www.cwgc.org
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 03:fd:a8:f4:e2:6b:86:a2:bc:1d:ec:04:3e:39:64:16 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.cwgc.org
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fd:a8:f4:e2:6b:86:a2:bc:1d:ec:04:3e:39:64:16Serial Number (int): 5304761939122729051218477998396761110
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 59:59:63:75:17:af:15:4b:de:90:51:d5:21:46:13:3d:c9:0b:17:19
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): ca:3d:6b:08:21:b9:21:78:76:1d:74:61:1f:ef:88:d4:04:d3:7e:46
Fingerprint (sha256): 0a:04:43:7f:6b:9d:6f:c5:56:3f:62:0a:88:29:d4:da:db:64:93:df:3f:84:ac:ee:78:ab:74:bf:b5:bb:79:2c
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate www.cwgc.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cwgc.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cwgc.org
Other certificates including the domain name cwgc.org
(limited to 100 certificates)
shapingoursorrow.cwgc.org
fourcorners.cwgc.org
www.cwgc.org
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
crmlive.cwgc.org
kiosk.vidaglobal.de
liberation.cwgc.org
blog.cwgc.org
www.cm.production.cwgc.org
kiosk.am-weststrand.com
www.cwgc.org
blog.cwgc.org
media.hirschmann-automotive.com
publications.cwgc.org
blog.cwgc.org
crmlive.cwgc.org
app.cwgc.org
magazine.legacylighthouse.org
app.cwgc.org
crmlive.cwgc.org
kiosk.der-kleine-georg.de
downloads.yspi.ie
archive.cwgc.org
owahub.cwgc.org
magazine.legacylighthouse.org
kiosk.vidaglobal.de
fourcorners.cwgc.org
kiosk.der-kleine-georg.de
quals.truebeck.com
secure.cwgc.org
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
intranet.cwgc.org
crmtest.cwgc.org
kiosk.vidaglobal.de
blog.cwgc.org
quals.truebeck.com
emag.indianjeweller.in
www.cm.uat.cwgc.org
www.cwgc.org
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
photo.cwgc.org
magazine.legacylighthouse.org
blog.cwgc.org
magazine.roarkidsmagazine.com
webmail.cwgc.org
kiosk.vidaglobal.de
news.vdmno.de
thecentre.cwgc.org
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
blog.cwgc.org
shapingoursorrow.cwgc.org
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.legacylighthouse.org
www.cwgc.org
magazine.legacylighthouse.org
publications.cwgc.org
blog.cwgc.org
blog.cwgc.org
secure.cwgc.org
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
mysite.cwgc.org
brochure.ntpwarranty.com
www.cm.uat.cwgc.org
wirbeicontipark.contipark.de
blog.cwgc.org
thecentre.cwgc.org
webmail.cwgc.org
www.cwgc.org
magazine.cioa.com
cwgc.org
kataloge.weilermoebel.at
magazine.legacylighthouse.org
downloads.yspi.ie
archive.cloud.cwgc.org
adfs.cwgc.org
magazines.somethinggoodmagazines.com
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
citrix.cwgc.org
katalog.gartenmode.de
flyer.aqua-dome.at
intranet.cwgc.org
brochure.ntpwarranty.com
magazine.legacylighthouse.org
brochure.ntpwarranty.com
fourcorners.cwgc.org
www.cwgc.org
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
crmlive.cwgc.org
kiosk.vidaglobal.de
liberation.cwgc.org
blog.cwgc.org
www.cm.production.cwgc.org
kiosk.am-weststrand.com
www.cwgc.org
blog.cwgc.org
media.hirschmann-automotive.com
publications.cwgc.org
blog.cwgc.org
crmlive.cwgc.org
app.cwgc.org
magazine.legacylighthouse.org
app.cwgc.org
crmlive.cwgc.org
kiosk.der-kleine-georg.de
downloads.yspi.ie
archive.cwgc.org
owahub.cwgc.org
magazine.legacylighthouse.org
kiosk.vidaglobal.de
fourcorners.cwgc.org
kiosk.der-kleine-georg.de
quals.truebeck.com
secure.cwgc.org
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
intranet.cwgc.org
crmtest.cwgc.org
kiosk.vidaglobal.de
blog.cwgc.org
quals.truebeck.com
emag.indianjeweller.in
www.cm.uat.cwgc.org
www.cwgc.org
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
photo.cwgc.org
magazine.legacylighthouse.org
blog.cwgc.org
magazine.roarkidsmagazine.com
webmail.cwgc.org
kiosk.vidaglobal.de
news.vdmno.de
thecentre.cwgc.org
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
blog.cwgc.org
shapingoursorrow.cwgc.org
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.legacylighthouse.org
www.cwgc.org
magazine.legacylighthouse.org
publications.cwgc.org
blog.cwgc.org
blog.cwgc.org
secure.cwgc.org
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
mysite.cwgc.org
brochure.ntpwarranty.com
www.cm.uat.cwgc.org
wirbeicontipark.contipark.de
blog.cwgc.org
thecentre.cwgc.org
webmail.cwgc.org
www.cwgc.org
magazine.cioa.com
cwgc.org
kataloge.weilermoebel.at
magazine.legacylighthouse.org
downloads.yspi.ie
archive.cloud.cwgc.org
adfs.cwgc.org
magazines.somethinggoodmagazines.com
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
citrix.cwgc.org
katalog.gartenmode.de
flyer.aqua-dome.at
intranet.cwgc.org
brochure.ntpwarranty.com
magazine.legacylighthouse.org
brochure.ntpwarranty.com
Certificate
The complete raw certificate details for www.cwgc.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhjCCBW6gAwIBAgIQA/2o9OJrhqK8HewEPjlkFjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMDMxMDAwMDAwWhcNMjQwNDMwMjM1OTU5WjAXMRUwEwYDVQQDEwx3d3cuY3dn Yy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6J+ZwtnN1bzB 3bnr9PUDYgRlMSUW6bueKTAtyKQ300KHJmDzcZvXAdWgMs/Cqyz1X2GlG4qWgZU6 TSN0y/+voe+YeVLMElWmFF5mJ9lDXPwJxtTDeV7HVewXnqyxnhuH+zBsUvvYTVQU M0UHFC9vMAPKL6CCAwIrkMZFcD5MgM7PU+Z1HH0D3DYrNoL1/GXSRmE1Og0fijFW Z0EYZAlctoG4115ZMERhqIBJNiZIqRWmQkm04QxyxPLIcbSyruMWGt9/Q/7ZqWL8 ttlauZK6Tf9PxitT+eGyuJH8jBR2bxglL9H1ul6gmkUfT/6sMF1XTgSfGfMvEkiP VZezSIlpAgMBAAGjggOHMIIDgzAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASog BLhmIzAdBgNVHQ4EFgQUWVljdRevFUvekFHVIUYTPckLFxkwFwYDVR0RBBAwDoIM d3d3LmN3Z2Mub3JnMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGH BggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB /wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABi4TC5sYAAAQDAEcwRQIgIyrML4B71Y2LfAxJ /TYlSzRClJaDo+kgyp9zj1mtSX4CIQCNRF9GtRbSfv/WXwyhdORcNkYxof+K23UV dkhM3KIWWgB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi4TC 5vcAAAQDAEYwRAIgVarGJ7vsfMKCRmqleJZvl2PKLYlk4afK0AFXwHiyOMsCIE7y VZDk8cskVG/H/TA0vTWF4TSLPx2fUlfYBmgYH8AIAHYA2ra/az+1tiKfm8K7XGvo cJFxbLtRhIU0vaQ9MEjX+6sAAAGLhMLm/AAABAMARzBFAiEAk0e/9HRfwwFlWSj+ Cx2KvsutbouDpZA0Oz9FfSg9fYECIGCzn9PRcAUMdfX8ToBMYQV5Sevj0ZckbScH 4GUPNy2XMA0GCSqGSIb3DQEBCwUAA4ICAQA/f+SLuoMAwXahzmW+nGC0mLG0glCA ljBPBoKOaH33JXgNvKelq8b7+rEawSQHsIpbZqVP0MfciR8fdVlPvgJv1qnEf6Ic mIdQKumnIN5WOUvyN2s5zGzUOG1O7P1qlkwEXsN6BB9YO2VmK+Otsg75wCbzOKks UcU6VwB1rgvYly7dWxti3BOq5WwovUNvVcnoqJB3oitdd7pCd4E4SlXLLjyKL5uT p4evwdn3X8Sup8/nGG/Fn+kHzhC7xhAbFSreiYOJ23X0QeL+ZU1rHTuX0duDE3xb ziyvDIPMxklYmg5xT3kjGkErqZExJfeDVWZ+oRESg3y/kQbqPNHwBGByCIEUbL9P CQEmQP0yaOsz22MO+8je1LNW+qGa0kWsCuP2Weq4jTUmrFiVS2C0I8qb95MkX0ay SJe4jN5+Z3Z0Eq3yjCmnN6+awG1u/1elUyPjh5Lsrme99dX3MeU1HVN5BNZJk0y3 76TpHUeEGIOdTnGB8SrXFKrvw7V8k72sH57y8C6ZjFU0PuC6o5orbiGLY25gsgQY AHEVEirtDxEy+sXtpBo8he4Fq8DMTJ5sJkOXCVqX+nIkD1p/TxcHqhr6Gbs58/7f dP+lcnUgeG/t8O/Q8wpl8b9QiOGF+EiNZp2KADTLJJmvvkRAPiFrn2vtqUMQloRX gGFR0NeBc3a3Dw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOifmcLZzdW8wd256/T1 A2IEZTElFum7nikwLcikN9NChyZg83Gb1wHVoDLPwqss9V9hpRuKloGVOk0jdMv/ r6HvmHlSzBJVphReZifZQ1z8CcbUw3lex1XsF56ssZ4bh/swbFL72E1UFDNFBxQv bzADyi+gggMCK5DGRXA+TIDOz1PmdRx9A9w2KzaC9fxl0kZhNToNH4oxVmdBGGQJ XLaBuNdeWTBEYaiASTYmSKkVpkJJtOEMcsTyyHG0sq7jFhrff0P+2ali/LbZWrmS uk3/T8YrU/nhsriR/IwUdm8YJS/R9bpeoJpFH0/+rDBdV04EnxnzLxJIj1WXs0iJ aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5304761939122729051218477998396761110 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwgc.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21322746127875055316198728226849873587988441001071407415340458311734378901903724816725388356248953399841539754893431530869268762470689680450747846039412213214258260220935206227663051790292911612214026528973814978665690547806800779704021037584920907920129855047760131173524198855736307066351286688484853299508744983949876959427474134076949401315747973191591188530096816984791984287883704598704635801024597542472389405191986453825870406803328751688523646379675370646003544475880949169725549862644537091783687131396925606036233299434903069657152526038999826773501334820885189857348167891950206998817169886805154310162793 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5959637517af154bde9051d52146133dc90b1719 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwgc.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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