erix.cbre.eu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:1e:59:f7:04:fe:66:1c:b0:38:8d:ae:03:ca:3a:f1 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=erix.cbre.eu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:1e:59:f7:04:fe:66:1c:b0:38:8d:ae:03:ca:3a:f1
Serial Number (int): 18766785552101222479523968425373874929
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6a:16:0e:00:f8:35:83:b3:20:8d:46:67:da:46:bd:63:53:45:f5:25
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 7e:e8:a5:d5:1a:94:d0:5c:d0:80:a1:d3:1e:30:33:fc:9f:e2:74:79
Fingerprint (sha256): 08:0e:90:34:f0:dc:9b:bc:4d:48:bd:3b:21:54:b3:76:09:e7:a8:7b:a2:34:22:15:6f:e7:5a:27:70:2d:ee:cd

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate erix.cbre.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erix.cbre.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

erix.cbre.eu

Other certificates including the domain name cbre.eu

(limited to 100 certificates)
tst-cmms.cbre.eu
ticketweb.cbre.eu
fdpowershell.az.cbre.eu
mypc.cbre.eu
snib7d6gl.wpc.edgecastcdn.net
imperva.com
imperva.com
imperva.com
*.uat.cbre.eu
www.gwsconnect.cbre.eu
imperva.com
imperva.com
innovation.cbre.eu
imperva.com
imperva.com
incapsula.com
www.cbre.co.nz
www.gwsconnect.cbre.eu
imperva.com
imperva.com
www.cbre.co.nz
imperva.com
www.cbre.eu
imperva.com
imperva.com
erix.cbre.eu
thehouseofproptech.cbre.eu
imperva.com
imperva.com
*.cbre.eu
www.cbreresidential.com
incapsula.com
www.cbre.co.nz
at.cbre.eu
sky.cbre.eu
*.cbre.eu
crm365spain.uat.cbre.eu
www.cbre.co.nz
maximo.cbre.eu
imperva.com
incapsula.com
imperva.com
www.cbre.co.nz
imperva.com
*.cbre.eu
sso.cbre.eu
teamship.cbre.eu
login.cbre.eu
imperva.com
imperva.com
*.cbre.eu
extranet.cbre.eu
imperva.com
www.cbre.co.nz
myemail.cbre.com
imperva.com
aboutrealestate.cbre.eu
sky.cbre.eu
imperva.com
imperva.com
mysupplier.cbre.eu
cmms.cbre.eu
*.cbre.eu
www.cbre.eu
www.cmslistings.cbre.eu
landx-oauth-test.aws-r52.cbre.eu
www.cbreresidential.com
imperva.com
tst-cmms.cbre.eu
imperva.com
imperva.com
core.cbre.eu
erix-research.cbre.eu
www.gwsconnect.cbre.eu
www.cbreresidential.com
loop-test.cbre.eu
imperva.com
imperva.com
owa.cbre.eu
www.cbreresidential.com
imperva.com
cyprus.uat.cbre.eu
sso.cbre.eu
imperva.com
www.cbre.co.nz
imperva.com
imperva.com
landx-api-test.aws-r52.cbre.eu
proptech.cbre.eu
*.cbre.eu
www.assetiq.cbre.eu
www.cbreresidential.com
imperva.com
imperva.com
www.cbre.co.nz
at.cbre.eu
imperva.com
emeainsightreporting.cbre.eu
*.cbre.eu
owa.cbre.eu

Certificate

The complete raw certificate details for erix.cbre.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhzCCBW+gAwIBAgIQDh5Z9wT+ZhywOI2uA8o68TANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMjE1MDAwMDAwWhcNMjQwNjE1MjM1OTU5WjAXMRUwEwYDVQQDEwxlcml4LmNi
cmUuZXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVawXg2R31dx+Y
ALZHkMaki9d87VKt72RzqHD4XIvb3wAUCJ4FzjawPR3L6rAvf+jlWK4aKa53PKuh
yaQhpJRrjps2Z/UsBoAQlxKYroPWn7NBotycRUZXu9NpuDbCFzWf2Z7Vrmdrxo7c
q0U12JIgN955EtUs/VYglEqTSfHyiNBaSP1NPTxAArhVEQL88KdB32mXFB2s+ZjK
fMm6oO/DJkRb7WEuacdF98KBIKC9V01sUPSTTs5DlB1nk3Rrl6+csSO67CI+/UVz
NtSwAfTwIt1EUL0yrEHpDgd4CCjY+nEr3qOSPvsG8IFHzPjRN6l1EhU2gpRJ+F0m
u96ImXAxAgMBAAGjggOIMIIDhDAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASog
BLhmIzAdBgNVHQ4EFgQUahYOAPg1g7MgjUZn2ka9Y1NF9SUwFwYDVR0RBBAwDoIM
ZXJpeC5jYnJlLmV1MD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW
G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG
Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw
OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGH
BggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0
LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dl
b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB
/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABjG00ffAAAAQDAEcwRQIgBXngcJXreAP954dN
LFDu39wzi0vjVj2C5k9ExgPYweECIQC0qQ0e2NRKObqVU+zK7M24qw/C1kxpKa8d
B8Df+WzywAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjG00
feMAAAQDAEcwRQIgIKvmfXY3H3kEV9jMqnfhl4jmMYhTVKYs7Il+RLOLD94CIQCt
2Mfi1uzUFbQRMFA1/OgFpd0V/b46J5EFbgI/J/uACAB2ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABjG00fbgAAAQDAEcwRQIhAL4UQAToSwr2m6LD
ViEKEGNfCmSoJun0QbaN6ReUWp/UAiBZTTmoNc+k0UfeP7V+VgndsnRm/3MBKo8w
SfG7UnYTcTANBgkqhkiG9w0BAQsFAAOCAgEALMnW8hwajt5Wzq6NAojRdNb9I9wi
PIfIh71vy7PKhymhga8sBMlwbqK0hlJ3gMXwGsdqoWiIkRKrHtQgHc9P5YgPj2Lo
8NmO9cyBhRURJnRWHDJY2TWRCWD1q3QRyqhniB6oy6Hfr0PJVjRpkicNEl88/LgD
jR8popPSPbvL1bwXWBAHWAhHmssm/bq5wH0Sp4+VJ6WlHnPL+j4+DYqcfrXreR8f
pNLMqhFRegl8InnL3MdDd15wtnhzHaFcP6+fXeRog2NWR3Q9xqHZmpolabfNeirY
nKkawX/r5VO6Kr5Vm2QlKFO9PFyuGGaYvVCC4LBGAFbbK1C1dutG9wPjOm2+RwUG
wN4COjdX/X5APXQBWZ6U9VoFvg4xPpnRcWxh/W/fyCpmPLXyfAuEUvspP1XICRQl
rozQoVveKVJmhqigWLU3Vx6iLv30obszn+7uXJJd4R7iPTUUKd2ac/5QZtJivMe5
uafkmK+cuq5GbLBh0Pp4QkY9n1a5FgDPOGNwfihz8Iw981mtMc9HDsSlqkLOMSLP
ZvDkxGhVCq+SanUtUk85u8Z9+AtJsikbmv3jj3voHfGDx0/toNTWQfIR6yre2lwu
WIThWvRIDoRU2Wmgvrj4i18eRV2DBvQ3yJJvBIdb0VxaLiFAbw/dHMTf90TIkgTW
ooM6R+BQekJ/0Nk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WsF4Nkd9XcfmAC2R5DG
pIvXfO1Sre9kc6hw+FyL298AFAieBc42sD0dy+qwL3/o5ViuGimudzyrocmkIaSU
a46bNmf1LAaAEJcSmK6D1p+zQaLcnEVGV7vTabg2whc1n9me1a5na8aO3KtFNdiS
IDfeeRLVLP1WIJRKk0nx8ojQWkj9TT08QAK4VREC/PCnQd9plxQdrPmYynzJuqDv
wyZEW+1hLmnHRffCgSCgvVdNbFD0k07OQ5QdZ5N0a5evnLEjuuwiPv1FczbUsAH0
8CLdRFC9MqxB6Q4HeAgo2PpxK96jkj77BvCBR8z40TepdRIVNoKUSfhdJrveiJlw
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18766785552101222479523968425373874929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erix.cbre.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26941533947362348285970859657308823424450145874252517996014490076824810341411735113691705464434363658977713005161049049379569168070596652962728055523472978983699263450090520711886548808375405546670122866911010043502495911262341058952488297073051626544116929509388493242329257710051064085719339367794160724649043492937904616180529286384797685690360023618391603646933099452713404213680500807269656836948814662195142339176219082032889377537384608171999209854914754871205480901369449648078845509153676569657083889613609744036199293915901775954391283282367566497935394462663478378952630860932256906802225384706371875336241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a160e00f83583b3208d4667da46bd635345f525
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erix.cbre.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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