tbi.osu.edu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:e5:8c:66:f3:b2:a2:1e:f3:24:76:c8:e6:71:21:7e was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tbi.osu.edu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:e5:8c:66:f3:b2:a2:1e:f3:24:76:c8:e6:71:21:7e
Serial Number (int): 21130303611416113086083438562899992958
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 80:be:74:ed:22:8f:e5:ed:69:4e:67:4c:15:83:f1:35:a7:c3:bb:17
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): bf:42:6f:b7:ef:94:59:0b:ca:ad:3c:a5:f6:9c:99:77:3f:af:1c:2f
Fingerprint (sha256): 01:17:cb:93:24:16:56:b3:0a:8e:b7:ef:8c:20:dc:d7:03:db:e8:a9:a9:44:79:2d:16:69:cc:e9:3a:03:51:e8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate tbi.osu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tbi.osu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tbi.osu.edu

Other certificates including the domain name osu.edu

(limited to 100 certificates)
5757715179634688-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
adams.osu.edu
test-web-lws.edu.help
5719238044024832-fe2.pantheonsite.io
offer.osu.edu
5767917874446336-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
acarology.osu.edu
opensource.osu.edu
5719238044024832-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
5660980839186432-fe2.pantheonsite.io
5646874153320448-fe4.pantheonsite.io
5698125863845888-fe3.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
ucdc.edu
history.osu.edu
5644101080842240-fe2.pantheonsite.io
5687379545292800-fe2.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
nartc.fcm.arizona.edu
ksa-mrbs.webapps.engineering.osu.edu
5732910535540736-fe1.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
socrates.osu.edu
costume.osu.edu
5676201666412544-fe3.pantheonsite.io
bsal.osu.edu
*.webtest.osu.edu
5672591746400256-fe3.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
5662543133540352-fe4.pantheonsite.io
cse.engineering.osu.edu
5722152447770624-fe1.pantheonsite.io
tbi.osu.edu
5690257819303936-fe4.pantheonsite.io
alkireproject.osu.edu
skullbase.osu.edu
5740745361195008-fe4.pantheonsite.io
insight.tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5696381570252800-fe2.pantheonsite.io
5668753656250368-fe1.pantheonsite.io
5741031244955648-fe4.pantheonsite.io
preble.osu.edu
5676201666412544-fe3.pantheonsite.io
5707725409353728-fe2.pantheonsite.io
test.eis.uw.edu
5734743547052032-fe3.pantheonsite.io
legacypaydocs.osu.edu
chembio.osu.edu
heroesproject.osu.edu
tas.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
www.design-engineering.princeton.edu
5677751478517760-fe2.pantheonsite.io
intranet.odee.osu.edu
heartlung.osu.edu
cfaes.osu.edu
5672591746400256-fe3.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
iam-pamprd-db01.bcd.it.osu.edu
internalmedicine.osu.edu
5696381570252800-fe2.pantheonsite.io
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
buckeyelink3.osu.edu
5676982813589504-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5182915545661440-fe2.pantheonsite.io
5676201666412544-fe3.pantheonsite.io
ehe.osu.edu
tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5726348362383360-fe3.pantheonsite.io
bme.osu.edu
5711637696741376-fe4.pantheonsite.io
mae.osu.edu
5665925286068224-fe2.pantheonsite.io
api.agg-qa.webtest.osu.edu
buckeyeturf.osu.edu
ehistory.osu.edu
akips01.coeit.osu.edu
5668753656250368-fe1.pantheonsite.io
www.hcii.cs.cmu.edu
5631986051842048-fe1.pantheonsite.io
tk20.ehe.osu.edu
advancementintranet.osu.edu
5662543133540352-fe4.pantheonsite.io
www.blogs.earthjustice.org
gisprtprd01.bcd.it.osu.edu
5722152447770624-fe1.pantheonsite.io
artsandsciences.osu.edu
bpte.osu.edu
*.nursing.osu.edu
suicideprevention.osu.edu

Certificate

The complete raw certificate details for tbi.osu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhTCCBW2gAwIBAgIQD+WMZvOyoh7zJHbI5nEhfjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwOTEyMDAwMDAwWhcNMjQwMzEyMjM1OTU5WjAWMRQwEgYDVQQDEwt0Ymkub3N1
LmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkVY9dh81Ows6IG
txc0E0SVPxILjGzITLHIdi0GODcJ+4NXNGFCPAFa2c3sKhwrUPaIV5qULfXzIJI2
FG8H5mMRfGUHFnd1BpqZm0tjCEbR93zt2JUI7Fn5J5xKi+fVXP2uEFxixwRPGYXG
TEsMKn5p3V8ElM0OemSh+fSmD7iWTdeoCLAznHOhN+LVL10hCr4dIuFuVjv9TQyJ
OFtkkB05oqCX/gDiPY/uki1qRtxdEt/jLS38MjpdT8fxy1IToGFhQRXFmu8BCCVi
0rlnuVgFKYMgYlMDEiRzvEeAh4qmOahbJB5SBy7yIu4uk+W38u0UE7tWcJm0xsUU
xOQsDVkCAwEAAaOCA4cwggODMB8GA1UdIwQYMBaAFKW01us2xOdrpt/EZAsBKiAE
uGYjMB0GA1UdDgQWBBSAvnTtIo/l7WlOZ0wVg/E1p8O7FzAWBgNVHREEDzANggt0
Ymkub3N1LmVkdTA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhto
dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATCBnwYDVR0fBIGXMIGUMEigRqBEhkJo
dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2
U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYI
KwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
b20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9U
cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8E
AjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQDuzdBk1dsazsVct520zROi
ModGfLzs3sNRSFlGcR+1mwAAAYqLFIXPAAAEAwBGMEQCIERQjSZGKK4ZOe0/RifD
kdNYaabmtrevIz2iEvKpL/4/AiBh2UfkETiB2hPDPSlvQepnRc5u3AiQJgRaqvxI
0e5DXgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiosUhg0A
AAQDAEgwRgIhAPsO3BS9FuGo6LFbPrS1+9fFRIXZm8Xcg13ElgyGs3XJAiEA1qqI
02m7Q99AUWKPgl/AFtGmLn+i4/YWXdtzoVbeqcAAdgDatr9rP7W2Ip+bwrtca+hw
kXFsu1GEhTS9pD0wSNf7qwAAAYqLFIXxAAAEAwBHMEUCIQDLpncuIi7LgnRnioa5
5OWzyE7hymzpIrzcLquhfs2FiAIgPnlMfSpBmIMhpuiCl5V3Ar9fR5lLsiRk2kvv
jbyK9O4wDQYJKoZIhvcNAQELBQADggIBAJcViEzYEyXwR11cPqy8/sRz3Bu69iqX
ym2cod+u08tJeFOrVQbvx9VOmotduL8zfiIzjB5rnjWbs8S4s1YCCQzbN394F2az
Ld4vQXdV1dg5J4FvJRm3MaiNyfA34VBWXFbzOKlm48C7svuq0NsUBStzMMWlcjjt
HtpwBhNfc/uJ0sYIkecUTLNgpjVsEKvk6huptpCYdj1n89x6Ctp9+tRrilK6/tcb
pv2dGjTy3/vcB6EH6sADAKOq2OtsJbyBTt8IHArcLP4xfQgt08twLsDJXhHkRg6g
YXSfGCullwEiBgRj55noOtWdblNPq9Wdf2q6/bJb5zBZaTBqkmA2HT9NxUPe+Oz3
UMsuHWIf7SnXO6LMi6jBtEdKAik1PGj9Fn1i8TRPOqbOJUs4PhdT+92knbtsArtg
xQpQdRFo2MxmaXYktZLeUG7EO2h5iw4AcZ+t4w4gOdhww/G0ctefrWjCn5ctDHvB
iQLBr5xaahhzdPGfEjU9Z4yaXaC5XE0M8DoTL3TWU9jGNTwYN9tn+9fQiYn7UbPj
U4/R+0UhNi+XHGOm6nUsH0PK7LKh1iV6wQl2tSCaWr2sXOcCG0wHtN5/GMESbPrF
02A/oGLfIXmshGYd6fYnzHPOa/dUzyP4/RQ+Y8dbshbSkvJbqsrQCDW+cZleLqtS
7NLR/1ssyhyB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRVj12HzU7Czoga3FzQT
RJU/EguMbMhMsch2LQY4Nwn7g1c0YUI8AVrZzewqHCtQ9ohXmpQt9fMgkjYUbwfm
YxF8ZQcWd3UGmpmbS2MIRtH3fO3YlQjsWfknnEqL59Vc/a4QXGLHBE8ZhcZMSwwq
fmndXwSUzQ56ZKH59KYPuJZN16gIsDOcc6E34tUvXSEKvh0i4W5WO/1NDIk4W2SQ
HTmioJf+AOI9j+6SLWpG3F0S3+MtLfwyOl1Px/HLUhOgYWFBFcWa7wEIJWLSuWe5
WAUpgyBiUwMSJHO8R4CHiqY5qFskHlIHLvIi7i6T5bfy7RQTu1ZwmbTGxRTE5CwN
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21130303611416113086083438562899992958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tbi.osu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21344821343963875569186156936862262488905581918101560904541933935050504261596417374674416273237693098029723336834900123635827278281525208825958497149438795027848121754111508585307459823989209811612526250580915486130774128362190847918738818705532667953708681841966949739720111020104479483486954489580894724270553957550467509203609435264943111444231970294238128020351013273807570783799170878463730258489781276860800223728951033892022447555742652456105802535078126952129731955867612998565656011787360204559133470652278947649835596403135191121821002333664234788837415855097994500017361233749439920856296010936254850665817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80be74ed228fe5ed694e674c1583f135a7c3bb17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbi.osu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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