tbi.osu.edu
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0f:e5:8c:66:f3:b2:a2:1e:f3:24:76:c8:e6:71:21:7e was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tbi.osu.edu
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:e5:8c:66:f3:b2:a2:1e:f3:24:76:c8:e6:71:21:7eSerial Number (int): 21130303611416113086083438562899992958
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 80:be:74:ed:22:8f:e5:ed:69:4e:67:4c:15:83:f1:35:a7:c3:bb:17
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): bf:42:6f:b7:ef:94:59:0b:ca:ad:3c:a5:f6:9c:99:77:3f:af:1c:2f
Fingerprint (sha256): 01:17:cb:93:24:16:56:b3:0a:8e:b7:ef:8c:20:dc:d7:03:db:e8:a9:a9:44:79:2d:16:69:cc:e9:3a:03:51:e8
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate tbi.osu.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tbi.osu.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tbi.osu.edu
Other certificates including the domain name osu.edu
(limited to 100 certificates)
5757715179634688-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
adams.osu.edu
test-web-lws.edu.help
5719238044024832-fe2.pantheonsite.io
offer.osu.edu
5767917874446336-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
acarology.osu.edu
opensource.osu.edu
5719238044024832-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
5660980839186432-fe2.pantheonsite.io
5646874153320448-fe4.pantheonsite.io
5698125863845888-fe3.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
ucdc.edu
history.osu.edu
5644101080842240-fe2.pantheonsite.io
5687379545292800-fe2.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
nartc.fcm.arizona.edu
ksa-mrbs.webapps.engineering.osu.edu
5732910535540736-fe1.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
socrates.osu.edu
costume.osu.edu
5676201666412544-fe3.pantheonsite.io
bsal.osu.edu
*.webtest.osu.edu
5672591746400256-fe3.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
5662543133540352-fe4.pantheonsite.io
cse.engineering.osu.edu
5722152447770624-fe1.pantheonsite.io
tbi.osu.edu
5690257819303936-fe4.pantheonsite.io
alkireproject.osu.edu
skullbase.osu.edu
5740745361195008-fe4.pantheonsite.io
insight.tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5696381570252800-fe2.pantheonsite.io
5668753656250368-fe1.pantheonsite.io
5741031244955648-fe4.pantheonsite.io
preble.osu.edu
5676201666412544-fe3.pantheonsite.io
5707725409353728-fe2.pantheonsite.io
test.eis.uw.edu
5734743547052032-fe3.pantheonsite.io
legacypaydocs.osu.edu
chembio.osu.edu
heroesproject.osu.edu
tas.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
www.design-engineering.princeton.edu
5677751478517760-fe2.pantheonsite.io
intranet.odee.osu.edu
heartlung.osu.edu
cfaes.osu.edu
5672591746400256-fe3.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
iam-pamprd-db01.bcd.it.osu.edu
internalmedicine.osu.edu
5696381570252800-fe2.pantheonsite.io
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
buckeyelink3.osu.edu
5676982813589504-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5182915545661440-fe2.pantheonsite.io
5676201666412544-fe3.pantheonsite.io
ehe.osu.edu
tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5726348362383360-fe3.pantheonsite.io
bme.osu.edu
5711637696741376-fe4.pantheonsite.io
mae.osu.edu
5665925286068224-fe2.pantheonsite.io
api.agg-qa.webtest.osu.edu
buckeyeturf.osu.edu
ehistory.osu.edu
akips01.coeit.osu.edu
5668753656250368-fe1.pantheonsite.io
www.hcii.cs.cmu.edu
5631986051842048-fe1.pantheonsite.io
tk20.ehe.osu.edu
advancementintranet.osu.edu
5662543133540352-fe4.pantheonsite.io
www.blogs.earthjustice.org
gisprtprd01.bcd.it.osu.edu
5722152447770624-fe1.pantheonsite.io
artsandsciences.osu.edu
bpte.osu.edu
*.nursing.osu.edu
suicideprevention.osu.edu
5674248798470144-fe1.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
adams.osu.edu
test-web-lws.edu.help
5719238044024832-fe2.pantheonsite.io
offer.osu.edu
5767917874446336-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
acarology.osu.edu
opensource.osu.edu
5719238044024832-fe2.pantheonsite.io
5674248798470144-fe1.pantheonsite.io
5660980839186432-fe2.pantheonsite.io
5646874153320448-fe4.pantheonsite.io
5698125863845888-fe3.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
ucdc.edu
history.osu.edu
5644101080842240-fe2.pantheonsite.io
5687379545292800-fe2.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
nartc.fcm.arizona.edu
ksa-mrbs.webapps.engineering.osu.edu
5732910535540736-fe1.pantheonsite.io
5722152447770624-fe1.pantheonsite.io
socrates.osu.edu
costume.osu.edu
5676201666412544-fe3.pantheonsite.io
bsal.osu.edu
*.webtest.osu.edu
5672591746400256-fe3.pantheonsite.io
ksa-mrbs.webapps.engineering.osu.edu
5662543133540352-fe4.pantheonsite.io
cse.engineering.osu.edu
5722152447770624-fe1.pantheonsite.io
tbi.osu.edu
5690257819303936-fe4.pantheonsite.io
alkireproject.osu.edu
skullbase.osu.edu
5740745361195008-fe4.pantheonsite.io
insight.tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5696381570252800-fe2.pantheonsite.io
5668753656250368-fe1.pantheonsite.io
5741031244955648-fe4.pantheonsite.io
preble.osu.edu
5676201666412544-fe3.pantheonsite.io
5707725409353728-fe2.pantheonsite.io
test.eis.uw.edu
5734743547052032-fe3.pantheonsite.io
legacypaydocs.osu.edu
chembio.osu.edu
heroesproject.osu.edu
tas.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
www.design-engineering.princeton.edu
5677751478517760-fe2.pantheonsite.io
intranet.odee.osu.edu
heartlung.osu.edu
cfaes.osu.edu
5672591746400256-fe3.pantheonsite.io
5666083260334080-fe3.pantheonsite.io
iam-pamprd-db01.bcd.it.osu.edu
internalmedicine.osu.edu
5696381570252800-fe2.pantheonsite.io
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
buckeyelink3.osu.edu
5676982813589504-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5182915545661440-fe2.pantheonsite.io
5676201666412544-fe3.pantheonsite.io
ehe.osu.edu
tk20.ehe.osu.edu
ksa-mrbs.webapps.engineering.osu.edu
5726348362383360-fe3.pantheonsite.io
bme.osu.edu
5711637696741376-fe4.pantheonsite.io
mae.osu.edu
5665925286068224-fe2.pantheonsite.io
api.agg-qa.webtest.osu.edu
buckeyeturf.osu.edu
ehistory.osu.edu
akips01.coeit.osu.edu
5668753656250368-fe1.pantheonsite.io
www.hcii.cs.cmu.edu
5631986051842048-fe1.pantheonsite.io
tk20.ehe.osu.edu
advancementintranet.osu.edu
5662543133540352-fe4.pantheonsite.io
www.blogs.earthjustice.org
gisprtprd01.bcd.it.osu.edu
5722152447770624-fe1.pantheonsite.io
artsandsciences.osu.edu
bpte.osu.edu
*.nursing.osu.edu
suicideprevention.osu.edu
Certificate
The complete raw certificate details for tbi.osu.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhTCCBW2gAwIBAgIQD+WMZvOyoh7zJHbI5nEhfjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwOTEyMDAwMDAwWhcNMjQwMzEyMjM1OTU5WjAWMRQwEgYDVQQDEwt0Ymkub3N1 LmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkVY9dh81Ows6IG txc0E0SVPxILjGzITLHIdi0GODcJ+4NXNGFCPAFa2c3sKhwrUPaIV5qULfXzIJI2 FG8H5mMRfGUHFnd1BpqZm0tjCEbR93zt2JUI7Fn5J5xKi+fVXP2uEFxixwRPGYXG TEsMKn5p3V8ElM0OemSh+fSmD7iWTdeoCLAznHOhN+LVL10hCr4dIuFuVjv9TQyJ OFtkkB05oqCX/gDiPY/uki1qRtxdEt/jLS38MjpdT8fxy1IToGFhQRXFmu8BCCVi 0rlnuVgFKYMgYlMDEiRzvEeAh4qmOahbJB5SBy7yIu4uk+W38u0UE7tWcJm0xsUU xOQsDVkCAwEAAaOCA4cwggODMB8GA1UdIwQYMBaAFKW01us2xOdrpt/EZAsBKiAE uGYjMB0GA1UdDgQWBBSAvnTtIo/l7WlOZ0wVg/E1p8O7FzAWBgNVHREEDzANggt0 Ymkub3N1LmVkdTA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhto dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATCBnwYDVR0fBIGXMIGUMEigRqBEhkJo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2 U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYI KwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9U cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8E AjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYqLFIXPAAAEAwBGMEQCIERQjSZGKK4ZOe0/RifD kdNYaabmtrevIz2iEvKpL/4/AiBh2UfkETiB2hPDPSlvQepnRc5u3AiQJgRaqvxI 0e5DXgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiosUhg0A AAQDAEgwRgIhAPsO3BS9FuGo6LFbPrS1+9fFRIXZm8Xcg13ElgyGs3XJAiEA1qqI 02m7Q99AUWKPgl/AFtGmLn+i4/YWXdtzoVbeqcAAdgDatr9rP7W2Ip+bwrtca+hw kXFsu1GEhTS9pD0wSNf7qwAAAYqLFIXxAAAEAwBHMEUCIQDLpncuIi7LgnRnioa5 5OWzyE7hymzpIrzcLquhfs2FiAIgPnlMfSpBmIMhpuiCl5V3Ar9fR5lLsiRk2kvv jbyK9O4wDQYJKoZIhvcNAQELBQADggIBAJcViEzYEyXwR11cPqy8/sRz3Bu69iqX ym2cod+u08tJeFOrVQbvx9VOmotduL8zfiIzjB5rnjWbs8S4s1YCCQzbN394F2az Ld4vQXdV1dg5J4FvJRm3MaiNyfA34VBWXFbzOKlm48C7svuq0NsUBStzMMWlcjjt HtpwBhNfc/uJ0sYIkecUTLNgpjVsEKvk6huptpCYdj1n89x6Ctp9+tRrilK6/tcb pv2dGjTy3/vcB6EH6sADAKOq2OtsJbyBTt8IHArcLP4xfQgt08twLsDJXhHkRg6g YXSfGCullwEiBgRj55noOtWdblNPq9Wdf2q6/bJb5zBZaTBqkmA2HT9NxUPe+Oz3 UMsuHWIf7SnXO6LMi6jBtEdKAik1PGj9Fn1i8TRPOqbOJUs4PhdT+92knbtsArtg xQpQdRFo2MxmaXYktZLeUG7EO2h5iw4AcZ+t4w4gOdhww/G0ctefrWjCn5ctDHvB iQLBr5xaahhzdPGfEjU9Z4yaXaC5XE0M8DoTL3TWU9jGNTwYN9tn+9fQiYn7UbPj U4/R+0UhNi+XHGOm6nUsH0PK7LKh1iV6wQl2tSCaWr2sXOcCG0wHtN5/GMESbPrF 02A/oGLfIXmshGYd6fYnzHPOa/dUzyP4/RQ+Y8dbshbSkvJbqsrQCDW+cZleLqtS 7NLR/1ssyhyB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRVj12HzU7Czoga3FzQT RJU/EguMbMhMsch2LQY4Nwn7g1c0YUI8AVrZzewqHCtQ9ohXmpQt9fMgkjYUbwfm YxF8ZQcWd3UGmpmbS2MIRtH3fO3YlQjsWfknnEqL59Vc/a4QXGLHBE8ZhcZMSwwq fmndXwSUzQ56ZKH59KYPuJZN16gIsDOcc6E34tUvXSEKvh0i4W5WO/1NDIk4W2SQ HTmioJf+AOI9j+6SLWpG3F0S3+MtLfwyOl1Px/HLUhOgYWFBFcWa7wEIJWLSuWe5 WAUpgyBiUwMSJHO8R4CHiqY5qFskHlIHLvIi7i6T5bfy7RQTu1ZwmbTGxRTE5CwN WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21130303611416113086083438562899992958 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tbi.osu.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21344821343963875569186156936862262488905581918101560904541933935050504261596417374674416273237693098029723336834900123635827278281525208825958497149438795027848121754111508585307459823989209811612526250580915486130774128362190847918738818705532667953708681841966949739720111020104479483486954489580894724270553957550467509203609435264943111444231970294238128020351013273807570783799170878463730258489781276860800223728951033892022447555742652456105802535078126952129731955867612998565656011787360204559133470652278947649835596403135191121821002333664234788837415855097994500017361233749439920856296010936254850665817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 80be74ed228fe5ed694e674c1583f135a7c3bb17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbi.osu.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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