marketing.cbre.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:65:83:73:45:4d:83:f2:17:f5:9c:7e:b3:c5:b3:d3 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marketing.cbre.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:65:83:73:45:4d:83:f2:17:f5:9c:7e:b3:c5:b3:d3
Serial Number (int): 19136280052045783381990155370507908051
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 95:b0:75:72:b1:31:ce:2b:4c:bc:3c:46:52:ac:a5:03:87:56:56:78
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 4c:91:0c:95:60:70:7b:bf:61:73:ab:13:f1:3e:0f:7d:be:e1:b3:5e
Fingerprint (sha256): 03:1b:d5:c1:cb:e7:48:57:0d:60:c5:9a:67:ab:01:6d:54:b6:ee:d4:54:0b:e9:7f:91:d3:2b:f5:d4:18:cd:3a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate marketing.cbre.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marketing.cbre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marketing.cbre.com

Other certificates including the domain name cbre.com

(limited to 100 certificates)
imperva.com
ava-dev.cbre.com
uat.locator.cbre.com
itrack-test.cbre.com
glv-consulting.cbre.com
tgm-nonprod2.green.cbre.com
vantage-analytics.cbre.com
myportaluat.cbre.com
navigator.cbre.com
corpcomms.cbre.com
uiweb.cbre.com
brokerhub.cbre.com
imperva.com
lsintraapps.cbre.com
po.cbre.com
imperva.com
dev.autobuild.cbre.com
opus.cbre.com
myocs.cbre.com
dev-reports-int.cbre.com
protofit-east.cbrebuild.com
vcse01.cbre.com
imperva.com
assetintel.cbre.com
imperva.com
flooredproducts.cbre.com
brand.cbre.com
navigator.cbre.com
www.highq.com
www.highq.com
looplink-pm4-1.loopnet.com
workplace.cbre.com
ecm.cbre.com
dev.api.autobuild.cbre.com
myportal.cbre.com
dashboard.cbre.com
imperva.com
imperva.com
imperva.com
staging.api.myproperty.cbre.com
test.horizons.cbre.com
imperva.com
ess.cbre.com
imperva.com
marketing.cbre.com
mypc.cbre.com
imperva.com
imperva.com
imperva.com
mapping.cbre.com
imperva.com
imperva.com
imperva.com
borrowerservices.cbre.com
sce-dev.intrepid.cbre.com
csgdr.cbre.com
vas-plat-apis.cbre.com
digitalfirst.firstsource.com
vas.cbre.com
myreimfin.cbre.com
screening.cbre.com
mymeeting.cbre.com
remote.cbre.com
vantage-analytics-prod.cbre.com
welcomegws.cbre.com
imperva.com
careers.cbre.com
us.artifactory.gcsonp.cbre.com
lmapi.cbre.com
myim.cbre.com
imperva.com
imperva.com
*.cbre.com
ess.cbre.com
imperva.com
imperva.com
imperva.com
imperva.com
dev.experience.cbre.com
imperva.com
cbre.com
api.ea.login.cbre.com
imperva.com
staging.api.ea.login.cbre.com
imperva.com
ssl364736.cloudflaressl.com
imperva.com
imperva.com
dealroom.salesloft.com
imperva.com
proptech-feedback.cbre.com
rolls-royce.locator.cbre.com
imperva.com
sso-test.cbre.com
hig.intrepid.cbre.com
imperva.com
myservice-uat.cbre.com
insightportal.cbre.com
imperva.com
mysupplier.cbre.com

Certificate

The complete raw certificate details for marketing.cbre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjzCCBXegAwIBAgIQDmWDc0VNg/IX9Zx+s8Wz0zANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwNzA2MDAwMDAwWhcNMjQwMTA2MjM1OTU5WjAdMRswGQYDVQQDExJtYXJrZXRp
bmcuY2JyZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaDXTe
QUoiJ2WQ/LGbVZDHBcZrhBI/Xgr0EGmEZe9nFq3l/wgWdfe+7f4PM+isLwUwqgdy
DZP+zx0WvokCYSxiWXGAyBe5VBLRmKT2sgqmDBx52tLsxYpDnk9HKagJppNGzvMw
yFep5Gi562dZ3QxiBN6qUULq6RUjl1I0SQreAed3CaiyhGSyDVD/iLWmH4alypjC
+ZuIL+4CDlESuAapGnMMZHoXC+tBtZ6RC2ksHI6nq+utsp5Cva8hD3aTPc7pr2Ur
7MCoj8TxrsbDBjL9apkdjZD0QqsQJ97QtsraF4WlI69SQ/bAsKyugSgSX4Hee/u0
DNBFAsT1lU15RfQJAgMBAAGjggOKMIIDhjAfBgNVHSMEGDAWgBSltNbrNsTna6bf
xGQLASogBLhmIzAdBgNVHQ4EFgQUlbB1crExzitMvDxGUqylA4dWVngwHQYDVR0R
BBYwFIISbWFya2V0aW5nLmNicmUuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNI
QTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
R2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwPgYDVR0g
BDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy
dC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGln
aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu
Y3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV
2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiSuYq40AAAQDAEcwRQIhAJOA
kRxhfHHCOSuf0CVDbuem/Io5wWnlB25HIBsNi8DLAiBQTSXAxwUtUebM7eTw5GPC
wOjOBdVtu8wur4bpJcbKhAB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5
2IRzAAABiSuYq6wAAAQDAEYwRAIgMxr6tteiuKQRyhqw6zOU2wPQAX8FdSWc/hZ5
KGr1sboCIHttbx/9EYOumhZveGiX6vHQba5pX/WVteVnmfTw6+OjAHYA2ra/az+1
tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJK5irIQAABAMARzBFAiEAlgHr
+H6qmCnVWN6+n1zD04Y1/u+uOb6JMpnL5wlPfjgCIBdpfzdYVXVBudWRIV7pASvP
jufaKL5qruwoa4emdf9EMA0GCSqGSIb3DQEBCwUAA4ICAQArICP5DfNNqdMVTgAD
YDQ56CA+pRNULkqv3xdKHX92yQOVQ42cKQM2HxYHW/VbsgTD69avSpIqNuqALlqX
NfE8b5i/SYaIQnkU0BsTwYsC1YzIKOUP4T0jPT3wdUxfeFBbVHJ+SEuzHxaM5lY4
xtzuVmaTqkRyWTs9VSNfubvfBDHOyQx64FSdaEMCX7xg973hk+IfaNko/eS6apvl
0jt92I7GHEerszPHMr6heu7WTUY5pq7Ag3wPrvijGkyON/UZaZ5NZ2/XmKojj3Vq
1wNO+QTdwcqKEJohrFU5MDe2zSPv8aU2P+ObyuRjNCuY20mCmxMaW2Dqh0dPzxjG
vDTOvEFV9G3tClN/KpVTPBhWerr25iJoOvOORXz9Z4U0KGST+9QjF0GGJVyEEU3P
H2GLgJ7g6YOZGFaQRM4XVdU3l68y68Nh/9LDpGxqfN8O+E4BImb80kdkHuozCQK9
AgGmAarusPutB0hLXcxPx5snAwG43Nye5gJYOE0GoEQyl6AirVDwMwV9HDCm3LgZ
4y7rpZtPFDH/1ykXngORa8qnCt6NuQeJ7U1lARBK96DED6RZupTXodQ5JMtNXTmt
FB7Ab0DwNUSk7d45S4dX4QfcvTIkYMYc5FMC0lZEYUKO9DDoC1/BP0kwd8wrXSH0
g8dFX60OzyHP7Ac+QTSAe+nyhg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg103kFKIidlkPyxm1WQ
xwXGa4QSP14K9BBphGXvZxat5f8IFnX3vu3+DzPorC8FMKoHcg2T/s8dFr6JAmEs
YllxgMgXuVQS0Zik9rIKpgwcedrS7MWKQ55PRymoCaaTRs7zMMhXqeRouetnWd0M
YgTeqlFC6ukVI5dSNEkK3gHndwmosoRksg1Q/4i1ph+GpcqYwvmbiC/uAg5RErgG
qRpzDGR6FwvrQbWekQtpLByOp6vrrbKeQr2vIQ92kz3O6a9lK+zAqI/E8a7GwwYy
/WqZHY2Q9EKrECfe0LbK2heFpSOvUkP2wLCsroEoEl+B3nv7tAzQRQLE9ZVNeUX0
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19136280052045783381990155370507908051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marketing.cbre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19447334620295898323046468555934029640325438740548474583555339716816234862570287930206657014593163392206552570188317568421633186015264132732055430582334743122075466458184000689464327403179342496571523960171408468938218152157299982090058295953332241835751938367676415182037957800333029780877694391368433115704521262125167942510402636304242453052427868927985209514047801299716742959720721873532617987330138889675915627085111541506848333334116083337443177536368054926975820301335793353630030871675401909742020565262949769354723604267839089461679575854331171168746488992598337417381226287941789394476247271568071805236233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95b07572b131ce2b4cbc3c4652aca50387565678
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.cbre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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