marketing.cbre.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0e:65:83:73:45:4d:83:f2:17:f5:9c:7e:b3:c5:b3:d3 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=marketing.cbre.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:65:83:73:45:4d:83:f2:17:f5:9c:7e:b3:c5:b3:d3Serial Number (int): 19136280052045783381990155370507908051
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 95:b0:75:72:b1:31:ce:2b:4c:bc:3c:46:52:ac:a5:03:87:56:56:78
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 4c:91:0c:95:60:70:7b:bf:61:73:ab:13:f1:3e:0f:7d:be:e1:b3:5e
Fingerprint (sha256): 03:1b:d5:c1:cb:e7:48:57:0d:60:c5:9a:67:ab:01:6d:54:b6:ee:d4:54:0b:e9:7f:91:d3:2b:f5:d4:18:cd:3a
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate marketing.cbre.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for marketing.cbre.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
marketing.cbre.com
Other certificates including the domain name cbre.com
(limited to 100 certificates)
imperva.com
ava-dev.cbre.com
uat.locator.cbre.com
itrack-test.cbre.com
glv-consulting.cbre.com
tgm-nonprod2.green.cbre.com
vantage-analytics.cbre.com
myportaluat.cbre.com
navigator.cbre.com
corpcomms.cbre.com
uiweb.cbre.com
brokerhub.cbre.com
imperva.com
lsintraapps.cbre.com
po.cbre.com
imperva.com
dev.autobuild.cbre.com
opus.cbre.com
myocs.cbre.com
dev-reports-int.cbre.com
protofit-east.cbrebuild.com
vcse01.cbre.com
imperva.com
assetintel.cbre.com
imperva.com
flooredproducts.cbre.com
brand.cbre.com
navigator.cbre.com
www.highq.com
www.highq.com
looplink-pm4-1.loopnet.com
workplace.cbre.com
ecm.cbre.com
dev.api.autobuild.cbre.com
myportal.cbre.com
dashboard.cbre.com
imperva.com
imperva.com
imperva.com
staging.api.myproperty.cbre.com
test.horizons.cbre.com
imperva.com
ess.cbre.com
imperva.com
marketing.cbre.com
mypc.cbre.com
imperva.com
imperva.com
imperva.com
mapping.cbre.com
imperva.com
imperva.com
imperva.com
borrowerservices.cbre.com
sce-dev.intrepid.cbre.com
csgdr.cbre.com
vas-plat-apis.cbre.com
digitalfirst.firstsource.com
vas.cbre.com
myreimfin.cbre.com
screening.cbre.com
mymeeting.cbre.com
remote.cbre.com
vantage-analytics-prod.cbre.com
welcomegws.cbre.com
imperva.com
careers.cbre.com
us.artifactory.gcsonp.cbre.com
lmapi.cbre.com
myim.cbre.com
imperva.com
imperva.com
*.cbre.com
ess.cbre.com
imperva.com
imperva.com
imperva.com
imperva.com
dev.experience.cbre.com
imperva.com
cbre.com
api.ea.login.cbre.com
imperva.com
staging.api.ea.login.cbre.com
imperva.com
ssl364736.cloudflaressl.com
imperva.com
imperva.com
dealroom.salesloft.com
imperva.com
proptech-feedback.cbre.com
rolls-royce.locator.cbre.com
imperva.com
sso-test.cbre.com
hig.intrepid.cbre.com
imperva.com
myservice-uat.cbre.com
insightportal.cbre.com
imperva.com
mysupplier.cbre.com
ava-dev.cbre.com
uat.locator.cbre.com
itrack-test.cbre.com
glv-consulting.cbre.com
tgm-nonprod2.green.cbre.com
vantage-analytics.cbre.com
myportaluat.cbre.com
navigator.cbre.com
corpcomms.cbre.com
uiweb.cbre.com
brokerhub.cbre.com
imperva.com
lsintraapps.cbre.com
po.cbre.com
imperva.com
dev.autobuild.cbre.com
opus.cbre.com
myocs.cbre.com
dev-reports-int.cbre.com
protofit-east.cbrebuild.com
vcse01.cbre.com
imperva.com
assetintel.cbre.com
imperva.com
flooredproducts.cbre.com
brand.cbre.com
navigator.cbre.com
www.highq.com
www.highq.com
looplink-pm4-1.loopnet.com
workplace.cbre.com
ecm.cbre.com
dev.api.autobuild.cbre.com
myportal.cbre.com
dashboard.cbre.com
imperva.com
imperva.com
imperva.com
staging.api.myproperty.cbre.com
test.horizons.cbre.com
imperva.com
ess.cbre.com
imperva.com
marketing.cbre.com
mypc.cbre.com
imperva.com
imperva.com
imperva.com
mapping.cbre.com
imperva.com
imperva.com
imperva.com
borrowerservices.cbre.com
sce-dev.intrepid.cbre.com
csgdr.cbre.com
vas-plat-apis.cbre.com
digitalfirst.firstsource.com
vas.cbre.com
myreimfin.cbre.com
screening.cbre.com
mymeeting.cbre.com
remote.cbre.com
vantage-analytics-prod.cbre.com
welcomegws.cbre.com
imperva.com
careers.cbre.com
us.artifactory.gcsonp.cbre.com
lmapi.cbre.com
myim.cbre.com
imperva.com
imperva.com
*.cbre.com
ess.cbre.com
imperva.com
imperva.com
imperva.com
imperva.com
dev.experience.cbre.com
imperva.com
cbre.com
api.ea.login.cbre.com
imperva.com
staging.api.ea.login.cbre.com
imperva.com
ssl364736.cloudflaressl.com
imperva.com
imperva.com
dealroom.salesloft.com
imperva.com
proptech-feedback.cbre.com
rolls-royce.locator.cbre.com
imperva.com
sso-test.cbre.com
hig.intrepid.cbre.com
imperva.com
myservice-uat.cbre.com
insightportal.cbre.com
imperva.com
mysupplier.cbre.com
Certificate
The complete raw certificate details for marketing.cbre.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjzCCBXegAwIBAgIQDmWDc0VNg/IX9Zx+s8Wz0zANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwNzA2MDAwMDAwWhcNMjQwMTA2MjM1OTU5WjAdMRswGQYDVQQDExJtYXJrZXRp bmcuY2JyZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaDXTe QUoiJ2WQ/LGbVZDHBcZrhBI/Xgr0EGmEZe9nFq3l/wgWdfe+7f4PM+isLwUwqgdy DZP+zx0WvokCYSxiWXGAyBe5VBLRmKT2sgqmDBx52tLsxYpDnk9HKagJppNGzvMw yFep5Gi562dZ3QxiBN6qUULq6RUjl1I0SQreAed3CaiyhGSyDVD/iLWmH4alypjC +ZuIL+4CDlESuAapGnMMZHoXC+tBtZ6RC2ksHI6nq+utsp5Cva8hD3aTPc7pr2Ur 7MCoj8TxrsbDBjL9apkdjZD0QqsQJ97QtsraF4WlI69SQ/bAsKyugSgSX4Hee/u0 DNBFAsT1lU15RfQJAgMBAAGjggOKMIIDhjAfBgNVHSMEGDAWgBSltNbrNsTna6bf xGQLASogBLhmIzAdBgNVHQ4EFgQUlbB1crExzitMvDxGUqylA4dWVngwHQYDVR0R BBYwFIISbWFya2V0aW5nLmNicmUuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNI QTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v R2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwPgYDVR0g BDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu Y3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV 2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiSuYq40AAAQDAEcwRQIhAJOA kRxhfHHCOSuf0CVDbuem/Io5wWnlB25HIBsNi8DLAiBQTSXAxwUtUebM7eTw5GPC wOjOBdVtu8wur4bpJcbKhAB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABiSuYq6wAAAQDAEYwRAIgMxr6tteiuKQRyhqw6zOU2wPQAX8FdSWc/hZ5 KGr1sboCIHttbx/9EYOumhZveGiX6vHQba5pX/WVteVnmfTw6+OjAHYA2ra/az+1 tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJK5irIQAABAMARzBFAiEAlgHr +H6qmCnVWN6+n1zD04Y1/u+uOb6JMpnL5wlPfjgCIBdpfzdYVXVBudWRIV7pASvP jufaKL5qruwoa4emdf9EMA0GCSqGSIb3DQEBCwUAA4ICAQArICP5DfNNqdMVTgAD YDQ56CA+pRNULkqv3xdKHX92yQOVQ42cKQM2HxYHW/VbsgTD69avSpIqNuqALlqX NfE8b5i/SYaIQnkU0BsTwYsC1YzIKOUP4T0jPT3wdUxfeFBbVHJ+SEuzHxaM5lY4 xtzuVmaTqkRyWTs9VSNfubvfBDHOyQx64FSdaEMCX7xg973hk+IfaNko/eS6apvl 0jt92I7GHEerszPHMr6heu7WTUY5pq7Ag3wPrvijGkyON/UZaZ5NZ2/XmKojj3Vq 1wNO+QTdwcqKEJohrFU5MDe2zSPv8aU2P+ObyuRjNCuY20mCmxMaW2Dqh0dPzxjG vDTOvEFV9G3tClN/KpVTPBhWerr25iJoOvOORXz9Z4U0KGST+9QjF0GGJVyEEU3P H2GLgJ7g6YOZGFaQRM4XVdU3l68y68Nh/9LDpGxqfN8O+E4BImb80kdkHuozCQK9 AgGmAarusPutB0hLXcxPx5snAwG43Nye5gJYOE0GoEQyl6AirVDwMwV9HDCm3LgZ 4y7rpZtPFDH/1ykXngORa8qnCt6NuQeJ7U1lARBK96DED6RZupTXodQ5JMtNXTmt FB7Ab0DwNUSk7d45S4dX4QfcvTIkYMYc5FMC0lZEYUKO9DDoC1/BP0kwd8wrXSH0 g8dFX60OzyHP7Ac+QTSAe+nyhg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg103kFKIidlkPyxm1WQ xwXGa4QSP14K9BBphGXvZxat5f8IFnX3vu3+DzPorC8FMKoHcg2T/s8dFr6JAmEs YllxgMgXuVQS0Zik9rIKpgwcedrS7MWKQ55PRymoCaaTRs7zMMhXqeRouetnWd0M YgTeqlFC6ukVI5dSNEkK3gHndwmosoRksg1Q/4i1ph+GpcqYwvmbiC/uAg5RErgG qRpzDGR6FwvrQbWekQtpLByOp6vrrbKeQr2vIQ92kz3O6a9lK+zAqI/E8a7GwwYy /WqZHY2Q9EKrECfe0LbK2heFpSOvUkP2wLCsroEoEl+B3nv7tAzQRQLE9ZVNeUX0 CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19136280052045783381990155370507908051 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marketing.cbre.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19447334620295898323046468555934029640325438740548474583555339716816234862570287930206657014593163392206552570188317568421633186015264132732055430582334743122075466458184000689464327403179342496571523960171408468938218152157299982090058295953332241835751938367676415182037957800333029780877694391368433115704521262125167942510402636304242453052427868927985209514047801299716742959720721873532617987330138889675915627085111541506848333334116083337443177536368054926975820301335793353630030871675401909742020565262949769354723604267839089461679575854331171168746488992598337417381226287941789394476247271568071805236233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 95b07572b131ce2b4cbc3c4652aca50387565678 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.cbre.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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