uhg2-qa-cdn.adobecqms.net

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:60:11:f8:85:6e:ab:f6:6d:e2:ad:04:7a:94:24:a9 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uhg2-qa-cdn.adobecqms.net

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:11:f8:85:6e:ab:f6:6d:e2:ad:04:7a:94:24:a9
Serial Number (int): 4486508976616956903885476651731264681
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cd:29:14:75:f1:12:39:51:29:31:85:5c:96:ee:2c:e7:04:ba:78:5d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 77:03:17:0f:1b:c8:eb:20:b1:e6:e7:f2:1e:ec:e8:75:6f:70:dd:7c
Fingerprint (sha256): 03:e7:9b:80:d4:e9:be:7e:88:3d:0c:f0:5f:6e:b5:fb:96:f6:d3:67:31:14:01:44:d7:07:f5:87:38:af:4d:7d

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate uhg2-qa-cdn.adobecqms.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uhg2-qa-cdn.adobecqms.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uhg2-qa-cdn.adobecqms.net

Other certificates including the domain name adobecqms.net

(limited to 100 certificates)
*.adobecqms.net
cibc.adobecqms.net
*.adobecqms.net
dlh.adobecqms.net
synopsys.adobecqms.net
change-healthcare-operations-llc.adobecqms.net
invocare.adobecqms.net
*.adobecqms.net
*.adobecqms.net
fcadealer.adobecqms.net
*.adobecqms.net
expedia-gco.adobecqms.net
*.adobecqms.net
*.adobecqms.net
dhs-oha-stage.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
uhg2-prod-green-cdn.adobecqms.net
adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
tiaa.adobecqms.net
acca-65-prod.adobecqms.net
*.adobecqms.net
*.adobecqms.net
jpmc.adobecqms.net
ntt-docomo.adobecqms.net
americaneagle.adobecqms.net
*.adobecqms.net
*.adobecqms.net
dhs-ocio-lc-stage.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
tmg.adobecqms.net
uhg2-qa-cdn.adobecqms.net
*.adobecqms.net
*.adobecqms.net
taj-hotel-group.adobecqms.net
*.adobecqms.net
*.adobecqms.net
greendotcorp.adobecqms.net
*.adobecqms.net
*.adobecqms.net
harley-davidson.adobecqms.net
lseg.adobecqms.net
puig.adobecqms.net
boots-uk-limited.adobecqms.net
accounts-361647230075.ch.adobecqms.net
boozallen.adobecqms.net
usaa.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
vw-america.adobecqms.net
*.adobecqms.net
kaiser.adobecqms.net
hapaglloyd.adobecqms.net
*.adobecqms.net
signifycooper-acc64.adobecqms.net
*.adobecqms.net
coinbase.adobecqms.net
*.adobecqms.net
*.adobecqms.net
stage65.prh.adobecqms.net
kporg.adobecqms.net
whirlpool.adobecqms.net
*.adobecqms.net
*.adobecqms.net
lenovo.adobecqms.net
*.adobecqms.net
hsbc-eu-dxp1.adobecqms.net
viasat.adobecqms.net
*.adobecqms.net
elcorteingles.adobecqms.net
severntrentwater-asec.adobecqms.net
lloydsbg65.adobecqms.net
carlsberg-dev-65.adobecqms.net
tetrapak.adobecqms.net
*.adobecqms.net
*.adobecqms.net
reedexhibitions-stage-64.adobecqms.net
sciex.adobecqms.net
hdfclifeinsurance.adobecqms.net
*.adobecqms.net
*.adobecqms.net
jpmc-am.adobecqms.net
cibc.adobecqms.net
belk.adobecqms.net
bankofqueensland.adobecqms.net
*.adobecqms.net
vw65.adobecqms.net
irvinecompany-dev.adobecqms.net
*.adobecqms.net
*.adobecqms.net

Certificate

The complete raw certificate details for uhg2-qa-cdn.adobecqms.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMTCCBBmgAwIBAgIQA2AR+IVuq/Zt4q0EepQkqTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjIxMjAxMDAwMDAwWhcNMjMwNjAxMjM1OTU5WjAkMSIwIAYDVQQDExl1aGcyLXFh
LWNkbi5hZG9iZWNxbXMubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxcgFVSR+CxanLwwPCZcm5PTdlk9I8GLVoNdTg04ySw5o06w+X/MWN6aT4WWj
jY53WdHuQ4ZnYaxL2WyDqBaBcPfFEvJwUddUjBRG69Tfsvw/7wFOST3VDV1cZOLl
k60oRdRRFGS69QXwg1WmTNBzVtLnLiTcHMo4zPk4IaSUWsQc6WFmK1E4KnJT8TDG
2fOwcHxCmzdcCT1MX3K0+qFLUN+EQLpdHwuxKSUvhCbwfq83ktQj/NYfSjIjU3nY
j0SvfbrKmJa1YobLI4TguB1XNyFiHztSFnK9F7lzN1e+Lx+sVOREjTWAKWOGoUmx
7LnmMVkwQwYnBysOQfCdgJUouQIDAQABo4ICJTCCAiEwHwYDVR0jBBgwFoAUpbTW
6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFM0pFHXxEjlRKTGFXJbuLOcEunhd
MCQGA1UdEQQdMBuCGXVoZzItcWEtY2RuLmFkb2JlY3Ftcy5uZXQwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGX
MIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9i
YWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy
Q0ExLmNybDA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRw
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2
U0hBMjU2MjAyMkNBMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAgEAItlCCu0WilIlBh/ht1DM5sqD2g/5CoSDUN3Y
ABGLLcdGv7JxuaWuAiKl2D/RF0+gZVjksLk+OFO8fr1+++ee6sNWFhZSQu5Nko+c
Ot+tcOTf3jgeqF92SUdhDRiMzyXLvu7juxZQCBpgm+QWBvVrZcDr6qhizmxx7Szy
fL74ZPrNTKP+vCoK51jrW1fGbsXcZVeGtzNPiFHugJUpcCfgHHgH6OaEVL+T5QBB
nDEAna52Cx5cUu0QWYrCoK3ZDURaBk8lF6j+SBRSy/002qKxXTdS9AEw4uT92i/z
SjttN0lsFMuitxo9U3U7nEy0Xool2FemAJJ1Qq94DndPYc4XULevMWvQX1BTzg/b
LyeDf59bJkvUfA73IXHvrUvVsDkOkcyuhPd4SskKHT1cou2gsLeZkfYdSWg8hvJS
MvtotnjPnqTmVtI1Ew9W2xNDp2xLr+cJXl/pp5L1Vbo0xUuIe897Tsk40pBTgRTp
RAQng/s2yWJbrVKOYV0jSBKaY74gvBkdVPAa6lzIVs4LHdmcdP/B8bBmPG1qV0GF
oUFm44mVhJN79Fi/XgL6unSo9uy1e1jzQn7c5RO5W8y/lGA3Y+92ufuO5v4XdQmV
1iGYUAeuF/fYYCmBS/0dTENVHsI9WSdTFtFL85ngW70I2YHWK8n0juN3c4FChoSC
azfIgck=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcgFVSR+CxanLwwPCZcm
5PTdlk9I8GLVoNdTg04ySw5o06w+X/MWN6aT4WWjjY53WdHuQ4ZnYaxL2WyDqBaB
cPfFEvJwUddUjBRG69Tfsvw/7wFOST3VDV1cZOLlk60oRdRRFGS69QXwg1WmTNBz
VtLnLiTcHMo4zPk4IaSUWsQc6WFmK1E4KnJT8TDG2fOwcHxCmzdcCT1MX3K0+qFL
UN+EQLpdHwuxKSUvhCbwfq83ktQj/NYfSjIjU3nYj0SvfbrKmJa1YobLI4TguB1X
NyFiHztSFnK9F7lzN1e+Lx+sVOREjTWAKWOGoUmx7LnmMVkwQwYnBysOQfCdgJUo
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4486508976616956903885476651731264681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uhg2-qa-cdn.adobecqms.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24967580025932298563979649388070416001763701978376180456582634664732115561072571504338607942973366056258402271050712383668841397754330513477089689609550343310702548639862897005209728302396726866852123436977010670916538815148351440715847196254564861363841696044535970757761899127069731922952365561077322463214678358204386571025266737220582812532189261614616294077693142894251991587899407744749638324268287405105672290700517206118755764330408087149552567706709858782624956667846165540901299124760976359353687208837481491216628085124975816693496595157980119760495096542013436749274387415451267320598047269998032806291641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd291475f11239512931855c96ee2ce704ba785d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg2-qa-cdn.adobecqms.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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