examinertraining.britishcouncil.org
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0f:68:15:0c:32:b0:f6:43:1b:23:4a:ae:d9:b5:dc:16 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=examinertraining.britishcouncil.org
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:68:15:0c:32:b0:f6:43:1b:23:4a:ae:d9:b5:dc:16Serial Number (int): 20478845707089171398536787357544602646
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 20:96:84:77:dc:db:8b:7c:7f:cb:8e:12:d6:cf:53:4b:d2:93:cc:a0
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 28:0a:b1:38:e9:b4:69:bb:e5:96:bb:fa:19:06:93:ee:5b:e3:cf:80
Fingerprint (sha256): 02:6c:f6:31:01:25:cb:a0:13:44:cf:01:f1:77:c3:96:42:6c:3a:c9:36:d1:1e:b7:5d:2a:a7:ee:90:f6:ec:26
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate examinertraining.britishcouncil.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for examinertraining.britishcouncil.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
examinertraining.britishcouncil.org
Other certificates including the domain name britishcouncil.org
(limited to 100 certificates)
statuspage.io
survey.britishcouncil.org
primaryplus.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
taqaddam-tasters.britishcouncil.org
accreditation.lumanity.com
bcppx.fabs.britishcouncil.org
e2.shared.global.fastly.net
f.ssl.fastly.net
alumnicredentials.kcl.ac.uk
www.mylibrary.britishcouncil.org
e2.shared.global.fastly.net
a2.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
vst.britishcouncil.org
monitor.jumio.com
domains.clickmeter.com
monitor.jumio.com
achievements.launchyou.com
agent-training.britishcouncil.org
roam2.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
f.ssl.fastly.net
literature.britishcouncil.org
achievements.launchyou.com
distribution-status.rbb-online.de
e2.shared.global.fastly.net
*.BritishCouncil.org
examinertraining.britishcouncil.org
e2.shared.global.fastly.net
americas.portal.britishcouncil.org
literature.britishcouncil.org
e2.shared.global.fastly.net
e2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
careers.britishcouncil.org
school-partner-finder.britishcouncil.org
school-partner-finder.britishcouncil.org
reportcp-uat.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
accreditation.lumanity.com
*.britishcouncil.org
centresupport.britishcouncil.org
monitor.jumio.com
statuspage.io
e2.shared.global.fastly.net
*.britishcouncil.org
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
*.professionalskills.britishcouncil.org
e2.shared.global.fastly.net
a2.ssl.fastly.net
statuspage.io
*.britishcouncil.org
achievements.launchyou.com
statuspage.io
brandhub.britishcouncil.org
*.sms.britishcouncil.org
a2.ssl.fastly.net
apply.gmt.britishcouncil.org
statuspage.io
spainportal.britishcouncil.org
malaysia.ielts.britishcouncil.org
edinburghshowcase.britishcouncil.org
taqaddam.britishcouncil.org
*.britishcouncil.org
*.britishcouncil.org
achievements.launchyou.com
statuspage.io
ssl514874.cloudflaressl.com
statuspage.io
statuspage.io
taqaddam-tasters.britishcouncil.org
1001ways.britishcouncil.org
f.ssl.fastly.net
accreditation.lumanity.com
statuspage.io
f.ssl.fastly.net
f.ssl.fastly.net
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
5694979263430656-fe3.pantheonsite.io
e2.shared.global.fastly.net
apply.gmt.britishcouncil.org
aptistraining.britishcouncil.org
e2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
taqaddam.britishcouncil.org
statuspage.io
e2.shared.global.fastly.net
f.ssl.fastly.net
accreditation.lumanity.com
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
distribution-status.rbb-online.de
statuspage.io
statuspage.io
edinburghshowcase.britishcouncil.org
taqaddam.britishcouncil.org
survey.britishcouncil.org
primaryplus.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
taqaddam-tasters.britishcouncil.org
accreditation.lumanity.com
bcppx.fabs.britishcouncil.org
e2.shared.global.fastly.net
f.ssl.fastly.net
alumnicredentials.kcl.ac.uk
www.mylibrary.britishcouncil.org
e2.shared.global.fastly.net
a2.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
vst.britishcouncil.org
monitor.jumio.com
domains.clickmeter.com
monitor.jumio.com
achievements.launchyou.com
agent-training.britishcouncil.org
roam2.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
f.ssl.fastly.net
literature.britishcouncil.org
achievements.launchyou.com
distribution-status.rbb-online.de
e2.shared.global.fastly.net
*.BritishCouncil.org
examinertraining.britishcouncil.org
e2.shared.global.fastly.net
americas.portal.britishcouncil.org
literature.britishcouncil.org
e2.shared.global.fastly.net
e2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
careers.britishcouncil.org
school-partner-finder.britishcouncil.org
school-partner-finder.britishcouncil.org
reportcp-uat.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
accreditation.lumanity.com
*.britishcouncil.org
centresupport.britishcouncil.org
monitor.jumio.com
statuspage.io
e2.shared.global.fastly.net
*.britishcouncil.org
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
*.professionalskills.britishcouncil.org
e2.shared.global.fastly.net
a2.ssl.fastly.net
statuspage.io
*.britishcouncil.org
achievements.launchyou.com
statuspage.io
brandhub.britishcouncil.org
*.sms.britishcouncil.org
a2.ssl.fastly.net
apply.gmt.britishcouncil.org
statuspage.io
spainportal.britishcouncil.org
malaysia.ielts.britishcouncil.org
edinburghshowcase.britishcouncil.org
taqaddam.britishcouncil.org
*.britishcouncil.org
*.britishcouncil.org
achievements.launchyou.com
statuspage.io
ssl514874.cloudflaressl.com
statuspage.io
statuspage.io
taqaddam-tasters.britishcouncil.org
1001ways.britishcouncil.org
f.ssl.fastly.net
accreditation.lumanity.com
statuspage.io
f.ssl.fastly.net
f.ssl.fastly.net
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
5694979263430656-fe3.pantheonsite.io
e2.shared.global.fastly.net
apply.gmt.britishcouncil.org
aptistraining.britishcouncil.org
e2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
taqaddam.britishcouncil.org
statuspage.io
e2.shared.global.fastly.net
f.ssl.fastly.net
accreditation.lumanity.com
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
distribution-status.rbb-online.de
statuspage.io
statuspage.io
edinburghshowcase.britishcouncil.org
taqaddam.britishcouncil.org
Certificate
The complete raw certificate details for examinertraining.britishcouncil.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHsjCCBZqgAwIBAgIQD2gVDDKw9kMbI0qu2bXcFjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwODE2MDAwMDAwWhcNMjQwMjE2MjM1OTU5WjAuMSwwKgYDVQQDEyNleGFtaW5l cnRyYWluaW5nLmJyaXRpc2hjb3VuY2lsLm9yZzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAME5DgZc7pxiF9sRmH65yH0Nw5bjSZ2WUV4LXinNzzdfudzJ XxF3A2VJS1/QzVUm0fl+qg49HdUtVTo+ZcFaagtR5yDrqbJreXCeFf45+GANAR7z KrrBVgMzp335UBGR7MC2BuT01V2OB/tE6JEBO7twTZdsrXZc0QXTL1bDV6irSffe ditnN56VkoWwFiR8+LugVeCnFYWzWy2i9aahu1JyIDnVwVPxAExMmeu8hEeM3s3S WZxWLblquRPOaNj7CGngo52ii+sIfsw6ddfJfIExJnUgQnqmfGjTG0f7AbQ6g6AY EQB7dlkgeGlk+vMmDDO8i/om7oYo2lOGM4PBKW0CAwEAAaOCA5wwggOYMB8GA1Ud IwQYMBaAFKW01us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBQgloR33NuLfH/L jhLWz1NL0pPMoDAuBgNVHREEJzAlgiNleGFtaW5lcnRyYWluaW5nLmJyaXRpc2hj b3VuY2lsLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2lj ZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNy bDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFs VExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIB MCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBhwYI KwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9U cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAJBgNVHRMEAjAA MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsazsVct520zROiModG fLzs3sNRSFlGcR+1mwAAAYn9bfDbAAAEAwBHMEUCIC7TZPGg/5GB4gMbUxhvmGgM KAzNuiuTgo+rFtI7XMzbAiEAlZz9DyVbdHMGVJJCs0GdSymuz3W6W5URFAO+08hZ LpoAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYn9bfC+AAAE AwBHMEUCIQDTDWUTnOWNseeJ/7HXnQ4RZBxVoVN0keIPFG7I2edumgIgO8vgsnFg 8PI/Jg8OKKr3N5+EYBsPaTCU7gSj1kEhZekAdgDatr9rP7W2Ip+bwrtca+hwkXFs u1GEhTS9pD0wSNf7qwAAAYn9bfCLAAAEAwBHMEUCIAJYnThvSb+4+MUHY0c+ARI6 5icdR9w2hmYIWOLr2wPBAiEAtuRogZDxwQP0Aew2haVtwwA+sXOrO3eiHGEkUA3K ZsIwDQYJKoZIhvcNAQELBQADggIBANMz+zgMPg+jNMiuGOSY2Xd/wMNySSLFMDmy xxRLp6Wxor9yrZXwB1B1bnNwOasuPWR1/CYAkiLf/RMGkEuhBb+ORyodF0d7KvQb ACy4naIGCrB4w83/C/OAxwDDwKsPqyzUW9XUqDuQQetDRksBbN4jyEwPYQeQV/Wl iRc9rdaleEHyagwHrooyNT14hlhwD7UcwKosShyjD7htEdyYASAiIziZsKB21kcY rkpxWRe+8qHKMSvFkSCzZwDCs5CGwDKUFlrbLPK99qd2RQkWS5qdWi8ZnV/RmV5q jCQPvUhp7MrXZPTzBJ4VcdQsWQEBr5fHYEGFiQFonGBJ8N6zS/ghsXj9kjgW5GYa pDyzFQcZpp7XYLy2Uo3hKJ2qvcncX+OVfhpkKS/bIjVzu8II8aLryLA/Si0t1AEJ gCj7/LeBSaI51p1g5sOWOuRr+wZtb+8UOL/pjy6fc7TGSxW2jeyy1I7Ar9HBHMwK 7gbU6EdMX9oz3JcRBQ9jAvFY4HfffiGy8e0k5Nv5D9NSdTlwP/xe7mKws/zzucl9 WFLPrCHIvyT/0nv6b1K7rP1cQ79So70vaWqqBbMgA4Ozho7TNTi6pHrt6PLpEL85 g06wK3ey9fRJTsUngCgAlzFpsmVqwHU8acFPbyniWr/Ot2KpUXsQ1KOWIbNSeukK v7g9yZ5L -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTkOBlzunGIX2xGYfrnI fQ3DluNJnZZRXgteKc3PN1+53MlfEXcDZUlLX9DNVSbR+X6qDj0d1S1VOj5lwVpq C1HnIOupsmt5cJ4V/jn4YA0BHvMqusFWAzOnfflQEZHswLYG5PTVXY4H+0TokQE7 u3BNl2ytdlzRBdMvVsNXqKtJ9952K2c3npWShbAWJHz4u6BV4KcVhbNbLaL1pqG7 UnIgOdXBU/EATEyZ67yER4zezdJZnFYtuWq5E85o2PsIaeCjnaKL6wh+zDp118l8 gTEmdSBCeqZ8aNMbR/sBtDqDoBgRAHt2WSB4aWT68yYMM7yL+ibuhijaU4Yzg8Ep bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20478845707089171398536787357544602646 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'examinertraining.britishcouncil.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24392127621328561280223475968223204344524835304741262000769363723917343084317099734443216739371619368574454577061551845259709366567076510314916809099597308909597586109642673692992901022433878642186374844102892384629336459376318615730177121728684388477747689515350670239616916817881448925847876567588978007660601494492084754212603839321891363763831995423105441303954216217429411302139374103241935964649604977970652135473566065984617862124707840901241073162167077831764146909718064438345860030246726523592554339874438278396929805441793362633075600593724878957285168974028015300671391324797369859716471817048434929641837 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 20968477dcdb8b7c7fcb8e12d6cf534bd293cca0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examinertraining.britishcouncil.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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