searchengine.analytics.dealogic.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 07:ae:99:3d:03:57:1d:8e:95:21:0e:c5:24:c9:d2:62 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=searchengine.analytics.dealogic.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:ae:99:3d:03:57:1d:8e:95:21:0e:c5:24:c9:d2:62Serial Number (int): 10211163666500514347972468975487013474
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e9:55:d7:02:61:28:da:e3:82:df:ac:6a:76:0a:f4:0d:35:27:b8:0e
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): ff:6d:5e:61:30:23:ab:07:c2:25:0e:c9:bc:d7:fb:b5:6f:bf:04:4d
Fingerprint (sha256): 04:4f:91:8c:1b:88:dc:50:f5:71:fc:a9:55:c8:a2:f0:65:3d:51:99:ad:aa:10:4f:72:26:cc:b3:bb:86:0e:7b
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate searchengine.analytics.dealogic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for searchengine.analytics.dealogic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
searchengine.analytics.dealogic.com
Other certificates including the domain name dealogic.com
(limited to 100 certificates)
bmocmuat.dealogic.com
bradescouat.dealogic.com
sebenskilda.dealogic.com
itausec.dealogic.com
dealmanager1.dealogic.com
golddisc.dealogic.com
cm-cic.dealogic.com
unicredit.dealogic.com
sni10434gl.wpc.edgecastcdn.net
uatdawsald.dealogic.com
bankvontobel.dealogic.com
fixep-oat.dealogic.com
dlhub-poc.dealogic.com
*.dealogic.com
nordea.dealogic.com
production.services.dealogic.com
msdmuat.dealogic.com
sandler.dealogic.com
api.host.cortexuat.dealogic.com
dealaxis-hub-prod.dealogic.com
macquarieqa.dealogic.com
uatepm2.dealogic.com
compliancemanagerps.dealogic.com
arionuat.dealogic.com
rbsuat.dealogic.com
sentineltokensigninguat.dealogic.com
baaderuat.dealogic.com
functions.digitalipo.dealogic.com
intermonteuat.dealogic.com
searchengine.analytics.dealogic.com
batomi.dealogic.com
suntrust.dealogic.com
paretouat.dealogic.com
retailipo.dealogic.com
dbsuat.dealogic.com
mmp.dealogic.com
ubscmuat.dealogic.com
signalhill.dealogic.com
testservices.dealogic.com
renaissancecapital.dealogic.com
nomsmp.dealogic.com
dealogic.com
dealogic.com
msdcm.dealogic.com
cicc.dealogic.com
gsuat.dealogic.com
www.dealogic.com
mainfirst.dealogic.com
bocom.dealogic.com
cmcicuat.dealogic.com
contactscraper.sourcingdev.dealogic.com
ubsuat.dealogic.com
anzdcmuat.dealogic.com
motif.dealogic.com
ia.dealogic.com
essenceuat.dealogic.com
mediobancauat.dealogic.com
vtbcapitaluat.dealogic.com
shorecapitaluat.dealogic.com
dbeventsqa.dealogic.com
nbaduat.dealogic.com
raiffeisenuat.dealogic.com
rbc.dealogic.com
sentinelip.dealogic.com
abgsc.dealogic.com
dbsuat.dealogic.com
testservices.dealogic.com
ing.dealogic.com
sentinelip.dealogic.com
dealogic.com
efg-hermes.dealogic.com
vtbcapital.dealogic.com
api.jira-integration.supportdev.dealogic.com
macquarie.dealogic.com
frameworkwebuat.dealogic.com
jefferies2.dealogic.com
cms.dealogic.com
danskemarkets.dealogic.com
itausec.dealogic.com
loader.spac.analyticsqa.dealogic.com
csecmvault.dealogic.com
arcticsec.dealogic.com
evercore.dealogic.com
credit-suisse.dealogic.com
anadc.dealogic.com
macquarie.dealogic.com
entities.ingestor.dealogic.com
troika.dealogic.com
fbrpulse.dealogic.com
gazprouat.dealogic.com
processor.sec.ingestorqa.dealogic.com
natixis.dealogic.com
cbaecmuat.dealogic.com
hkuat.dealogic.com
sentineluatfp.dealogic.com
fbruatpulse.dealogic.com
mdsservices.dealogic.com
standardbankuat.dealogic.com
bancaimi.dealogic.com
numis.dealogic.com
bradescouat.dealogic.com
sebenskilda.dealogic.com
itausec.dealogic.com
dealmanager1.dealogic.com
golddisc.dealogic.com
cm-cic.dealogic.com
unicredit.dealogic.com
sni10434gl.wpc.edgecastcdn.net
uatdawsald.dealogic.com
bankvontobel.dealogic.com
fixep-oat.dealogic.com
dlhub-poc.dealogic.com
*.dealogic.com
nordea.dealogic.com
production.services.dealogic.com
msdmuat.dealogic.com
sandler.dealogic.com
api.host.cortexuat.dealogic.com
dealaxis-hub-prod.dealogic.com
macquarieqa.dealogic.com
uatepm2.dealogic.com
compliancemanagerps.dealogic.com
arionuat.dealogic.com
rbsuat.dealogic.com
sentineltokensigninguat.dealogic.com
baaderuat.dealogic.com
functions.digitalipo.dealogic.com
intermonteuat.dealogic.com
searchengine.analytics.dealogic.com
batomi.dealogic.com
suntrust.dealogic.com
paretouat.dealogic.com
retailipo.dealogic.com
dbsuat.dealogic.com
mmp.dealogic.com
ubscmuat.dealogic.com
signalhill.dealogic.com
testservices.dealogic.com
renaissancecapital.dealogic.com
nomsmp.dealogic.com
dealogic.com
dealogic.com
msdcm.dealogic.com
cicc.dealogic.com
gsuat.dealogic.com
www.dealogic.com
mainfirst.dealogic.com
bocom.dealogic.com
cmcicuat.dealogic.com
contactscraper.sourcingdev.dealogic.com
ubsuat.dealogic.com
anzdcmuat.dealogic.com
motif.dealogic.com
ia.dealogic.com
essenceuat.dealogic.com
mediobancauat.dealogic.com
vtbcapitaluat.dealogic.com
shorecapitaluat.dealogic.com
dbeventsqa.dealogic.com
nbaduat.dealogic.com
raiffeisenuat.dealogic.com
rbc.dealogic.com
sentinelip.dealogic.com
abgsc.dealogic.com
dbsuat.dealogic.com
testservices.dealogic.com
ing.dealogic.com
sentinelip.dealogic.com
dealogic.com
efg-hermes.dealogic.com
vtbcapital.dealogic.com
api.jira-integration.supportdev.dealogic.com
macquarie.dealogic.com
frameworkwebuat.dealogic.com
jefferies2.dealogic.com
cms.dealogic.com
danskemarkets.dealogic.com
itausec.dealogic.com
loader.spac.analyticsqa.dealogic.com
csecmvault.dealogic.com
arcticsec.dealogic.com
evercore.dealogic.com
credit-suisse.dealogic.com
anadc.dealogic.com
macquarie.dealogic.com
entities.ingestor.dealogic.com
troika.dealogic.com
fbrpulse.dealogic.com
gazprouat.dealogic.com
processor.sec.ingestorqa.dealogic.com
natixis.dealogic.com
cbaecmuat.dealogic.com
hkuat.dealogic.com
sentineluatfp.dealogic.com
fbruatpulse.dealogic.com
mdsservices.dealogic.com
standardbankuat.dealogic.com
bancaimi.dealogic.com
numis.dealogic.com
Certificate
The complete raw certificate details for searchengine.analytics.dealogic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHszCCBZugAwIBAgIQB66ZPQNXHY6VIQ7FJMnSYjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMDI1MDAwMDAwWhcNMjQwNDI1MjM1OTU5WjAuMSwwKgYDVQQDEyNzZWFyY2hl bmdpbmUuYW5hbHl0aWNzLmRlYWxvZ2ljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKJhyZ4Rr6YdCYgvyn3yBzmw4JyzMeN6J1OnTz0Zc70+uVEJ RtJg11jg1wIBu/F6wRelqj3GnB98r1B3Z1TXoZcqObhuuQ0DMlxaYMxJQl5isz9d 79ZKTqrRNUUpK8WoQtesBXU1W0Rg4cPKUHZY5IWUWJABEujPAce/WeB+R6uDzG7C HUJOfB/NtmYWmu8GyiY6tHliEwe/H1rn69opEZM+kCIZZa9PHyjIhmA7I0NqCtWS eOILHNSXt8an5mgxQLeE1w4/khkJuoYX3+wbdX1sXcldNsJTqYWBRNZp2BcW2Pat f60Yobgjf5Map1jJX/XV4OcFDMAbSFMZQNEEqVECAwEAAaOCA50wggOZMB8GA1Ud IwQYMBaAFKW01us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBTpVdcCYSja44Lf rGp2CvQNNSe4DjAuBgNVHREEJzAlgiNzZWFyY2hlbmdpbmUuYW5hbHl0aWNzLmRl YWxvZ2ljLmNvbTA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhto dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2 U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYI KwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9U cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8E AjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYtmBRuiAAAEAwBHMEUCIQDGi31zAsfEju/SasGq XxfiUouTMc5tQ5oU5Dv7zkXWJAIgV0nD+Q2smiMVHlmLM5m+KRrHIFWe/EfhH/LI sIrO/gYAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYtmBRvY AAAEAwBGMEQCIHuDsXVLYfq9XexQqNSBDv3Ri9ilvzFr+8wwMBD18bUuAiB9f+57 0/TATnmnUwQrg7B2rXE9B3GGLBPbo18+5QRemgB1ANq2v2s/tbYin5vCu1xr6HCR cWy7UYSFNL2kPTBI1/urAAABi2YFG8AAAAQDAEYwRAIgJa1MbdcVVtpndH3/A8JZ QhfQRbIQuP/XGu4eNbXR708CIBpw92c8Tr17Kv6UsySkxSuZVCJNXJgqYerccJCC RzFQMA0GCSqGSIb3DQEBCwUAA4ICAQBqKCmDgMtLu/xPd3rv5CdRyAffwwGQo9nt ZbSD0zBJ3c3z7hSe5Zq78Qrwc+XQmlfgQLEiyg3iv2t7SjxINFuDb/0AhRVcWc4s bpi3Qt/1dGiiAZDJKMMTMI0sSuMIFwh7mRQV1NEPwyS+DFXfgz+pEnRKayZZTp++ mCHM/VHYxSKbsr+Wu735Mwu2NSnayllB0CVdiSNxs+63VYto1j0Pjygn5W91ym1l DLUITs4jfYdQrWBzpUfrAatcmjo6x+ve6Y5qeNEVu/NBsSByRVS12AEbcDaMfNWp gNylF7t48YtvNNU5Lgsh/SjtFDWJwL42czsdt2GALHGRy7zDmOqUTbDZqI4af0kh ewLumnIt04ImvmGFtCC1Uc2bLdQfav4T0xR8jDPorksL1O6PwX0igU78WQKI7x2I GrcbBlUJ+eKSDJ+3xib5GxakkJfU3rXwoVt6JykR/3Sb16NbUHo/C0ysGUbGOux0 IWqlTJaRRiX6LDQG4I9VApUkzGOoBblIca4FnerP9KMJgm7rHPCmVFdQ6QHB1ImX 56dmRxJ1EfhRXfYSFxBYCRYiCGYEBRX9ABhUDAZQ16HC2sm/Rb5kW9YceiphdqTn DVAoIkgL9k2k0H+PVffcEUMhi9/2wOd+iiQotmZvCOkO4o18fJTJSgDaHGkYGFSD mmZQaUrVXA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomHJnhGvph0JiC/KffIH ObDgnLMx43onU6dPPRlzvT65UQlG0mDXWODXAgG78XrBF6WqPcacH3yvUHdnVNeh lyo5uG65DQMyXFpgzElCXmKzP13v1kpOqtE1RSkrxahC16wFdTVbRGDhw8pQdljk hZRYkAES6M8Bx79Z4H5Hq4PMbsIdQk58H822Zhaa7wbKJjq0eWITB78fWufr2ikR kz6QIhllr08fKMiGYDsjQ2oK1ZJ44gsc1Je3xqfmaDFAt4TXDj+SGQm6hhff7Bt1 fWxdyV02wlOphYFE1mnYFxbY9q1/rRihuCN/kxqnWMlf9dXg5wUMwBtIUxlA0QSp UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10211163666500514347972468975487013474 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'searchengine.analytics.dealogic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20498826251592973013429110064841154198430732582509529381701553264376411175710676136112874378114483739245534205518009253644898683336244132501698196986256690202332405022588735948904927766487686017935183984270981284812287761294852629948563322552687621665837656901639398983007210203334540265954355183190549270268574451815753474565585175931885558499803912959088364778866565376829352492869736454175363714752885278652882507725133377851127497135450538034244271727473606166802246438110342007499826685240704815141871671752900272783485331521371101731749864959796237782809164337317891230688672055578948556241163113086864104663377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e955d7026128dae382dfac6a760af40d3527b80e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchengine.analytics.dealogic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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