vpn.range.roche.net

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:74:f0:03:8b:6f:21:17:09:d6:cd:67:24:74:fc:fa was issued on by DigiCert, Inc..

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.range.roche.net

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:74:f0:03:8b:6f:21:17:09:d6:cd:67:24:74:fc:fa
Serial Number (int): 13899454452581326071864584916916567290
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f6:69:63:fe:69:01:de:47:f9:b1:73:aa:1e:12:ec:e0:35:b9:e8:c0
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): e7:d5:68:7d:ac:8a:57:47:3a:d5:b1:d1:2a:5e:02:ac:e8:c7:19:5b
Fingerprint (sha256): 08:0c:b7:e8:af:ed:c9:d7:c4:b0:91:03:4f:51:8b:d8:a9:ba:d7:1c:60:05:86:f6:26:a2:90:03:24:75:11:4f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate vpn.range.roche.net

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.range.roche.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.range.roche.net
dtkpulse.range.roche.net
dtk.range.roche.net
exvpn.range.roche.net
gconnect-sg.gene.com
gconnect-sg.roche.com
imobile.gene.com
pcs-poc.gene.com
pdust.gene.com
ppebas.range.roche.net
pulse.range.roche.net
pulsesecure2.gene.com
pulsesecure.gene.com
pulsesecureipv6.gene.com
pulsesecure-sg.gene.com
rba2pulse.range.roche.net
rbaapptestipv6.range.roche.net
rbaapptest.range.roche.net
rbapulseipv6.range.roche.net
rbapulse.range.roche.net
rba.range.roche.net
rbupulse.range.roche.net
rbu.range.roche.net
rdwpulse.range.roche.net
rdw.range.roche.net
rgw.range.roche.net
ridpulse.range.roche.net
rid.range.roche.net
rllpulse.range.roche.net
rll.range.roche.net
rm2pulseipv6.range.roche.net
rm2pulse.range.roche.net
rm2.range.roche.net
rmxpulse.range.roche.net
rmx.range.roche.net
rshpulse.range.roche.com.cn
rshpulse.range.roche.net
rsh.range.roche.com.cn
rsh.range.roche.net
rsopulse.range.roche.net
rso.range.roche.net
rsy.range.roche.net
rt5pulse.range.roche.net
rt5.range.roche.net
shpapptest.range.roche.net
shppulseipv6.range.roche.net
shppulse.range.roche.net
shp.range.roche.net
ssportal.gene.com
ssportal.gip.gene.com
vpnmobile.range.roche.net

Other certificates including the domain name roche.net

(limited to 100 certificates)
coaguchek.com
partneraccess.roche.net
sentry-ppe.roche.net
edi2.roche.net
mdm.roche.net
sni.cloudflaressl.com
*.edidev2.roche.net
sg3vk030.roche.net
range.roche.net
sentryasiagmail.roche.net
sentrygmailtest.roche.net
vpn.range.roche.net
*.edidev2.roche.net
remoteaccess.roche.net
*.edi2.roche.net
rosa.roche.net
rkavoglh.roche.net
sni.cloudflaressl.com
se2vk030.roche.net
mdm-test.roche.net
partneraccess.roche.net
remoteaccess.roche.net
esrv-hub-uat.roche.net
*.editest2.roche.net
sni.cloudflaressl.com
editest3.roche.net
se2vk030.roche.net
se3vk030.roche.net
*.edi2.roche.net
sni.cloudflaressl.com
api-home.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sentryasiagmail.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
rkavoglh.roche.net
*.rosa.roche.net
prod.rosa.roche.net
sentryemeao365.roche.net
cat.navify.esrv-hub-dev.roche.net
sni.cloudflaressl.com
ridusaxprod.dia.roche.net
aauthctx.roche.net
api-home.roche.net
sni.cloudflaressl.com
api-uat-home.roche.com
roche.net
edidev2.roche.net
*.edi2.roche.net
mb2vk030.roche.net
sentrynalao365.roche.net
roche.net
vpn.range.roche.net
roche.net
api-home.roche.net
roche.net
*.range.roche.net
mdm-dev.roche.net
range.roche.net
home.roche.net
sni.cloudflaressl.com
zh5vk030.roche.net
smartwebpoc.roche.net
roche.net
edi2.roche.net
cat.navify.esrv-hub-dev.roche.net
api-uat-home.roche.net
api-home.roche.net
*.edi2.roche.net
roche.net
api-home.roche.net
*.range.roche.net
sni.cloudflaressl.com
vpn.range.roche.net
remoteaccess.roche.net
sni.cloudflaressl.com
partneraccess.roche.net
esrv-hub-dev.roche.net
sni.cloudflaressl.com
roche.net
*.edidev2.roche.net
businesspartners.roche.net
sni.cloudflaressl.com
mdm-test.roche.net
range.roche.net
*.rosa.roche.net
esrv-hub-uat.roche.net
mb2vk030.roche.net
se2vk030.roche.net
range.roche.net
sni.cloudflaressl.com
uat-home.roche.net
sentry-ppe.roche.net
fr4vk030.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
mdm.roche.net
edidev.roche.net
sni.cloudflaressl.com

Certificate

The complete raw certificate details for vpn.range.roche.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb9muOnwQBZdagUl2Xbp
BIBs16CGKbqgUoCoKAn3NmOop52ZZsas4VsJaz5FTv5dxdA5T56ziMxl5ylTGbS8
LtkD1eDRgRSXf6nCYqny+PwTHPr1mz5jz6bhLHyu9HS+EjwK9RxFk/I+hTvoDrqW
0LDOt2EKhDaVJyujV/9lKS1gZIxpgQOHqnVyTxFpIFnF/UOIhJKtmflyc1jhXYlF
83P8pfvpLCxhjw2Xqybrkwj5gRwhshCN5X4zpD60g5L9DymEzk6C0UhNksyhbYPq
9M2NNhHMdeaszAFwKaaKcPKtcOkIpnbu4hNkZlt2XSepUQr5ClQjuLN3HTUH/8Ok
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13899454452581326071864584916916567290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.range.roche.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24963329556876951087218031552093832978530967261444212659203195116996391546286256093889548967113540264460752664595672583991779281521555798696385780274905430018736530385802829890070607002927188531486956986239427393476853863275756793277057506105737678522942313308173955828954687954105067398166605322722066852961841711302887104960407896942989968260626651185875270366179348469614440090935623335425360696070797698487726293426640405690418482590956254715803238428450903721040657255088525904848239066220634038547613528495608761792201066935445402022518025442931668744312666916929642049108192644419215383722249140178948683179041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f66963fe6901de47f9b173aa1e12ece035b9e8c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtkpulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtk.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exvpn.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gconnect-sg.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gconnect-sg.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobile.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcs-poc.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdust.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppebas.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecure2.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecure.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecureipv6.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsesecure-sg.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rba2pulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbaapptestipv6.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbaapptest.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbapulseipv6.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbapulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rba.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbupulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbu.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdwpulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdw.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgw.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridpulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rid.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rllpulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rll.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm2pulseipv6.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm2pulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm2.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxpulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmx.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rshpulse.range.roche.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rshpulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsh.range.roche.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsh.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsopulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rso.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsy.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt5pulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt5.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shpapptest.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shppulseipv6.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shppulse.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shp.range.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssportal.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssportal.gip.gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnmobile.range.roche.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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