dev-nocdn-uhccommunityplan.uhc.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:63:31:d7:1b:51:82:7c:a7:f7:f4:2c:d7:87:69:9f was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev-nocdn-uhccommunityplan.uhc.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:63:31:d7:1b:51:82:7c:a7:f7:f4:2c:d7:87:69:9f
Serial Number (int): 9819644240069513007942075595413219743
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9b:10:8f:35:dc:df:b7:c0:f4:31:6c:8d:31:9a:26:e1:a0:8e:7d:d8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): f3:43:3d:1b:f7:64:c1:ac:9c:b5:81:b6:bd:a4:96:ec:23:1e:de:ee
Fingerprint (sha256): 00:91:0c:7a:f0:17:09:6e:c8:99:df:7a:ce:37:0e:3c:64:a7:31:38:5f:31:5f:a5:27:e9:6a:a6:49:ce:c7:89

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dev-nocdn-uhccommunityplan.uhc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-nocdn-uhccommunityplan.uhc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-nocdn-uhccommunityplan.uhc.com

Other certificates including the domain name uhc.com

(limited to 100 certificates)
mobility-dev.uhc.com
group.uhc.com
smetrics.broker.uhc.com
upsprod-e.uhc.com
brand.uhc.com
apsrd8168.uhc.com
ssopacorp-ctc-dev.uhg.com
ssds-prd-elr.uhc.com
sps-stage.optum.com
icm-prd.uhc.com
prospective.shared.global.fastly.net
uho-tranzform.uhc.com
psfinancials.uhc.com
stage-uhcmedicaresolutions.uhc.com
wem.optumrx.com
dev-nocdn-uhccommunityplan.uhc.com
cdid-stage.uhc.com
external-redirect-corpsys-prod.uhg.com
wem.uhc.com
myapps-ecc.uhc.com
b2cload-reports.uhc.com
stage-qm-ph.uhc.com
apimgr4.optum.com
clbcup01a.corpimsvcs.com
default.uhc.com
stage-caid-uhccommunityplan.uhc.com
optumrxoprcvrhd2.uhc.com
cmccomptool.uhc.com
ca-ph.uhc.com
optumizeme-uat1.uhc.com
awe-dev-f-uhcretiree.uhc.com
uhcjarvis-stg-elr.uhc.com
carta.uhc.com
prospective.shared.global.fastly.net
optumcptimestage.uhc.com
storefront.uhc.com
federation.uhc.com
cap-sm-cop7.uhc.com
apsep5370.dmzmgmt.uhc.com
treasurycheck.uhc.com
aarpprovideronlinetool-internal.uhc.com
prospective.shared.global.fastly.net
tdmobile.uhc.com
ltmelrstgcorp1.uhc.com
designcenter-test.uhc.com
healthiaexchange.uhc.com
prospective.shared.global.fastly.net
stage-aarphealthassessment.uhc.com
apsrp1660.uhc.com
elrexpway01e.uhc.com
perf-aarponlineapptool.uhc.com
prospective.shared.global.fastly.net
ctc-5.bc.uhc.com
wmqpdgw.uhc.com
phycon-uat.uhc.com
ohfswebservices-stage.uhc.com
eems.uhc.com
federate.uhg.com
edms-sui.uhc.com
clinicalmgmt-stage.uhc.com
ssopacorp-elr-dev.uhg.com
prospective.shared.global.fastly.net
ca-ph.uhc.com
casx16-elr.uhtstage.uhc.com
prospective.shared.global.fastly.net
ecghosts.uhc.com
webassist-ph.uhc.com
bankdata.uhg.com
offline-mnrgeneric.uhc.com
cl4cup02b.corpimsvcs.com
cl2cup02b.corpimsvcs.com
members.uhcglobal.com
epcstage-e.uhc.com
optumrxoprcvrhd2.uhc.com
api.member.int.uhc.com
myvdiremote.uhc.com
aarpea.uhc.com
prospective.shared.global.fastly.net
phow.uhc.com
pasuat2.uhc.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
rdee-int.uhc.com
sps-stage.optum.com
orbit-microstrategy94.uhc.com
akamai-san17.exacttarget.com
stgsvcrplv4.uhc.com
prospective.shared.global.fastly.net
sys1-aarpea.uhc.com
psarbi.uhc.com
uxds.uhc.com
stg-globalme-svcs.uhcglobal.com
external-redirect-corpsys-prod.uhg.com
eprofptest.uhc.com
prospective.shared.global.fastly.net
securehorizons-prod.uhc.com
elr-12.bc.uhc.com
hcestimator-uat3.uhc.com
leanstage.uhc.com
ptpsrstageint.uhc.com

Certificate

The complete raw certificate details for dev-nocdn-uhccommunityplan.uhc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHsTCCBZmgAwIBAgIQB2Mx1xtRgnyn9/Qs14dpnzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwODIxMDAwMDAwWhcNMjQwMjIxMjM1OTU5WjAtMSswKQYDVQQDEyJkZXYtbm9j
ZG4tdWhjY29tbXVuaXR5cGxhbi51aGMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqkWKAE1B3yolU6PHAlSpt2FreUQDWvfmUsa15o4ZVLQ9iLGk
Ujh4AsEcRXrjClyvr+/FCOouZa2nib19JdDrNyrLtLy1/aNkTanRg+NW/j8F1Y/g
gTahBXumt1hfci3MU7p+l5+RFY9boOzewtUxKQrjLXL5puN2VQGROM9yxImZ2KVm
Dv0+vkKDDwI3MKTriPOKgJ1Rof2AAVsgTGh9OguqL84AOHrIWgPKPSyNOQpz8rkI
FUrL8YJ8d0Xfdl9fGXgOFloohjqyzf90qtNBvIIBC3YSahQBL0yA77ZZxq5Qzwn5
TBld/ZReg9dDMLCc+E0yiTpRQjUM1YNPxIcZBQIDAQABo4IDnDCCA5gwHwYDVR0j
BBgwFoAUpbTW6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFJsQjzXc37fA9DFs
jTGaJuGgjn3YMC0GA1UdEQQmMCSCImRldi1ub2Nkbi11aGNjb21tdW5pdHlwbGFu
LnVoYy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmww
SKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRM
U1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDA+BgNVHSAENzA1MDMGBmeBDAECATAp
MCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsG
AQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
MFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1
c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwCQYDVR0TBAIwADCC
AX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny8
7N7DUUhZRnEftZsAAAGKGP3dhAAABAMARzBFAiAn0HYSOrn3hes04AJzdfSK43Wx
1TDfTsOWKbZ8OqtmkQIhAJWeDp2Er/txdiNQt/yklENED9xQRu0TadVC4+GoxyZ6
AHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGKGP3dwAAABAMA
SDBGAiEA+OEQoMb/dtcfcYZT/gzUFZm8cfxnBwnA3M0ABW6MmqsCIQDikTX08Txb
IMfEGgAzgG4mtvm44P97VJrh2xoOsoCwKAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7
UYSFNL2kPTBI1/urAAABihj93Y8AAAQDAEcwRQIhANtxyHSyZpuqwBF9oT0DLKLN
ROhnH1VojbH98ckRUpMjAiAS5QN596ObRhREaeZhzB+X99a6kO7+kp5Cnh1vnmWS
TDANBgkqhkiG9w0BAQsFAAOCAgEAl1/vn8qL2N86kN7idf0GfEmMsNrSEtyZcpWQ
KSV1v81/SOqQ1pYnkO1DJwBlRzYkmQLO6i4MaJVAMvFWMOYaTkwKST6OEsZ2kSRS
wrfKHhEonpOmmYV7+Tw1aDCM/skm/WGsBjdsdPu2Id5u1oKiem0h+rp0hjosgMmD
dfwjjrtm6k/VacA8P8rPlKczxx4LtfSrPU1ybcluwPppDQD2boqxtKjI9qTEwEWE
Op3ApmQ38Y1VviVuyB4gswzK57UAjxj/9tG5jNYqNfpIqkyKrm/YBZToWnPiafu/
aKS35RFZU8Inni5azQaJ2vIPvp3YxgnSGUQo0ac+AzLBpEtgH73cQdT328wNnRsG
B7vR+SAm82Oi6pNI8/+P06h6RKZrVyKdTUwkyJjBHMAwvmU/r3eyB175gkswB2s0
GHowNeBh2jkBIdyXiVf9DeQp4jndre2WmnkqErjr6toVXwXKT3Y87Z6Lj9djbxR5
STFTiwcxDVibDNYnFhxWgbKKwHY0LDLA+9kbODJmIDQ986wf2Ziy7vuyCtEkGkxB
V3UWkwegmBdGUjsaqr81Ncebo/fE/MpRC0PBZDn0ccR4gFRO5Hw9EUEr3Xy/xdYy
rKyMbJwFcQGAuGBkz2I5FCmXIQto3OAIuWIKfZrZJCQCAQeyPIa9TfHXt3OrumfC
4zuMkA0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkWKAE1B3yolU6PHAlSp
t2FreUQDWvfmUsa15o4ZVLQ9iLGkUjh4AsEcRXrjClyvr+/FCOouZa2nib19JdDr
NyrLtLy1/aNkTanRg+NW/j8F1Y/ggTahBXumt1hfci3MU7p+l5+RFY9boOzewtUx
KQrjLXL5puN2VQGROM9yxImZ2KVmDv0+vkKDDwI3MKTriPOKgJ1Rof2AAVsgTGh9
OguqL84AOHrIWgPKPSyNOQpz8rkIFUrL8YJ8d0Xfdl9fGXgOFloohjqyzf90qtNB
vIIBC3YSahQBL0yA77ZZxq5Qzwn5TBld/ZReg9dDMLCc+E0yiTpRQjUM1YNPxIcZ
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9819644240069513007942075595413219743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-nocdn-uhccommunityplan.uhc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21494802836262164616085038635492112958684578697765848208491076842963825528311363355782414578188028926239515584599291862085392031881968369525675259410884480119072092840794296185737949745604400210727518034494330885373114580970597070049634017024584354697418400671338823319739450766271802839465907319812463619514289174405472825616118528010431502121671531260162823854648758036343297157504154729364326136065291260633758803567021809117654531977244524213683027413342743839993495793105709576584691365375020209206366691868203108794078346534542411014711359058540761755192894665191947592931632218330561209666232687624433953085701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b108f35dcdfb7c0f4316c8d319a26e1a08e7dd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-nocdn-uhccommunityplan.uhc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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