demo-1int.trial.1spatial.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:e7:97:11:72:45:53:01:17:c7:6d:c8:27:86:7e:2e was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=demo-1int.trial.1spatial.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e7:97:11:72:45:53:01:17:c7:6d:c8:27:86:7e:2e
Serial Number (int): 10507080570909969415009977590807428654
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6e:9e:9c:ed:49:78:79:53:33:ff:65:34:ee:5b:34:ff:f5:e7:f1:5a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): e7:ce:d3:93:16:dd:40:8d:d7:8a:e9:46:f4:2a:3d:dd:7b:13:bd:e8
Fingerprint (sha256): 02:b7:8b:f2:8c:98:75:17:cf:8f:5e:ef:69:93:be:9a:21:7c:96:51:2b:fd:0e:1f:67:39:9d:cf:da:02:a2:bd

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate demo-1int.trial.1spatial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for demo-1int.trial.1spatial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo-1int.trial.1spatial.com

Other certificates including the domain name 1spatial.com

(limited to 100 certificates)
demo-1int.trial.1spatial.com
*.1spatial.com
mt911-1dg.1spatial.com
go.1spatial.com
1spatial.com
go.1spatial.com
rizing-1dg.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
spatial.shr.kisshosts.co.uk
pentest.1spatial.com
pentest.1spatial.com
go.1spatial.com
go.1spatial.com
*.1spatial.com
pentest.1spatial.com
1spatial.com
1ssupport-1int.1spatial.com
missouri911-1int.1spatial.com
*.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
*.1spatial.com
www.1spatial.com
1spatial.com
go.1spatial.com
1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
mt911-int.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
customer1.publicsafety.1spatial.com
pentest.1spatial.com
*.1spatial.com
publicsafety-test2.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
pentest.1spatial.com
missouri911.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
go.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
prod.30.slot.cdn.salesforce-communities.com
mt911-1int-dev.1spatial.com
tmpa-bulktest.1spatial.com
www.1spatial.com
pentest.1spatial.com
publicsafety-1int-test.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
www.1spatial.com
1consultants-us-int.1spatial.com
1spatial.com
go.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
dg-example-cloudcommon.1spatial.com
pentest.1spatial.com
defrarules-dev.1spatial.com
1spatial.com
pentest.1spatial.com
mt911-1dg-dev.1spatial.com
go.1spatial.com
www.1spatial.com
www.1spatial.com
pentest.1spatial.com
*.1spatial.com
pentest.1spatial.com
go.1spatial.com
1spatial.com
*.1spatial.com
*.1spatial.com

Certificate

The complete raw certificate details for demo-1int.trial.1spatial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHqDCCBZCgAwIBAgIQB+eXEXJFUwEXx23IJ4Z+LjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAnMSUwIwYDVQQDExxkZW1vLTFp
bnQudHJpYWwuMXNwYXRpYWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz3bi927g/3ga7zLSi9hBTZnBjJrX+kOEgrka6K9f4EhnISp71aqokwek
Eg/a8xJ4Npx4fVl+thNG8YMLeyDkSY7RPGfEPaHyGvnrdXUP/ROumLnz0xi3xFXq
zGlrHzABAec3OqSUsUvPKVFJtnbju8jd9PKtlPBnizJuFeTYRglnYxc/blU2RrPL
D8msnoOH1kXZvFav55YMtciTRYpLG6mDrOG2pF0Xx+qq3bbdYcAHmcUXgKhbmMeH
SKE7rFUB1gv3veMziDZWXWtnAEvqQ0h046V/SWBPXtGk2rmfwrqzJNae8jIs/5He
da1fB0+dDKlAozqEN4rV8wgN8isaTQIDAQABo4IDmTCCA5UwHwYDVR0jBBgwFoAU
pbTW6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFG6enO1JeHlTM/9lNO5bNP/1
5/FaMCcGA1UdEQQgMB6CHGRlbW8tMWludC50cmlhbC4xc3BhdGlhbC5jb20wPgYD
VR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu
Y3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9i
YWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAC
hkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNS
U0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB
1nkCBAIEggFvBIIBawFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf
tZsAAAGMO0SU/AAABAMARzBFAiEA36jkAcEHEsK1QixVFau5GlutH5TuBip1bm33
vks/JQQCIAKq96cFQb0TeGXaDMDtDDmi+ayrkmagovC+JHKv1YpbAHcASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMO0SVIgAABAMASDBGAiEA/SmC
0F3SxowCk5OYrHFAVTJwgK2bPo386rV54JN/lhECIQDD2O0tGsg6C6rlgHazBkcZ
urTvJEt8dyWODIGRGY+pPgB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI
1/urAAABjDtElQ8AAAQDAEcwRQIgMqo7+AYAFqdEAa+hRuG5jId3C+shpdWOdTEq
+QK5PvECIQDcJnEN0/MSkBjQagP6wXkQnEmuAh2aKPCwZDBBs5V3cTANBgkqhkiG
9w0BAQsFAAOCAgEA1iY35vF2/3hhkV3Cyz/xYOuwBGKFDsGR2k3m7dab2Nlz8LIL
GsS3GWb1Kw7aRKT35G65d6qj7ct7GU2e0/oOGyr7o1kz+W9WHZZ1YXuDJ03wwvE9
AF2jb7cuV063CqsZMIa/d23zw9XudhnPN7vW5NjCOQPzzDBlugr/y3BQeZU2hkCz
iLuB/5MTY6OYZWtI+2z+0ml6GoK2R3EE1tkevW0yeuCigcJuGuQWm4hCWnl9K1Jq
EKErdygi/Me8b+/11rJLbhBjJnF2J5+qJ1/awtCieQelbiDC0haYK5b9ZLNTUEm/
8b/QmtMKWl2J28LqioKtAroeoFnZ/UjV5UYxIRc8qFna5uaNxtEvyGaT2SRQdTBr
eo2wTCgyAhWiNf8WPEGuQbo4FDJ49U29fbIpTnXojqzXzOlzgWaG/GUMfvYaXR6h
4I5oOzMeSxSYnAGnQRy7ryn3idB2ePyMXFwL5p9qPPTciic+y6noD1KgFYhVUhzW
JmkojiyFF+xpEzKY/oaxPxpjjICMzHmgJXWvuWJr+ar8cg7FgAWQj9Su52kibYZb
KCc3plnSaS/+pupYXGOmH4YSROZSGjlBQ/bG1aYOoA+y9lm8357kICLrfnYrt2sl
mzsZfpjlJu/fbx0av2KWRCrTw0Svzejr/nupTN0z2oUq6+HifZrwDLlbG00=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3bi927g/3ga7zLSi9hB
TZnBjJrX+kOEgrka6K9f4EhnISp71aqokwekEg/a8xJ4Npx4fVl+thNG8YMLeyDk
SY7RPGfEPaHyGvnrdXUP/ROumLnz0xi3xFXqzGlrHzABAec3OqSUsUvPKVFJtnbj
u8jd9PKtlPBnizJuFeTYRglnYxc/blU2RrPLD8msnoOH1kXZvFav55YMtciTRYpL
G6mDrOG2pF0Xx+qq3bbdYcAHmcUXgKhbmMeHSKE7rFUB1gv3veMziDZWXWtnAEvq
Q0h046V/SWBPXtGk2rmfwrqzJNae8jIs/5Heda1fB0+dDKlAozqEN4rV8wgN8isa
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10507080570909969415009977590807428654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo-1int.trial.1spatial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26189954289521320487366627795352217539132759537863484491654272398881517274408649545373842876142107315715254798092909276217972045851849601467671785747741744433793499409941776765672738990764223206941187805106911407876818669237479145271337195349550893836016216728548664960911167634544436710960566777980723359255588086609174880191363641027675484334238788404530518312937639585292427868994686234925736419917558946958922780825911365101241163931939663470368731160342307103556211729549573585169588880925425639099257950047760362845453387772986986530722348201401468269544447215574547471680111155096712296920951309280069500475981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e9e9ced4978795333ff6534ee5b34fff5e7f15a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-1int.trial.1spatial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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