www.cwgc.org
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0a:bc:07:ac:f4:a9:0b:ba:45:d1:e6:03:eb:4d:90:21 was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.cwgc.org
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:bc:07:ac:f4:a9:0b:ba:45:d1:e6:03:eb:4d:90:21Serial Number (int): 14268587447083590580440671171717730337
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e2:0e:7e:26:df:5c:a6:7c:10:8c:3a:12:08:91:ed:82:a4:1c:4d:ae
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): de:5a:10:fa:84:e2:52:b2:0c:74:59:e4:60:67:9a:af:88:81:98:a5
Fingerprint (sha256): 02:95:a1:13:ed:40:18:8d:29:95:05:4d:4e:ec:cf:bd:7d:bd:b2:9b:5e:04:90:a0:0e:8b:87:da:08:8d:a5:b3
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate www.cwgc.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cwgc.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cwgc.org
Other certificates including the domain name cwgc.org
(limited to 100 certificates)
shapingoursorrow.cwgc.org
fourcorners.cwgc.org
www.cwgc.org
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
crmlive.cwgc.org
kiosk.vidaglobal.de
liberation.cwgc.org
blog.cwgc.org
www.cm.production.cwgc.org
kiosk.am-weststrand.com
www.cwgc.org
blog.cwgc.org
media.hirschmann-automotive.com
publications.cwgc.org
blog.cwgc.org
crmlive.cwgc.org
app.cwgc.org
magazine.legacylighthouse.org
app.cwgc.org
crmlive.cwgc.org
kiosk.der-kleine-georg.de
downloads.yspi.ie
archive.cwgc.org
owahub.cwgc.org
magazine.legacylighthouse.org
kiosk.vidaglobal.de
fourcorners.cwgc.org
kiosk.der-kleine-georg.de
quals.truebeck.com
secure.cwgc.org
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
intranet.cwgc.org
crmtest.cwgc.org
kiosk.vidaglobal.de
blog.cwgc.org
quals.truebeck.com
emag.indianjeweller.in
www.cm.uat.cwgc.org
www.cwgc.org
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
photo.cwgc.org
magazine.legacylighthouse.org
blog.cwgc.org
magazine.roarkidsmagazine.com
webmail.cwgc.org
kiosk.vidaglobal.de
news.vdmno.de
thecentre.cwgc.org
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
blog.cwgc.org
shapingoursorrow.cwgc.org
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.legacylighthouse.org
www.cwgc.org
magazine.legacylighthouse.org
publications.cwgc.org
blog.cwgc.org
blog.cwgc.org
secure.cwgc.org
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
mysite.cwgc.org
brochure.ntpwarranty.com
www.cm.uat.cwgc.org
wirbeicontipark.contipark.de
blog.cwgc.org
thecentre.cwgc.org
webmail.cwgc.org
www.cwgc.org
magazine.cioa.com
cwgc.org
kataloge.weilermoebel.at
magazine.legacylighthouse.org
downloads.yspi.ie
archive.cloud.cwgc.org
adfs.cwgc.org
magazines.somethinggoodmagazines.com
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
citrix.cwgc.org
katalog.gartenmode.de
flyer.aqua-dome.at
intranet.cwgc.org
brochure.ntpwarranty.com
magazine.legacylighthouse.org
brochure.ntpwarranty.com
fourcorners.cwgc.org
www.cwgc.org
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
crmlive.cwgc.org
kiosk.vidaglobal.de
liberation.cwgc.org
blog.cwgc.org
www.cm.production.cwgc.org
kiosk.am-weststrand.com
www.cwgc.org
blog.cwgc.org
media.hirschmann-automotive.com
publications.cwgc.org
blog.cwgc.org
crmlive.cwgc.org
app.cwgc.org
magazine.legacylighthouse.org
app.cwgc.org
crmlive.cwgc.org
kiosk.der-kleine-georg.de
downloads.yspi.ie
archive.cwgc.org
owahub.cwgc.org
magazine.legacylighthouse.org
kiosk.vidaglobal.de
fourcorners.cwgc.org
kiosk.der-kleine-georg.de
quals.truebeck.com
secure.cwgc.org
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
intranet.cwgc.org
crmtest.cwgc.org
kiosk.vidaglobal.de
blog.cwgc.org
quals.truebeck.com
emag.indianjeweller.in
www.cm.uat.cwgc.org
www.cwgc.org
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
photo.cwgc.org
magazine.legacylighthouse.org
blog.cwgc.org
magazine.roarkidsmagazine.com
webmail.cwgc.org
kiosk.vidaglobal.de
news.vdmno.de
thecentre.cwgc.org
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
blog.cwgc.org
shapingoursorrow.cwgc.org
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.legacylighthouse.org
www.cwgc.org
magazine.legacylighthouse.org
publications.cwgc.org
blog.cwgc.org
blog.cwgc.org
secure.cwgc.org
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
mysite.cwgc.org
brochure.ntpwarranty.com
www.cm.uat.cwgc.org
wirbeicontipark.contipark.de
blog.cwgc.org
thecentre.cwgc.org
webmail.cwgc.org
www.cwgc.org
magazine.cioa.com
cwgc.org
kataloge.weilermoebel.at
magazine.legacylighthouse.org
downloads.yspi.ie
archive.cloud.cwgc.org
adfs.cwgc.org
magazines.somethinggoodmagazines.com
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
citrix.cwgc.org
katalog.gartenmode.de
flyer.aqua-dome.at
intranet.cwgc.org
brochure.ntpwarranty.com
magazine.legacylighthouse.org
brochure.ntpwarranty.com
Certificate
The complete raw certificate details for www.cwgc.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhjCCBW6gAwIBAgIQCrwHrPSpC7pF0eYD602QITANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjQwMjE1MDAwMDAwWhcNMjQwODEzMjM1OTU5WjAXMRUwEwYDVQQDEwx3d3cuY3dn Yy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxYLY7GDVLyHy QM7ukyhiEfAMZDM49Lx9cEK6eJDEevaP+vl3xc+Ks92vAeus19T6k/7Cr+xySrBO X8WOdEpdAJ+6kY1IdlwHCTqWPxYj6mMz4AyXar4xGdt7PskQRhUF276oHmbG5uTe zKiXSKRG8lbDzBJ79w1PnRIdh6p1xNUqPwsGaPd83BHelQOm1y2dwUvullK6LsdS 4WXt143IkOYM6O7Z7aE/bfWPwo/kf8j1k8ZQmVGWxSmyA6GPrci0Hjw+IARBE75O kpkHMhuZOwFLYSojtSkK3azDzbpfbt0AV99k+1RWQKWr/8A0ByU9ih8AYHyr63o9 YvtKxpiRAgMBAAGjggOHMIIDgzAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASog BLhmIzAdBgNVHQ4EFgQU4g5+Jt9cpnwQjDoSCJHtgqQcTa4wFwYDVR0RBBAwDoIM d3d3LmN3Z2Mub3JnMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGH BggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB /wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABjayTqOIAAAQDAEcwRQIgd7T8wRkAI7fz3hjv 80rQxC1HDJBX/vS50+ngYF5hGYMCIQCxkrAOkDzXsvlSODJqhWOra2zmj/L/hLMW OrnnSAqJuwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjayT qRcAAAQDAEcwRQIgNBC/YY+4BB64uNilAnIKqGohzxfyRjLSVjAbGLZGIlYCIQCo BxpqrnYqxNAWrVfAvPJ9oogaCEo7CW5f7H+tpo0oaAB1ANq2v2s/tbYin5vCu1xr 6HCRcWy7UYSFNL2kPTBI1/urAAABjayTqRYAAAQDAEYwRAIgFWGbOZY9R9wE4pQl Vmw51lVkmE++Qm1zCbhC8rziJogCIGOwLeH6tE4KXGjje7mw+ExrnxthzpreewjD d20Ciah2MA0GCSqGSIb3DQEBCwUAA4ICAQCF8hdhbqNorum8bnv6MmRknSJFp1mT PlovzLwz7unnKRupfz065/cWbwcQriOHqAatXmj6mddkgljSP1cyLH5nJYTnw+eZ IZwZ19dhN7Zbv+4wVPJyTtqVjIZsno6MlCuKsEkKVCGBrlWdg+PvxTro7bGuqBwT zzzwM4J5x6WKgoMLSGfS8R79NrerXCiF57M7HInP5sHE1nU5Eoo2smmWOIomhdSy fUSH15hrbt4er+SrjpCaRCMilif3+LiK9jttfVwnbYNgHwO06UkqVDMHit5qv+OL g4JkvUYZ0CqidVsKL5ev2Q1oUWGs400LLvAIqq9GPoh6ugxmeNDQI2JIAqTpwk/t u7AZ/lFQIZBoNxCi5K7nCWocwSznsZQrkoAbKt60hFxb1p+bQBvy7+NYC3tpYvVr 3Ry1DPqygDeTD0gGpUoccE8DjXMf59ZeTnfrGTsxpq+0EkAdV5KnEA2ChrTkxbAk cUigLXGZz40LTmTF+SCTLqkQsn4nhq5d0UscpGvZ/Ld1iam1PT4Dk3HuIQDvmPMG FXV4FM52Mfx5oO45MkNs6mBM6W6yKGay91kBIPHupR24aXRGnlM6hhazMIx7yel7 tBh1tMelHBY4EiipNHYaumXdgxRIIt5RZ3Ea96w6bvJmeZd22IkMySy38PS50aga 1rVsX9M1/ra9+w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysWC2Oxg1S8h8kDO7pMo YhHwDGQzOPS8fXBCuniQxHr2j/r5d8XPirPdrwHrrNfU+pP+wq/sckqwTl/FjnRK XQCfupGNSHZcBwk6lj8WI+pjM+AMl2q+MRnbez7JEEYVBdu+qB5mxubk3syol0ik RvJWw8wSe/cNT50SHYeqdcTVKj8LBmj3fNwR3pUDptctncFL7pZSui7HUuFl7deN yJDmDOju2e2hP231j8KP5H/I9ZPGUJlRlsUpsgOhj63ItB48PiAEQRO+TpKZBzIb mTsBS2EqI7UpCt2sw826X27dAFffZPtUVkClq//ANAclPYofAGB8q+t6PWL7SsaY kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14268587447083590580440671171717730337 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwgc.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25597533967654733176441810464380438528897360952459270893036269817891254571721768104335214493041248152315967838341136488805384239500443301673046030571719695472591341902293431687632521051195961790853418722785741196825965018950884641708690572060993748485310825953054521801489230406576207653779675186893443153112310087070663740934732482548088427624387884182517937875427932066685643039036755595462362643513001143275450895240507846871873893017032153368187171012889330048815023124024191678930206227106577607528249156334012874137280067275632846059206443093409721497576949428214932669007596989420659381073655338395322265540753 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e20e7e26df5ca67c108c3a120891ed82a41c4dae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwgc.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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