dev-portal-nrosh.softwire.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 07:59:75:1d:44:9b:b5:ad:29:18:e1:77:98:e8:d3:12 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dev-portal-nrosh.softwire.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:59:75:1d:44:9b:b5:ad:29:18:e1:77:98:e8:d3:12Serial Number (int): 9769085751677573040844476648117555986
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 72:b2:9d:14:58:bc:75:b2:ea:ee:9a:db:fa:0c:5d:02:ea:a9:2b:98
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 5a:b1:74:a0:30:11:f8:81:52:04:43:2f:ab:1b:37:e7:bf:b5:43:9a
Fingerprint (sha256): 06:e9:f8:0d:65:4b:95:85:0f:a6:06:3f:7a:ea:9b:a1:2a:31:8b:9f:01:65:11:7a:a4:d5:dd:44:d1:d0:98:39
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate dev-portal-nrosh.softwire.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev-portal-nrosh.softwire.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev-portal-nrosh.softwire.com
Other certificates including the domain name softwire.com
(limited to 100 certificates)
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
theenglish.m1studio.co
sni176918.cloudflaressl.com
*.softwire.com
mail.softwire.com
bennettl.com
sni176918.cloudflaressl.com
academy.softwire.com
sni176918.cloudflaressl.com
kar-certificate.thinktac.com
www.yuli.cl
on-life.jp
dev-portal-nrosh.softwire.com
sni176918.cloudflaressl.com
softwire.com
sni176918.cloudflaressl.com
imaginative.shoesprays.com
sni176918.cloudflaressl.com
lifebyvivara.com.br
sni176918.cloudflaressl.com
www.define.ag
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
brunaturmfcapital.wl.titanbay.com
sni176918.cloudflaressl.com
joytasker.com
sni176918.cloudflaressl.com
mc34.xtend.events
www.ora-source.com
sni176918.cloudflaressl.com
brooks-admin.petlicense.online
harascorp.com
email.softwire.com
link.championsmind.app
*.softwire.com
gefeststroi.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
pathtech.org
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
i-trade.app
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
www.andosando.xyz
blog.fm7077.it
essencebo.com
sni176918.cloudflaressl.com
kylanlewis.page
sni176918.cloudflaressl.com
*.softwire.com
intivastudio.com
get.maxxer.com
sni.cloudflaressl.com
access.softwire.com
sni176918.cloudflaressl.com
parkerlocks.in
test.hottruck.com
pinkdhaga.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni.cloudflaressl.com
sni176918.cloudflaressl.com
staging.nuclei.app
sni176918.cloudflaressl.com
covid.noralavonne.com
lcsp.sheriffsalerts.com
zmh.business
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
eliezerbarbosa.com
sni176918.cloudflaressl.com
toastty.app
sni176918.cloudflaressl.com
internal.12traits.com
admin.aplicativoboletim.com.br
sni176918.cloudflaressl.com
imedis.io
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
www.bigscreen.world
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
yonjins.com
bifrost.atyrpharma.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
pets-are-everything.com
sni176918.cloudflaressl.com
academy.softwire.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
theenglish.m1studio.co
sni176918.cloudflaressl.com
*.softwire.com
mail.softwire.com
bennettl.com
sni176918.cloudflaressl.com
academy.softwire.com
sni176918.cloudflaressl.com
kar-certificate.thinktac.com
www.yuli.cl
on-life.jp
dev-portal-nrosh.softwire.com
sni176918.cloudflaressl.com
softwire.com
sni176918.cloudflaressl.com
imaginative.shoesprays.com
sni176918.cloudflaressl.com
lifebyvivara.com.br
sni176918.cloudflaressl.com
www.define.ag
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
brunaturmfcapital.wl.titanbay.com
sni176918.cloudflaressl.com
joytasker.com
sni176918.cloudflaressl.com
mc34.xtend.events
www.ora-source.com
sni176918.cloudflaressl.com
brooks-admin.petlicense.online
harascorp.com
email.softwire.com
link.championsmind.app
*.softwire.com
gefeststroi.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
pathtech.org
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
i-trade.app
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
www.andosando.xyz
blog.fm7077.it
essencebo.com
sni176918.cloudflaressl.com
kylanlewis.page
sni176918.cloudflaressl.com
*.softwire.com
intivastudio.com
get.maxxer.com
sni.cloudflaressl.com
access.softwire.com
sni176918.cloudflaressl.com
parkerlocks.in
test.hottruck.com
pinkdhaga.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni.cloudflaressl.com
sni176918.cloudflaressl.com
staging.nuclei.app
sni176918.cloudflaressl.com
covid.noralavonne.com
lcsp.sheriffsalerts.com
zmh.business
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
eliezerbarbosa.com
sni176918.cloudflaressl.com
toastty.app
sni176918.cloudflaressl.com
internal.12traits.com
admin.aplicativoboletim.com.br
sni176918.cloudflaressl.com
imedis.io
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
www.bigscreen.world
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
yonjins.com
bifrost.atyrpharma.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
pets-are-everything.com
sni176918.cloudflaressl.com
academy.softwire.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
Certificate
The complete raw certificate details for dev-portal-nrosh.softwire.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHqDCCBZCgAwIBAgIQB1l1HUSbta0pGOF3mOjTEjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwOTI1MDAwMDAwWhcNMjQwMzI1MjM1OTU5WjAoMSYwJAYDVQQDEx1kZXYtcG9y dGFsLW5yb3NoLnNvZnR3aXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAPbkRZuqFugHjU0GcTqkMG0oGdkrtfViF/qo4S/o/LUNf1LHSv2tt1A0 uMm8empev1VIGQjJhMV8BE7RgrTxFV9DExgoyiqN6y8M32hnnfDFEjFgQKs+Q1mn dSSZgp9S/cF1ndS8ztPVhwA97zWF7YWOjE3zchmNqR/In/QqBskjOQ6j+yMJwHI2 NqGjLavk6wy8GMghDdclPN3Pp75lhS0DQAuYFvwmTVOL9y3Agrzblr3L93NZ3hQP fcYvFUrLEsAubbIfHO24OGw9YCl6GfTUmGR1qYwMN5jWeNsPzorL9bJuygGgo5YN G4P/N5pn+TsP8m4PU2SoxLjjuHZM2E0CAwEAAaOCA5gwggOUMB8GA1UdIwQYMBaA FKW01us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBRysp0UWLx1surumtv6DF0C 6qkrmDAoBgNVHREEITAfgh1kZXYtcG9ydGFsLW5yb3NoLnNvZnR3aXJlLmNvbTA+ BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5k aWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNB MS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEds b2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5 MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUH MAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRM U1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYB BAHWeQIEAgSCAW0EggFpAWcAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG cR+1mwAAAYrKi1QEAAAEAwBHMEUCIBoMOO+28MckDq41KNGmFhSkEDJlPx9B5w5X FFeywWQTAiEAmvm5hIGjiGc41vCPnDG3i1tk39BFq/1Tn6QVJuXgXkoAdgBIsONr 2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYrKi1REAAAEAwBHMEUCICqS nuJbS+ovcPM2kF6NjDoEhF84q7CR8+b5orbUgzopAiEAvqKwzYxz9ffwreXS1UOD FdzF37WnJlstRXXKF/A+BT8AdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0w SNf7qwAAAYrKi1QgAAAEAwBGMEQCIAlY8Ye+wNiGhmLdWp0gxhpO78nmy+pONX8n bhXoJV6VAiB/z7BvQaos5WXcN09cJ/C+OfX8cP5vUOa7GPcxHyeWXzANBgkqhkiG 9w0BAQsFAAOCAgEAUWFCdRX/ASJNounyaq2ThtszHMR48BjPhRIrUA/YTr6K28eH 15ZNMFac5Sms/HMxU0PaKIsDaLoJwL9+LYnkNEozM98dNBJ48BDOL7uZKai7pl/W JX+Gb1UGkKGxaqsxNU4WMlOOTEIW6tMnj164+DWZDAm4ND3ZMYkTcb+eoJu9jHbk NghejzmP8LF9ZutJ+KTMdrM2bJwkUnK5Y17wMG22qOCeI8VJIM0UC7ZGPUhFtbD4 1e8J1CWdLAogiuOF7TiQ5oYUP/vhUCiYUcrsIAX1cNCcg7p4981yBmVohLsWqEZk tIaIRKTmgc/AjuZB1XMN2Tpmd4e4PgJzaUUNdTcZkKbyO44WO6BPPcPDolBotiD1 Qz6W1qm0s1Mq8SOp6BzI4lQsh3+oLPe/9Gahz1BXYZgucSKbEAW6rINXzqN4Dq7y RCqWosY3y4n8CwhKyRXSvQ9mSMXSfiYPK54Kk9o1d4Hs8uSFUkZFbCkbvLwjLoBL QLY45WhKKfeRUHOZmK9y4dEpZ8PTYfXHIGFVx5QDQ6gbYfsjdt+XVjs+im85r4dJ IES928Eg0jjdyWEczcCwhJpqB1uq9R1uD19yqvhdJLnxt/Tl/Wl1TXAtb4DIURLS agI8JzKs+WZTiOMXFS+/MFI5bI6b6dtn+UKCueEPxAfUPF8hov1Pg/3KBg4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uRFm6oW6AeNTQZxOqQw bSgZ2Su19WIX+qjhL+j8tQ1/UsdK/a23UDS4ybx6al6/VUgZCMmExXwETtGCtPEV X0MTGCjKKo3rLwzfaGed8MUSMWBAqz5DWad1JJmCn1L9wXWd1LzO09WHAD3vNYXt hY6MTfNyGY2pH8if9CoGySM5DqP7IwnAcjY2oaMtq+TrDLwYyCEN1yU83c+nvmWF LQNAC5gW/CZNU4v3LcCCvNuWvcv3c1neFA99xi8VSssSwC5tsh8c7bg4bD1gKXoZ 9NSYZHWpjAw3mNZ42w/Oisv1sm7KAaCjlg0bg/83mmf5Ow/ybg9TZKjEuOO4dkzY TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9769085751677573040844476648117555986 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-portal-nrosh.softwire.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31167188094103485919373210397498579788096809746341862805292678993517377411077599099532784359174549904149167482946277869976911972945628997764648802933434253996753584222208354648320090480320886258796871324115641166712141067396008687346823699555970817049847396383540691637428764256312284859235070354002212668789224667456451362132112921626364515330173787763430119174668377874207225648629563663634869820931861215068489108783710650093606072447089784681757947897433827966534966083158338528310584397154492304601974187864311972601141897781458699645106082715475371103142814494889675146292324819535904356403489391020142108661837 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 72b29d1458bc75b2eaee9adbfa0c5d02eaa92b98 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-portal-nrosh.softwire.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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