api.ocp3.azure.dso.digital.mod.uk
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number 4c:9c:77:b9:59:04:92:87:e9:f6:f1:a0:be:6a:b9:48 was issued on by ZeroSSL.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=api.ocp3.azure.dso.digital.mod.uk
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate has expire since
Certificate Details
Serial Number (hex): 4c:9c:77:b9:59:04:92:87:e9:f6:f1:a0:be:6a:b9:48Serial Number (int): 101833754281087632688477045017193134408
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 21:f9:b1:4d:ac:f4:26:21:5c:97:89:4d:0a:34:4a:f6:08:4a:30:4d
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): 9d:ab:4c:32:30:14:7b:3a:64:d4:3f:b8:75:23:3b:8c:18:7d:c7:d6
Fingerprint (sha256): 07:38:87:7e:47:43:bd:d4:9e:26:ed:70:c8:82:19:fd:cd:da:67:54:62:ed:71:68:39:73:5f:6b:af:3e:13:42
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate api.ocp3.azure.dso.digital.mod.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.ocp3.azure.dso.digital.mod.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.ocp3.azure.dso.digital.mod.uk
Other certificates including the domain name mod.uk
(limited to 100 certificates)
*.dgwmail.mod.uk
test.asems.mod.uk
indirect.public.mod.uk
helpdesk.defencegateway.mod.uk
staging-recruitment.raf.mod.uk
api.ocp1.azure.dso.digital.mod.uk
admin-app.conor.fieldreport.digital.mod.uk
sba.mod.uk
ems.ahe.mod.uk
api.ocp3.azure.dso.digital.mod.uk
asems.mod.uk
www.armynet.mod.uk
www.raf.mod.uk
vle.rmasandhurst.mod.uk
jive.defencegateway.mod.uk
dc.mod.uk
mod.uk
*.defencegateway.mod.uk
mta-sts.rafac.mod.uk
testfotoweb.royalnavy.mod.uk
mod.uk
tfs.royalnavy.mod.uk
qbp.army.mod.uk
api.ocp4.azure.dso.digital.mod.uk
clms.mod.uk
vle.rmasandhurst.mod.uk
chatbot-frontend-staging.royalnavy.mod.uk
www.mafis.mod.uk
atga.mod.uk
bader.mod.uk
*.defencegateway.mod.uk
www.da.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
emsgw.mod.uk
www.asems.mod.uk
mod.uk
*.bader.mod.uk
armycms.mod.uk
www.asems.mod.uk
dcdc.mod.uk
www.defenceshare.mod.uk
staging.cgo.mod.uk
*.apps.ocp1.azure.dso.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
*.dasa.service.mod.uk
sni.cloudflaressl.com
www.defencebrandportal.mod.uk
www.dne-careerhub.defencegateway.mod.uk
des.mod.uk
dle.mod.uk
api.ocp4.azure.dso.digital.mod.uk
t.recruitment-campaigns.mod.uk
www.atga.mod.uk
sba.mod.uk
mod.uk
www.atga.mod.uk
mod.uk
vle.rmasandhurst.mod.uk
backoffice.tom.fieldreport.digital.mod.uk
api.ocp3.azure.dso.digital.mod.uk
doctrine.mod.uk
qbp.army.mod.uk
armymail.mod.uk
testcontracts.mod.uk
api.ocp3.azure.dso.digital.mod.uk
staging-recruitment.raf.mod.uk
rcds-extranet.mod.uk
foundry.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
www.armynet.mod.uk
mod.uk
intpg1.recruitment.mod.uk
register.byod.da.mod.uk
design-system.digital.mod.uk
asems.mod.uk
*.apps.ocp3.azure.dso.digital.mod.uk
www.armynet.mod.uk
army.mod.uk
jobs.raf.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
asems.mod.uk
design-system.navy.digital.mod.uk
www.asems.mod.uk
webexuser.learn.mod.uk
design-system.navy.digital.mod.uk
sni.cloudflaressl.com
mod.uk
hybrid.mod.gov.uk
www.nsv.mod.uk
www.bdfl.mod.uk
alumni.raf.mod.uk
cms.raf.mod.uk
dtt.cms.dlp.mod.uk
*.corpserv.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
*.defencegateway.mod.uk
mod.uk
api.alan.fieldreport.digital.mod.uk
mod.uk
servicemanual.digital.mod.uk
test.asems.mod.uk
indirect.public.mod.uk
helpdesk.defencegateway.mod.uk
staging-recruitment.raf.mod.uk
api.ocp1.azure.dso.digital.mod.uk
admin-app.conor.fieldreport.digital.mod.uk
sba.mod.uk
ems.ahe.mod.uk
api.ocp3.azure.dso.digital.mod.uk
asems.mod.uk
www.armynet.mod.uk
www.raf.mod.uk
vle.rmasandhurst.mod.uk
jive.defencegateway.mod.uk
dc.mod.uk
mod.uk
*.defencegateway.mod.uk
mta-sts.rafac.mod.uk
testfotoweb.royalnavy.mod.uk
mod.uk
tfs.royalnavy.mod.uk
qbp.army.mod.uk
api.ocp4.azure.dso.digital.mod.uk
clms.mod.uk
vle.rmasandhurst.mod.uk
chatbot-frontend-staging.royalnavy.mod.uk
www.mafis.mod.uk
atga.mod.uk
bader.mod.uk
*.defencegateway.mod.uk
www.da.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
emsgw.mod.uk
www.asems.mod.uk
mod.uk
*.bader.mod.uk
armycms.mod.uk
www.asems.mod.uk
dcdc.mod.uk
www.defenceshare.mod.uk
staging.cgo.mod.uk
*.apps.ocp1.azure.dso.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
*.dasa.service.mod.uk
sni.cloudflaressl.com
www.defencebrandportal.mod.uk
www.dne-careerhub.defencegateway.mod.uk
des.mod.uk
dle.mod.uk
api.ocp4.azure.dso.digital.mod.uk
t.recruitment-campaigns.mod.uk
www.atga.mod.uk
sba.mod.uk
mod.uk
www.atga.mod.uk
mod.uk
vle.rmasandhurst.mod.uk
backoffice.tom.fieldreport.digital.mod.uk
api.ocp3.azure.dso.digital.mod.uk
doctrine.mod.uk
qbp.army.mod.uk
armymail.mod.uk
testcontracts.mod.uk
api.ocp3.azure.dso.digital.mod.uk
staging-recruitment.raf.mod.uk
rcds-extranet.mod.uk
foundry.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
www.armynet.mod.uk
mod.uk
intpg1.recruitment.mod.uk
register.byod.da.mod.uk
design-system.digital.mod.uk
asems.mod.uk
*.apps.ocp3.azure.dso.digital.mod.uk
www.armynet.mod.uk
army.mod.uk
jobs.raf.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
asems.mod.uk
design-system.navy.digital.mod.uk
www.asems.mod.uk
webexuser.learn.mod.uk
design-system.navy.digital.mod.uk
sni.cloudflaressl.com
mod.uk
hybrid.mod.gov.uk
www.nsv.mod.uk
www.bdfl.mod.uk
alumni.raf.mod.uk
cms.raf.mod.uk
dtt.cms.dlp.mod.uk
*.corpserv.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
*.defencegateway.mod.uk
mod.uk
api.alan.fieldreport.digital.mod.uk
mod.uk
servicemanual.digital.mod.uk
Certificate
The complete raw certificate details for api.ocp3.azure.dso.digital.mod.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFnTCCA4WgAwIBAgIQTJx3uVkEkofp9vGgvmq5SDANBgkqhkiG9w0BAQwFADBL MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTI0MDIwOTAwMDAwMFoXDTI0 MDUwOTIzNTk1OVowLDEqMCgGA1UEAxMhYXBpLm9jcDMuYXp1cmUuZHNvLmRpZ2l0 YWwubW9kLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgCjyJNm 9fLHGlQQOYANR2lK1eMwAfYa8MnN0U7+1Vfsnx7bfZfd2LNDpS08nPQL4+Q2QVIT odq7Z4B8sZevMeGzUbDz57UxEItSonzZ+OoGAUxggAxRIsP/KkOH1hyOCptkeom2 Ml1TcTf97JntEdyAIvqE0u5CmTtY5Mlzu/CdqdnYUpQOGBiXWliD8FGzoOk1dutv EpW9jIqutHdoC6tICjOBDX+AZHAMJXks3yUkgyLB/uOWfZW7vjirQvZrqy2Rsb8R kH9Z8jGoOrsywHs/XlUS7goDiSTUP6t6l0XCnjwIShhHZIdeoNE4u0YqakX+O5p8 764SO5YjcQuoSQIDAQABo4IBmjCCAZYwHwYDVR0jBBgwFoAUyNl4aKLZGWjVPXLe Xwo+3LWGhqYwHQYDVR0OBBYEFCH5sU2s9CYhXJeJTQo0SvYISjBNMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJOMCUwIwYIKwYBBQUHAgEWF2h0 dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBiAYIKwYBBQUHAQEEfDB6 MEsGCCsGAQUFBzAChj9odHRwOi8vemVyb3NzbC5jcnQuc2VjdGlnby5jb20vWmVy b1NTTFJTQURvbWFpblNlY3VyZVNpdGVDQS5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6 Ly96ZXJvc3NsLm9jc3Auc2VjdGlnby5jb20wEwYKKwYBBAHWeQIEAwEB/wQCBQAw LAYDVR0RBCUwI4IhYXBpLm9jcDMuYXp1cmUuZHNvLmRpZ2l0YWwubW9kLnVrMA0G CSqGSIb3DQEBDAUAA4ICAQBzuUhX1VkUsVplhxUPkpoT6luUiY83oCwfqI1SChEJ Ad4Y6l9BCJuc7z6+pZFFIoNmzlWizLVupqklfr7kQj7PiIOTrAbpu8p14Hop3Akc 0Z6V7d43kO41C2Gx/oZbE+Pc+dHqs3qa1reoUKUxjWMpAcFd9Uj1ewZI/yqDWZg4 NOIArHxbITn3I66G0BTTIkUX0CXE1hukw36Gs4ZdJWRl46nd1KpQKsdnf90wU+op +gJuqapstYr7rxs8+OztfX+9JnB6HQE8rGIvP5tNSj1uj0AK/p9xMg9V2mDUdxVW 9NgZXC+uCypeAtG/tK+hWXb7JdKa0BK7/Czg341Zjwk+LosA+QsZFuPUlAHGNZd+ FyiClY+cE9frktJ6e20q7WwSl0a+4F+exooYkcYNvhtvoNvN2ON3rCKU9K13NAIf iOBZGM116qW3uyysiYomBhJLGlWIdpASo2DynEGScxNL78namjZITt9Wuu9yycn+ vdZpvutBQl4VbgnHnt9wltaT5GbgR5w770xJZ3ciCp+kefRF34AfRhboPCmBDQ1h JjlReaProqdu//imcWuxL2ZXQu6DJLrhEpoEpOQLE0n4JAAs/r+pW4P5U3Ka0JpO RRMJwXcF6MV0SJHJQmBJXuvLgjFbngnadV7tknnmYRpMyh9ADtEnvlCrjI9RoeqI 8A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgCjyJNm9fLHGlQQOYAN R2lK1eMwAfYa8MnN0U7+1Vfsnx7bfZfd2LNDpS08nPQL4+Q2QVITodq7Z4B8sZev MeGzUbDz57UxEItSonzZ+OoGAUxggAxRIsP/KkOH1hyOCptkeom2Ml1TcTf97Jnt EdyAIvqE0u5CmTtY5Mlzu/CdqdnYUpQOGBiXWliD8FGzoOk1dutvEpW9jIqutHdo C6tICjOBDX+AZHAMJXks3yUkgyLB/uOWfZW7vjirQvZrqy2Rsb8RkH9Z8jGoOrsy wHs/XlUS7goDiSTUP6t6l0XCnjwIShhHZIdeoNE4u0YqakX+O5p8764SO5YjcQuo SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 101833754281087632688477045017193134408 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ocp3.azure.dso.digital.mod.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24995499870207673585047734715846650927351066655649804021514787423538739445081024765488551152426964231169243537237638457147788864010549144517885186728604145741717374405663337591924607746457461744428985056988796472734075518709861900490139941459747519840064883981764594955916833200791816201798765409154118475424076611092133149989277779687280144420699718545204031773826584136478846792182864649026692587260624302886042459899398525197158976381696889288960156734824460347683403660025585276906341885889368996656788239917072919660033900871051988469606787394728940715123035383428997571045985938386723765310111924697647467440201 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 21f9b14dacf426215c97894d0a344af6084a304d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ocp3.azure.dso.digital.mod.uk' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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