entertainment.wf.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:d7:8f:d1:18:a5:26:c5:06:9f:29:9e:2b:c0:65:a0 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=entertainment.wf.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:d7:8f:d1:18:a5:26:c5:06:9f:29:9e:2b:c0:65:a0
Serial Number (int): 9094628750181066928034853455445124512
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 34:e0:d9:cf:5e:52:d7:29:b9:af:a0:dd:7e:6c:4d:cb:a0:0c:b3:f9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 30:8e:14:32:6d:84:69:9a:0e:91:78:d0:54:f1:bb:5d:0b:32:7d:f9
Fingerprint (sha256): 0b:cb:f7:c7:c4:d5:6f:e7:0a:7e:d6:19:41:f5:6c:1a:c7:ce:eb:11:46:56:c9:dc:6f:5b:05:b9:1d:fc:91:5f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate entertainment.wf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for entertainment.wf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

entertainment.wf.com

Other certificates including the domain name wf.com

(limited to 100 certificates)
ceomediauat.wellsfargo.com
view.mail1.wf.com
wellscontentfix.wellsfargo.com
mortgageprocess.wf.com
www.wealthmanagementinsights.wf.com
global.wf.com
remediation.wf.com
www.welcome.wf.com
hmc-ecard.wf.com
proxy-ewpcs.wellsfargo.com
wimcapabilities.wf.com
emea.wf.com
newsroom.wf.com
ceo-wellscontent.wellsfargo.com
identity.demo.wellsoneexpensemanager.wf.com
edam-test.wf.com
wellscontentfix.wellsfargo.com
wellscontent.wellsfargo.com
ORE.WF.COM
akamai-san15.exacttarget.com
tls.automattic.com
retirementresearch.wf.com
hmc-ecard.wf.com
ceomobileuata.wellsfargo.com
accelerator.wf.com
wimcapabilities.wf.com
treasuryinsights.wf.com
www.wf.com
apac.wf.com
now-test.wf.com
ceomobileuat.wellsfargo.com
wimcapabilities.wf.com
ceomobilesit2.wf.com
storiesdev.wf.com
san-5-s7.tlsprovisioning.exacttarget.com
wellscontent.wellsfargo.com
wellsoneexpensemanager.wf.com
digital.wf.com
hmc-ecard.wf.com
feedback.wf.com
welcome.wf.com
now-rehearsal.wf.com
api.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
tls.automattic.com
ceo-wellscontent.wellsfargo.com
portfoliopremier.wf.com
wimcapabilities.wf.com
experience.wf.com
wfod.wf.com
retirementresearch.wf.com
claimspayments.wf.com
smallbusinessresources.wf.com
gbxreport-uat.wf.com
storiesnewsletter.wf.com
storiesemail.wf.com
cloud.mail18.wf.com
hmc-ecard.wf.com
homecentral.wf.com
bonusoffer.wf.com
qa.onestop.wf.com
ceomobileuata.wf.com
autodealer.wf.com
hmc-ecard.wf.com
view.mail1.wf.com
stories.wf.com
digital.wf.com
advisors.wf.com
marketing.wf.com
moneystrategies.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
storiesdev.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
hmc-ecard.wf.com
tls.automattic.com
merchantvideos.wf.com
now-breakfix.wf.com
hmc-ecard.wf.com
wf.com
edam.wf.com
proxy-ewpcs.wellsfargo.com
static.wf.com
ceomobilefix.wf.com
api-insights.wellsoneexpensemanager.wf.com
hmc-ecard.wf.com
ceomedia.wf.com
integratedreceivables.wf.com
ilwkeval.wf.com
ceomediafix.wf.com
stories.wf.com
stories-staging.wf.com
entertainment.wf.com
wimcapabilities.wf.com
hmc-ecard.wf.com
ceomobilesit.wellsfargo.com
cloudpages.wf.com
wimcapabilities.wf.com
san-5-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for entertainment.wf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHlDCCBXygAwIBAgIQBteP0RilJsUGnymeK8BloDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwNTMwMDAwMDAwWhcNMjMxMTMwMjM1OTU5WjAfMR0wGwYDVQQDExRlbnRlcnRh
aW5tZW50LndmLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOGX
kLwtZF7NgxcXAQY4sBnDvl19lqzTCY4nL9fdnLHzTFtjakDChsBJlCpWnocYlIzp
TzgnAZ/SvIR6jsohAR2gG1AUNxU88KJoObdIfJklM/beuOb+AXmOe1n2dBQeWUzF
F8gDQoYWTVNT63LAzNAns9iOG1iYA2YbRksN4LLlb26qML50ywleR24Qx07wQvE1
4KzGNturS7gDMiKFANlNLp0Jr4F5FTwDsN4+/vdMSKHvfdjGwEcA/ihq3kCi7UMx
OIn5JUT57z4mKi19piHtbFQdTGW3iSPiIgwRNF1yBcD0Rzr4yQgwQy+D2VcrrVaY
B7PQ0l5VXnbS5M+FV50CAwEAAaOCA40wggOJMB8GA1UdIwQYMBaAFKW01us2xOdr
pt/EZAsBKiAEuGYjMB0GA1UdDgQWBBQ04NnPXlLXKbmvoN1+bE3LoAyz+TAfBgNV
HREEGDAWghRlbnRlcnRhaW5tZW50LndmLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG
Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw
OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4G
A1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy
Q0ExLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDo
PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYhs31aEAAAEAwBHMEUC
IGJRyIXXav+2XxLQhCcFFszufSe1tNB2vF0TTrZHNdRhAiEAuvg2QFLe/C0Zma/p
36E4I1cZ5PofvswM8IryINEXyEYAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc
8AMOeTalmgAAAYhs31bCAAAEAwBHMEUCIQDAv7uYfXyRaJ9LUz+Wc00Y2wYktSx+
3JVGyhuYtjr1KQIgLbm4WQ19tcSJIGpCwF95IqM/Lxb6fhQd/fC6gjF02HsAdgB6
MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYhs31ZqAAAEAwBHMEUC
IGrxCM/vUFfTH8rhjJXcSVoA+jhZx5Ij8rqK37ZRLNfjAiEAyvqscDEO5r6vLOQK
wt7QRQxEQR1jkJLfrBMIue3RVEAwDQYJKoZIhvcNAQELBQADggIBANiw5zAdJCPn
VJLj3d+/9AOd0K+hw6f5eTghsDqTGHx+W3lnlWumNjPXo70ST277ObMSjxpPHial
Yz8PlZRct6wwE7flFh0FVFmM68sZxhVQxgf8OFgcq5BzUzrJmYYq0XZGUElmNhmk
1EMzavPIY7mJ8VajhckWmaKMMLT1nJWfazadCKGlxFk7DGSbZrfJCQJSwvQu3DA5
/gVXEEF5id9RCERsru7UV3piLSm5TiAHoUPAsxctEaSnbQ/tlbBqmcwQlZbRYtEM
zn7xX6/P9NXrHeriqhTzPY0I0IOHzoZBOQ9+vLDF2EzrL3l8WUo+5oQt98ruJ6ho
QSQuGKEkg8b+7+DLwVOQ6riTosl/JOqTJQgTvZo03nkwukJLidzGI2o6Uja0pHrC
l4W5V3ItLbJ2VVkWW8K3A3ywXGgf4g+sf+73ResMz2WKI3aQIy1AgweI1OFqphhr
B9qqjNFNsPT7u089A/VNF344I/rjgSQxpobIRCsxM0LipKBwHC1XwRw7aN/a5pbj
rfm9evaXosAxnhtvrj6P+GfJotf9SO0YG9Qik8+EwVYz1KEQNVSJcbQ/kt9CaL1a
arkfIy0uhH11oamazwl4r4E/g4o2uqqzkfSgyw3Yd3SN3xQefoOzM37ZSa1ZMotl
Og2pI4ZkKR3+NJKezQGvLG86/9RqqA5N
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZeQvC1kXs2DFxcBBjiw
GcO+XX2WrNMJjicv192csfNMW2NqQMKGwEmUKlaehxiUjOlPOCcBn9K8hHqOyiEB
HaAbUBQ3FTzwomg5t0h8mSUz9t645v4BeY57WfZ0FB5ZTMUXyANChhZNU1PrcsDM
0Cez2I4bWJgDZhtGSw3gsuVvbqowvnTLCV5HbhDHTvBC8TXgrMY226tLuAMyIoUA
2U0unQmvgXkVPAOw3j7+90xIoe992MbARwD+KGreQKLtQzE4ifklRPnvPiYqLX2m
Ie1sVB1MZbeJI+IiDBE0XXIFwPRHOvjJCDBDL4PZVyutVpgHs9DSXlVedtLkz4VX
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9094628750181066928034853455445124512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'entertainment.wf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28478358287565437239424629755754318144393432864786018853270623728980074022790253039847901019577847440145311106355680658328233099514650610978200971159503813065978096722721323836026107561096445468275228571053058606572454578787974847831178645894889855364017432259234965041220933294158040733065015571044315956701061922311279185762670129760333470973356384888378066358588694905061968812223707491176522293775848196268943649552942220963750992341570570580999260805251987347123076788259843830792099069178636350519699110279549916235924752608153668945389184299012848135827311706142062925688968861080683576771152909649938668148637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34e0d9cf5e52d729b9afa0dd7e6c4dcba00cb3f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainment.wf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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