www.cwgc.org

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:fd:a8:f4:e2:6b:86:a2:bc:1d:ec:04:3e:39:64:16 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cwgc.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fd:a8:f4:e2:6b:86:a2:bc:1d:ec:04:3e:39:64:16
Serial Number (int): 5304761939122729051218477998396761110
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 59:59:63:75:17:af:15:4b:de:90:51:d5:21:46:13:3d:c9:0b:17:19
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ca:3d:6b:08:21:b9:21:78:76:1d:74:61:1f:ef:88:d4:04:d3:7e:46
Fingerprint (sha256): 0a:04:43:7f:6b:9d:6f:c5:56:3f:62:0a:88:29:d4:da:db:64:93:df:3f:84:ac:ee:78:ab:74:bf:b5:bb:79:2c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.cwgc.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cwgc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cwgc.org

Other certificates including the domain name cwgc.org

(limited to 100 certificates)
shapingoursorrow.cwgc.org
fourcorners.cwgc.org
www.cwgc.org
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
crmlive.cwgc.org
kiosk.vidaglobal.de
liberation.cwgc.org
blog.cwgc.org
www.cm.production.cwgc.org
kiosk.am-weststrand.com
www.cwgc.org
blog.cwgc.org
media.hirschmann-automotive.com
publications.cwgc.org
blog.cwgc.org
crmlive.cwgc.org
app.cwgc.org
magazine.legacylighthouse.org
app.cwgc.org
crmlive.cwgc.org
kiosk.der-kleine-georg.de
downloads.yspi.ie
archive.cwgc.org
owahub.cwgc.org
magazine.legacylighthouse.org
kiosk.vidaglobal.de
fourcorners.cwgc.org
kiosk.der-kleine-georg.de
quals.truebeck.com
secure.cwgc.org
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
intranet.cwgc.org
crmtest.cwgc.org
kiosk.vidaglobal.de
blog.cwgc.org
quals.truebeck.com
emag.indianjeweller.in
www.cm.uat.cwgc.org
www.cwgc.org
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
photo.cwgc.org
magazine.legacylighthouse.org
blog.cwgc.org
magazine.roarkidsmagazine.com
webmail.cwgc.org
kiosk.vidaglobal.de
news.vdmno.de
thecentre.cwgc.org
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
blog.cwgc.org
shapingoursorrow.cwgc.org
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.legacylighthouse.org
www.cwgc.org
magazine.legacylighthouse.org
publications.cwgc.org
blog.cwgc.org
blog.cwgc.org
secure.cwgc.org
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
mysite.cwgc.org
brochure.ntpwarranty.com
www.cm.uat.cwgc.org
wirbeicontipark.contipark.de
blog.cwgc.org
thecentre.cwgc.org
webmail.cwgc.org
www.cwgc.org
magazine.cioa.com
cwgc.org
kataloge.weilermoebel.at
magazine.legacylighthouse.org
downloads.yspi.ie
archive.cloud.cwgc.org
adfs.cwgc.org
magazines.somethinggoodmagazines.com
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
citrix.cwgc.org
katalog.gartenmode.de
flyer.aqua-dome.at
intranet.cwgc.org
brochure.ntpwarranty.com
magazine.legacylighthouse.org
brochure.ntpwarranty.com

Certificate

The complete raw certificate details for www.cwgc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhjCCBW6gAwIBAgIQA/2o9OJrhqK8HewEPjlkFjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMDMxMDAwMDAwWhcNMjQwNDMwMjM1OTU5WjAXMRUwEwYDVQQDEwx3d3cuY3dn
Yy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6J+ZwtnN1bzB
3bnr9PUDYgRlMSUW6bueKTAtyKQ300KHJmDzcZvXAdWgMs/Cqyz1X2GlG4qWgZU6
TSN0y/+voe+YeVLMElWmFF5mJ9lDXPwJxtTDeV7HVewXnqyxnhuH+zBsUvvYTVQU
M0UHFC9vMAPKL6CCAwIrkMZFcD5MgM7PU+Z1HH0D3DYrNoL1/GXSRmE1Og0fijFW
Z0EYZAlctoG4115ZMERhqIBJNiZIqRWmQkm04QxyxPLIcbSyruMWGt9/Q/7ZqWL8
ttlauZK6Tf9PxitT+eGyuJH8jBR2bxglL9H1ul6gmkUfT/6sMF1XTgSfGfMvEkiP
VZezSIlpAgMBAAGjggOHMIIDgzAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASog
BLhmIzAdBgNVHQ4EFgQUWVljdRevFUvekFHVIUYTPckLFxkwFwYDVR0RBBAwDoIM
d3d3LmN3Z2Mub3JnMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW
G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG
Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw
OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGH
BggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0
LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dl
b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB
/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABi4TC5sYAAAQDAEcwRQIgIyrML4B71Y2LfAxJ
/TYlSzRClJaDo+kgyp9zj1mtSX4CIQCNRF9GtRbSfv/WXwyhdORcNkYxof+K23UV
dkhM3KIWWgB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi4TC
5vcAAAQDAEYwRAIgVarGJ7vsfMKCRmqleJZvl2PKLYlk4afK0AFXwHiyOMsCIE7y
VZDk8cskVG/H/TA0vTWF4TSLPx2fUlfYBmgYH8AIAHYA2ra/az+1tiKfm8K7XGvo
cJFxbLtRhIU0vaQ9MEjX+6sAAAGLhMLm/AAABAMARzBFAiEAk0e/9HRfwwFlWSj+
Cx2KvsutbouDpZA0Oz9FfSg9fYECIGCzn9PRcAUMdfX8ToBMYQV5Sevj0ZckbScH
4GUPNy2XMA0GCSqGSIb3DQEBCwUAA4ICAQA/f+SLuoMAwXahzmW+nGC0mLG0glCA
ljBPBoKOaH33JXgNvKelq8b7+rEawSQHsIpbZqVP0MfciR8fdVlPvgJv1qnEf6Ic
mIdQKumnIN5WOUvyN2s5zGzUOG1O7P1qlkwEXsN6BB9YO2VmK+Otsg75wCbzOKks
UcU6VwB1rgvYly7dWxti3BOq5WwovUNvVcnoqJB3oitdd7pCd4E4SlXLLjyKL5uT
p4evwdn3X8Sup8/nGG/Fn+kHzhC7xhAbFSreiYOJ23X0QeL+ZU1rHTuX0duDE3xb
ziyvDIPMxklYmg5xT3kjGkErqZExJfeDVWZ+oRESg3y/kQbqPNHwBGByCIEUbL9P
CQEmQP0yaOsz22MO+8je1LNW+qGa0kWsCuP2Weq4jTUmrFiVS2C0I8qb95MkX0ay
SJe4jN5+Z3Z0Eq3yjCmnN6+awG1u/1elUyPjh5Lsrme99dX3MeU1HVN5BNZJk0y3
76TpHUeEGIOdTnGB8SrXFKrvw7V8k72sH57y8C6ZjFU0PuC6o5orbiGLY25gsgQY
AHEVEirtDxEy+sXtpBo8he4Fq8DMTJ5sJkOXCVqX+nIkD1p/TxcHqhr6Gbs58/7f
dP+lcnUgeG/t8O/Q8wpl8b9QiOGF+EiNZp2KADTLJJmvvkRAPiFrn2vtqUMQloRX
gGFR0NeBc3a3Dw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOifmcLZzdW8wd256/T1
A2IEZTElFum7nikwLcikN9NChyZg83Gb1wHVoDLPwqss9V9hpRuKloGVOk0jdMv/
r6HvmHlSzBJVphReZifZQ1z8CcbUw3lex1XsF56ssZ4bh/swbFL72E1UFDNFBxQv
bzADyi+gggMCK5DGRXA+TIDOz1PmdRx9A9w2KzaC9fxl0kZhNToNH4oxVmdBGGQJ
XLaBuNdeWTBEYaiASTYmSKkVpkJJtOEMcsTyyHG0sq7jFhrff0P+2ali/LbZWrmS
uk3/T8YrU/nhsriR/IwUdm8YJS/R9bpeoJpFH0/+rDBdV04EnxnzLxJIj1WXs0iJ
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5304761939122729051218477998396761110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwgc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21322746127875055316198728226849873587988441001071407415340458311734378901903724816725388356248953399841539754893431530869268762470689680450747846039412213214258260220935206227663051790292911612214026528973814978665690547806800779704021037584920907920129855047760131173524198855736307066351286688484853299508744983949876959427474134076949401315747973191591188530096816984791984287883704598704635801024597542472389405191986453825870406803328751688523646379675370646003544475880949169725549862644537091783687131396925606036233299434903069657152526038999826773501334820885189857348167891950206998817169886805154310162793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5959637517af154bde9051d52146133dc90b1719
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwgc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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