news.bauermedia.co.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:f1:40:fe:ad:97:d5:8f:64:8b:e2:de:b3:56:86:e1 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.bauermedia.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:40:fe:ad:97:d5:8f:64:8b:e2:de:b3:56:86:e1
Serial Number (int): 5240345782154016414281045721767904993
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: dd:7c:80:fd:f3:05:93:ed:88:09:fa:a5:84:74:e1:67:1e:3a:74:a3
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 4a:28:e1:36:62:c3:4d:1f:12:fe:51:58:ab:fa:6a:a3:ec:aa:26:b3
Fingerprint (sha256): 02:3a:05:8d:b4:f2:65:31:0f:81:28:ad:78:ad:8e:c3:27:62:c1:79:38:7e:a4:ab:7b:17:e3:51:da:16:7f:e9

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate news.bauermedia.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.bauermedia.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.bauermedia.co.uk
www.news.bauermedia.co.uk

Other certificates including the domain name bauermedia.co.uk

(limited to 100 certificates)
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
sip.bauermedia.co.uk
news.bauermedia.co.uk
mail.bauermedia.co.uk
data.bauermedia.co.uk
lync.bauermedia.co.uk
mediavine.bauermedia.co.uk
data.bauermedia.co.uk
filesharing.bauermedia.co.uk
www.bauermedia.co.uk
mediavine.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
ldaps.bauermedia.co.uk
mail.bauermedia.co.uk
news.bauermedia.co.uk
ldaps.bauermedia.co.uk
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
uat-masterdataservice.bauermedia.co.uk
dse.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lync.bauermedia.co.uk
sip.bauermedia.co.uk
dse.bauermedia.co.uk
bauermedia.co.uk
ldaps.bauermedia.co.uk
creative.bauermedia.co.uk
data.bauermedia.co.uk
dse.thompson-valves.com
rack.bauermedia.co.uk
*.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
nextcloud.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lyncdiscover.bauermedia.co.uk
magazineanddigital.bauermedia.co.uk
bauermedia.co.uk
mail.bauermedia.co.uk
*.bauermedia.co.uk
production.bauercreative.net
filesharing.csaws.bauermedia.co.uk
www.stg.bauermedia.co.uk
careershub.bauermedia.co.uk
mediastorage-lls.bauermedia.co.uk
www.bauermedia.co.uk
radioawards.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
*.bauermedia.co.uk
nextcloud.bauermedia.co.uk
*.data.bauermedia.co.uk
www.bauermedia.co.uk
my.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
bauermedia.co.uk
*.bauermedia.co.uk
myvpn.bauermedia.co.uk
www.bauermedia.co.uk
bauermedia.co.uk
fbhost.bauermedia.co.uk
bauermedia.co.uk
data.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
www.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
mail.bauermedia.co.uk
sip-pbo.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
dse.bauermedia.co.uk
mail.bauermedia.co.uk
myview.bauermedia.co.uk
kibana.csaws.bauermedia.co.uk
*.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
*.data.bauermedia.co.uk
digitalsales.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
*.bauermedia.co.uk
mediavine.bauermedia.co.uk
fbhost.bauermedia.co.uk
www.bauermedia.co.uk
formbuilder.bauermedia.co.uk
nextcloud.bauermedia.co.uk

Certificate

The complete raw certificate details for news.bauermedia.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRDCCBCygAwIBAgIQA/FA/q2X1Y9ki+Les1aG4TANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjIxMjA3MDAwMDAwWhcNMjQwMTA3MjM1OTU5WjAgMR4wHAYDVQQDExVuZXdzLmJh
dWVybWVkaWEuY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb
SJRtPx8amDXF89u3Avcae87PLdzEl7oKqtedXUULs5FBX32Fj3Dp5a5wFXg23skS
X+DZvlNkldpzrlOVdSDAlSgSsPcRPbARe+unZIHgN8jfE4AbgBQQ6kFCXueih71Y
uGjRNqwX2H+6Sl4d32vPFIwFEu+soqB9WC0zuN8cujr0kNd4WDHP27siwfraRZLS
ZWYz175RUWc1qk9Hvcw1QUUrUETD9UdIy33EO3QT0jcalm9ms0ugDwF6y+WKEHEA
dNXdbGlUFtJGmhgIrdXRMUQdcT1P00TbjYGTnRHDXAkwVF6VsuOHFdElf/bFiXTb
wTA5MjDIVt70fXeAIWp7AgMBAAGjggI8MIICODAfBgNVHSMEGDAWgBSltNbrNsTn
a6bfxGQLASogBLhmIzAdBgNVHQ4EFgQU3XyA/fMFk+2ICfqlhHThZx46dKMwOwYD
VR0RBDQwMoIVbmV3cy5iYXVlcm1lZGlhLmNvLnVrghl3d3cubmV3cy5iYXVlcm1l
ZGlhLmNvLnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNl
cnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3Js
MEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxU
TFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgEw
KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGHBggr
BgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv
bTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dlb1Ry
dXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAkGA1UdEwQCMAAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAJrTPw4h2SnV
88mrBOxmuOaBYz9gLf7jdHOrmXBmuNNvYdwM1QKnzIAjVzmh/rs8dRzjFzojIY+A
G/RQOUwSqEsNkAlJSGpLQ++J0M+ufg7G+b7O+s2bXU/h8Xa5ezoEBwmTpuFOqxJh
s9qCdVh345q6gkKyyWiarVihdqETYlcEHN7MrKhB8J8mGYYkI9C3g7pX0Z6LluwD
lGx3xXAy/MAUdr/BhCMLYnxa83AJ+G6WOuDSLM8dRaEc8iGqzJh8LgOzhe4Wv+hR
hGm+x7IaOBT4Y5TkLktSeZh7ADOXCZS1IEyMlTkk7JdXSfmk21yVPwIhKw6E8fU7
mMg0535J3D4G3+QW7Y0V17fcBvSdgmBDdAw7YlhwXE732Qjt+4ryREmA9IsqjEWH
uafrdvZE9K72+il3wXoOiBBV/dU0pYmnptAn5U4rOCSPFC3KU3jtPSkHlmCWwjVL
JSJUkofwVpTG/ty8Yu+HprtZBi/2X/lU1bSVuhAJ4PaASh/c2DLCGV8p/zU0tkID
aarSQ+z1UYLqgyFXYpS7rxGUOgxyXr4zuBME4kDVQPHhrHbYVFLu1KjfzZubV5WM
V+H7cYTnBGlysih3z7NMTO5JX/h8xoowY98pmGTquk/fpOi5bpkdbc1kP9113jrr
atFXImPaSso7LqJagwICq/k5mhWErXs7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0iUbT8fGpg1xfPbtwL3
GnvOzy3cxJe6CqrXnV1FC7ORQV99hY9w6eWucBV4Nt7JEl/g2b5TZJXac65TlXUg
wJUoErD3ET2wEXvrp2SB4DfI3xOAG4AUEOpBQl7nooe9WLho0TasF9h/ukpeHd9r
zxSMBRLvrKKgfVgtM7jfHLo69JDXeFgxz9u7IsH62kWS0mVmM9e+UVFnNapPR73M
NUFFK1BEw/VHSMt9xDt0E9I3GpZvZrNLoA8BesvlihBxAHTV3WxpVBbSRpoYCK3V
0TFEHXE9T9NE242Bk50Rw1wJMFRelbLjhxXRJX/2xYl028EwOTIwyFbe9H13gCFq
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5240345782154016414281045721767904993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.bauermedia.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19602727699087231658792851501250661498521363819084581216669776511530020692621110816720425939908339188271687272364105466448965422835019897098667995561306662152706439800644518880581027625749755010478720387138166224849328758560195175921447734512649668679359748785066173899806530365276863567729141203535309266729702013494737236815476138158174405331408991496317850180127679901022791345555112100965528398201469436703414157660442962305135737912843112498865887041602150825480952806556531917731675440634589865088348542507877290993901422544831073503898607441403157018426375440975429273437699121931000026748788103317116208376443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd7c80fdf30593ed8809faa58474e1671e3a74a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.bauermedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.news.bauermedia.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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