demo-1int.trial.1spatial.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 07:e7:97:11:72:45:53:01:17:c7:6d:c8:27:86:7e:2e was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=demo-1int.trial.1spatial.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:e7:97:11:72:45:53:01:17:c7:6d:c8:27:86:7e:2eSerial Number (int): 10507080570909969415009977590807428654
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 6e:9e:9c:ed:49:78:79:53:33:ff:65:34:ee:5b:34:ff:f5:e7:f1:5a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): e7:ce:d3:93:16:dd:40:8d:d7:8a:e9:46:f4:2a:3d:dd:7b:13:bd:e8
Fingerprint (sha256): 02:b7:8b:f2:8c:98:75:17:cf:8f:5e:ef:69:93:be:9a:21:7c:96:51:2b:fd:0e:1f:67:39:9d:cf:da:02:a2:bd
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate demo-1int.trial.1spatial.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for demo-1int.trial.1spatial.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
demo-1int.trial.1spatial.com
Other certificates including the domain name 1spatial.com
(limited to 100 certificates)
demo-1int.trial.1spatial.com
*.1spatial.com
mt911-1dg.1spatial.com
go.1spatial.com
1spatial.com
go.1spatial.com
rizing-1dg.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
spatial.shr.kisshosts.co.uk
pentest.1spatial.com
pentest.1spatial.com
go.1spatial.com
go.1spatial.com
*.1spatial.com
pentest.1spatial.com
1spatial.com
1ssupport-1int.1spatial.com
missouri911-1int.1spatial.com
*.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
*.1spatial.com
www.1spatial.com
1spatial.com
go.1spatial.com
1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
mt911-int.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
customer1.publicsafety.1spatial.com
pentest.1spatial.com
*.1spatial.com
publicsafety-test2.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
pentest.1spatial.com
missouri911.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
go.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
prod.30.slot.cdn.salesforce-communities.com
mt911-1int-dev.1spatial.com
tmpa-bulktest.1spatial.com
www.1spatial.com
pentest.1spatial.com
publicsafety-1int-test.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
www.1spatial.com
1consultants-us-int.1spatial.com
1spatial.com
go.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
dg-example-cloudcommon.1spatial.com
pentest.1spatial.com
defrarules-dev.1spatial.com
1spatial.com
pentest.1spatial.com
mt911-1dg-dev.1spatial.com
go.1spatial.com
www.1spatial.com
www.1spatial.com
pentest.1spatial.com
*.1spatial.com
pentest.1spatial.com
go.1spatial.com
1spatial.com
*.1spatial.com
*.1spatial.com
*.1spatial.com
mt911-1dg.1spatial.com
go.1spatial.com
1spatial.com
go.1spatial.com
rizing-1dg.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
spatial.shr.kisshosts.co.uk
pentest.1spatial.com
pentest.1spatial.com
go.1spatial.com
go.1spatial.com
*.1spatial.com
pentest.1spatial.com
1spatial.com
1ssupport-1int.1spatial.com
missouri911-1int.1spatial.com
*.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
*.1spatial.com
www.1spatial.com
1spatial.com
go.1spatial.com
1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
mt911-int.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
customer1.publicsafety.1spatial.com
pentest.1spatial.com
*.1spatial.com
publicsafety-test2.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
pentest.1spatial.com
missouri911.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
go.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
prod.30.slot.cdn.salesforce-communities.com
mt911-1int-dev.1spatial.com
tmpa-bulktest.1spatial.com
www.1spatial.com
pentest.1spatial.com
publicsafety-1int-test.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
www.1spatial.com
1consultants-us-int.1spatial.com
1spatial.com
go.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
dg-example-cloudcommon.1spatial.com
pentest.1spatial.com
defrarules-dev.1spatial.com
1spatial.com
pentest.1spatial.com
mt911-1dg-dev.1spatial.com
go.1spatial.com
www.1spatial.com
www.1spatial.com
pentest.1spatial.com
*.1spatial.com
pentest.1spatial.com
go.1spatial.com
1spatial.com
*.1spatial.com
*.1spatial.com
Certificate
The complete raw certificate details for demo-1int.trial.1spatial.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHqDCCBZCgAwIBAgIQB+eXEXJFUwEXx23IJ4Z+LjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAnMSUwIwYDVQQDExxkZW1vLTFp bnQudHJpYWwuMXNwYXRpYWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAz3bi927g/3ga7zLSi9hBTZnBjJrX+kOEgrka6K9f4EhnISp71aqokwek Eg/a8xJ4Npx4fVl+thNG8YMLeyDkSY7RPGfEPaHyGvnrdXUP/ROumLnz0xi3xFXq zGlrHzABAec3OqSUsUvPKVFJtnbju8jd9PKtlPBnizJuFeTYRglnYxc/blU2RrPL D8msnoOH1kXZvFav55YMtciTRYpLG6mDrOG2pF0Xx+qq3bbdYcAHmcUXgKhbmMeH SKE7rFUB1gv3veMziDZWXWtnAEvqQ0h046V/SWBPXtGk2rmfwrqzJNae8jIs/5He da1fB0+dDKlAozqEN4rV8wgN8isaTQIDAQABo4IDmTCCA5UwHwYDVR0jBBgwFoAU pbTW6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFG6enO1JeHlTM/9lNO5bNP/1 5/FaMCcGA1UdEQQgMB6CHGRlbW8tMWludC50cmlhbC4xc3BhdGlhbC5jb20wPgYD VR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGln aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu Y3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9i YWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAC hkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNS U0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB 1nkCBAIEggFvBIIBawFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf tZsAAAGMO0SU/AAABAMARzBFAiEA36jkAcEHEsK1QixVFau5GlutH5TuBip1bm33 vks/JQQCIAKq96cFQb0TeGXaDMDtDDmi+ayrkmagovC+JHKv1YpbAHcASLDja9qm RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMO0SVIgAABAMASDBGAiEA/SmC 0F3SxowCk5OYrHFAVTJwgK2bPo386rV54JN/lhECIQDD2O0tGsg6C6rlgHazBkcZ urTvJEt8dyWODIGRGY+pPgB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI 1/urAAABjDtElQ8AAAQDAEcwRQIgMqo7+AYAFqdEAa+hRuG5jId3C+shpdWOdTEq +QK5PvECIQDcJnEN0/MSkBjQagP6wXkQnEmuAh2aKPCwZDBBs5V3cTANBgkqhkiG 9w0BAQsFAAOCAgEA1iY35vF2/3hhkV3Cyz/xYOuwBGKFDsGR2k3m7dab2Nlz8LIL GsS3GWb1Kw7aRKT35G65d6qj7ct7GU2e0/oOGyr7o1kz+W9WHZZ1YXuDJ03wwvE9 AF2jb7cuV063CqsZMIa/d23zw9XudhnPN7vW5NjCOQPzzDBlugr/y3BQeZU2hkCz iLuB/5MTY6OYZWtI+2z+0ml6GoK2R3EE1tkevW0yeuCigcJuGuQWm4hCWnl9K1Jq EKErdygi/Me8b+/11rJLbhBjJnF2J5+qJ1/awtCieQelbiDC0haYK5b9ZLNTUEm/ 8b/QmtMKWl2J28LqioKtAroeoFnZ/UjV5UYxIRc8qFna5uaNxtEvyGaT2SRQdTBr eo2wTCgyAhWiNf8WPEGuQbo4FDJ49U29fbIpTnXojqzXzOlzgWaG/GUMfvYaXR6h 4I5oOzMeSxSYnAGnQRy7ryn3idB2ePyMXFwL5p9qPPTciic+y6noD1KgFYhVUhzW JmkojiyFF+xpEzKY/oaxPxpjjICMzHmgJXWvuWJr+ar8cg7FgAWQj9Su52kibYZb KCc3plnSaS/+pupYXGOmH4YSROZSGjlBQ/bG1aYOoA+y9lm8357kICLrfnYrt2sl mzsZfpjlJu/fbx0av2KWRCrTw0Svzejr/nupTN0z2oUq6+HifZrwDLlbG00= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3bi927g/3ga7zLSi9hB TZnBjJrX+kOEgrka6K9f4EhnISp71aqokwekEg/a8xJ4Npx4fVl+thNG8YMLeyDk SY7RPGfEPaHyGvnrdXUP/ROumLnz0xi3xFXqzGlrHzABAec3OqSUsUvPKVFJtnbj u8jd9PKtlPBnizJuFeTYRglnYxc/blU2RrPLD8msnoOH1kXZvFav55YMtciTRYpL G6mDrOG2pF0Xx+qq3bbdYcAHmcUXgKhbmMeHSKE7rFUB1gv3veMziDZWXWtnAEvq Q0h046V/SWBPXtGk2rmfwrqzJNae8jIs/5Heda1fB0+dDKlAozqEN4rV8wgN8isa TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10507080570909969415009977590807428654 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo-1int.trial.1spatial.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26189954289521320487366627795352217539132759537863484491654272398881517274408649545373842876142107315715254798092909276217972045851849601467671785747741744433793499409941776765672738990764223206941187805106911407876818669237479145271337195349550893836016216728548664960911167634544436710960566777980723359255588086609174880191363641027675484334238788404530518312937639585292427868994686234925736419917558946958922780825911365101241163931939663470368731160342307103556211729549573585169588880925425639099257950047760362845453387772986986530722348201401468269544447215574547471680111155096712296920951309280069500475981 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e9e9ced4978795333ff6534ee5b34fff5e7f15a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-1int.trial.1spatial.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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