEEZzBlMCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wPQYIKwYBBQUHMAKGMWh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWUlNBQ0FHMi5jcnQw
DAYDVR0TAQH/BAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHYATnWjJ1ya
EMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGPYu6iIwAABAMARzBFAiALgArG
IcNC1YD4qVUB4yETDKfGqmp6Cb5rou925NtFZgIhALBU5viUWa3bOq/pW7wZa0qk
6aVlq6gIr8bvYpsqLdvUAHUAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowu
ebgAAAGPYu6h3QAABAMARjBEAiBp+Yh031WzolVm9xf7AF4Zb9sGB4/+wvf7ROPw
P4mY4QIgAYyeJHYmM8GXZSNAywmzIvk/V4q93I53Ebap+JSMf/4AdQDm0jFjQHeM
wRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY9i7qHrAAAEAwBGMEQCICv+zXbh
DFCiBn2eyaO+jDsNmt0Rz6wubXKQsdJJR5i4AiAH4AOWC768E+Axa/hzqB4Hl+ys
r2D7QBhQ8mKKiq7T7DANBgkqhkiG9w0BAQsFAAOCAQEAk9oyDZnnOsLITctfE00W
hnRYk0Mr0vmg2YxPH8WK3CjGS7WApQrWGwq8//d9wF6xZTiAe3Q/HG8l6RqZisdO
uxwxMMCm69QU7BhbaoFoyrxaMOVmTm8LAhc22mrVB2WZAUKchr5Dit1RsLlqKkjI
ZcOYgqpLsQgsInQ2SV1CQArr3oXKZoyreo2feaPRqzyPwr/kuUVdm1Npqj1Oz7cI
kUlSryhotVHYbJG3hNJGfJP21547JeOxTgj/fqJgjqjzSZOnuyPGFUWS4szPZ2QW
8LRJ+FdlMTEbveYbkJpwmYCzXzdDNtxVIczcnrnJapRdFyVL9WMFECMen67EcaSa
1Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN/JfWRm0wxUxHZxPN7c
eNhn4NJNpfg/Chl0DVb7kRGuJumYYJwyR7cdxmxulPXxDJTF6LpZI6G4YUjUQ8Dk
BypWXpzShJ5NhZD7oiR5G8jK0WgiE+R4tER6FB4egkCmRCrY1BfnuqaKrRLH9CNt
opwjBzl85Fo9JRwTVdi+4XrELUpHnJKw34fqycNRGmTjrYr9x6RLvRuxQlNpLAw3
Uyd35RYAneOFh626KMBJgJR2roYRF66F2Lt9R0f1WRi6ioSAED4QStsJS4f5Z9c1
vGwpICuNBwD3nmmbeXAA7YQYHzFTs0B2LVtEk8uP1JWCMObOth/exrmKeDK873xL
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8563108059830363704214821687239184040
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '38446'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warrens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barbados Tourism Marketing, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.visitbarbados.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19298575871784207958724509650842207410032126413199252717784263347669516917806062107552415432292630578916273803342332321450034666130379360678022261164705770563316854538226393943593899515271981233148651827194820735467826402404128996441085595101782371029904277991958560837150146532757615435759149057844141279712294654466840627850182895658231120901145703769616429449235537966662234675201878283038298120220602341947978279416286006042869162780035684254571090867019473721904079131825958367643022126674753765238617539307162921022721692656298493829382726679724948068886468438605499081190474606526726086268152790439746569259871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c4a29eaf372aa188c55bc2e7d0b7b6915b3fac3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbarbados.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbarbados.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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