test.uiicon.dlt.ri.gov

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:73:f8:8e:85:e5:10:1c:38:d2:6c:14:5b:aa:5c:b9 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test.uiicon.dlt.ri.gov

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:73:f8:8e:85:e5:10:1c:38:d2:6c:14:5b:aa:5c:b9
Serial Number (int): 12565207430214957070614005867463990457
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:fe:20:f7:86:bf:a1:99:99:bf:ec:f5:6b:44:7b:38:d2:cf:49:08
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): d3:8c:e1:53:84:d7:57:2a:aa:4f:93:25:f9:9b:6b:d1:24:c8:59:d8
Fingerprint (sha256): 0d:eb:1c:8d:6b:de:41:7d:ae:d8:cd:bc:12:fc:7a:b6:3c:47:ca:a2:a0:38:2f:b4:cf:1f:00:7e:e2:cf:3e:98

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate test.uiicon.dlt.ri.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.uiicon.dlt.ri.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.uiicon.dlt.ri.gov
www.test.uiicon.dlt.ri.gov

Other certificates including the domain name ri.gov

(limited to 100 certificates)
caringcareers.ri.gov
gwb.ri.gov
healthyrhode.ri.gov
sni.cloudflaressl.com
climatechange.ri.gov
lirs.health.ri.gov
tls.automattic.com
sim.ribridges.ri.gov
innovate.ri.gov
prod.16.slot.cdn.salesforce-communities.com
dwq.health.ri.gov
prod.16.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
www.ricert.ride.ri.gov
prod.16.slot.cdn.salesforce-communities.com
ridmvtestservices-dev.ri.gov
prod.16.slot.cdn.salesforce-communities.com
conversions.vetdata.com
*.sos.ri.gov
sni.cloudflaressl.com
sim.ribridges.ri.gov
prod.16.slot.cdn.salesforce-communities.com
www.abcp.riag.ri.gov
sos.ri.gov
data.ri.gov
prod.16.slot.cdn.salesforce-communities.com
welltesting.health.ri.gov
results.ri.gov
dbr.ri.gov
sni.cloudflaressl.com
ridop.ri.gov
prod.16.slot.cdn.salesforce-communities.com
dorexpressjge.courts.ri.gov
wcompsys.dlt.ri.gov
www.rieermc.ri.gov
www.seow.ri.gov
healthyrhode.ri.gov
sni.cloudflaressl.com
www.barrington.ri.gov
dhs-db-vhsql01.enterprise.ri.gov
prod.16.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
www.policy.dhs.ri.gov
ridmvreservations.ri.gov
cvcapp.treasury.ri.gov
portal2.courts.ri.gov
gwb.ri.gov
tls.automattic.com
vote.ri.gov
fsc.ri.gov
ecert.ride.ri.gov
ssl415607.cloudflaressl.com
prod.16.slot.cdn.salesforce-communities.com
gwb.ri.gov
prod.16.slot.cdn.salesforce-communities.com
sheriffs.ri.gov
debtwatch.treasury.ri.gov
taxportalcsr.ri.gov
www.ri.gov
teleserve.dlt.ri.gov
ffxnonprod.tax.ri.gov
dltweb.dlt.ri.gov
www.earr.dhs.ri.gov
prod.16.slot.cdn.salesforce-communities.com
healthyrhode.ri.gov
prod.16.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
www.rieermc.ri.gov
*.rims.dmv.ri.gov
rifansportal.ri.gov
sni.cloudflaressl.com
dev.api.crushcovid.ri.gov
prod.16.slot.cdn.salesforce-communities.com
support.exceed.ri.gov
www.policy.dhs.ri.gov
*.rims.dmv.ri.gov
dot-ap-gis06.dot.ri.gov
prod.16.slot.cdn.salesforce-communities.com
dwq.health.ri.gov
kidsnet.health.ri.gov
ssl415606.cloudflaressl.com
bhddh.ri.gov
*.dcyf.ri.gov
sni.cloudflaressl.com
test.uiicon.dlt.ri.gov
adfs.ri.gov
www.vapadmin.doc.ri.gov
*.prod.oneoutdoor.egov.com
vueworksprod.dot.ri.gov
ssl860942.cloudflaressl.com
mail.courts.ri.gov
innovate.ri.gov
cmars.doc.ri.gov
voice.riag.ri.gov
prod.16.slot.cdn.salesforce-communities.com
fdus-33.freshdesk.com
sni.cloudflaressl.com
prod.16.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for test.uiicon.dlt.ri.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIItDCCBpygAwIBAgIQCXP4joXlEBw40mwUW6pcuTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjIxMjIxMDAwMDAwWhcNMjMxMjIyMjM1OTU5WjAhMR8wHQYDVQQDExZ0ZXN0LnVp
aWNvbi5kbHQucmkuZ292MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
02PbrG/itO4Z2ovEA1HIjgXFrjBCPLhab7zydyDriZc2lMcNssJRanllXvvsiD1E
dIN/e1I016oYvy9l6zgQDWyItKCOwZxj/izUzWizaXPFwG8chh9rt0B+vZgIosob
sFxirnOLaYeBlUYLL/ntpknLhMI/XVnEOwSQu1UaIIiSJqgUzH5F86TVvGxEgAZj
8dGI64F2eeiLanhIUw4Ayr9hpzsK+anO5Os/CBcStmsUZOyA3skj4diNxX+yEzeb
XzQE3nqVgd3rIhyHHSwTnmA273su1pcmd5pUNtvPOllaYGEr69TBMmXkdsR+TXpO
/HNYENNsRF1ypEDcRCRdhEb68Bj8uvYGS+cez4iN4/dtUTFfJhEBzNU6nQZ13mQ/
REuYFRRdUn5spdwAh5XAvk+UDgVtKgdiBGum1CfNrUpNOr6V55BpJSUz3OCHq7ji
NVGrrwGDwiq6vLuRo19w9BKiaPrKJkbXpAvOg48bnR2YE+xzRBSHzwNd2KlGd8eH
/ycWorZCZla4Zcqtrkh5ZP09wTIurjEm+o24QQ9zsQy+/Qc3h0kVlqNrESLQ7Z6O
JgWdgV3rAPzrzoatMrmPoKBUYBdVzLTcxnjZkvwxndYnPgezzifIH5kqTaPFPKof
ATSNbnkT0BrzzZ7AEomqh7sNeeTNtX6q3YE/dTVEdvMCAwEAAaOCA6swggOnMB8G
A1UdIwQYMBaAFKW01us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBTL/iD3hr+h
mZm/7PVrRHs40s9JCDA9BgNVHREENjA0ghZ0ZXN0LnVpaWNvbi5kbHQucmkuZ292
ghp3d3cudGVzdC51aWljb24uZGx0LnJpLmdvdjAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG
Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw
OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4G
A1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy
Q0ExLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCt
9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYU16iEbAAAEAwBHMEUC
IQCLMpxARI+aJkvOytPMmDDSbhgJHAbz54hUn9j5domoLgIgGjUo2v+RemcTDKbx
EZJQtSlDFpPiJnsgqMDlR8OSGLgAdwC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSe
HQmBJe20mQAAAYU16iEKAAAEAwBIMEYCIQDBYnO1wpWqk3zPgIqFzLmVAV72YoEf
LySeWE6RmR+F1AIhAJEcEnfW6G0d+KdWmo8EuUxIJjHQWh73uQ6Ra+nbwixqAHUA
O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGFNeohEwAABAMARjBE
AiBxravy03XE2ZDjV+9sDsnXeD+0DIs+PjjyezPO6HsM9QIgLFM1uE5ppaT2ugly
4Hq3cMArTZs7HWgQHZ5D1k90lGEwDQYJKoZIhvcNAQELBQADggIBAM70JDM81Vwd
OPEgGsKIWPHzAX+90fDK9i4416jUP4hygK29Mxas0iqdmhHmymta6NAwIwmVWntp
O8SfR0qQwNYkb8jjJHC/X9KUBtHPL5GdY83e1VjOtpwfAIdnl8fs0DdzhqY2hxhO
wqe00cVaT+jmebOh4a91tRG/1iCjFwwVWpv3NcDO9T5eOo/GIQWoJUlLeEjmdaVC
WJporM6Y+3EMmEHUNsOXO6wu27azDSSIJO6iBE0lg5ZPNDj9I8aeJneODiW1shBL
HTmtGeEGfCJ3sP104zY1RF4LSQXnjj3J8ugck8IbseYFghRTy8NecKuOaVu4QYd8
Yk7b8CCoLjgNY5eI8YUuvP76pi1/XY6CVDmVKUs1+YQv1uoBc0AWRV01PSw+la3U
9qnruyrXSMr/rPQv+wLmKHv9W2XSOo0Si2Trix/USIRaBs96yVTqOx2nhLeI1is1
NxTLC/NouV1TKYptBLINAfUeuQ1Naf2MDd5DaCTf5bontcSImguoXSzOC++skzXL
w5x6UHA7H0vxbt/ezzLW/PGjZuVGXvgtYgQrSzH8MzoSLYIqco7wS9C7YtpolRkR
6kzd0j0r+mJzX+TAgrZH7BmIP3x9s0hyYfnOYUHxv9kBofw4p5VoWMo9nm3bflPN
aKkWSH18GzaHbOY3jxjI9dETaXxSVJrV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA02PbrG/itO4Z2ovEA1HI
jgXFrjBCPLhab7zydyDriZc2lMcNssJRanllXvvsiD1EdIN/e1I016oYvy9l6zgQ
DWyItKCOwZxj/izUzWizaXPFwG8chh9rt0B+vZgIosobsFxirnOLaYeBlUYLL/nt
pknLhMI/XVnEOwSQu1UaIIiSJqgUzH5F86TVvGxEgAZj8dGI64F2eeiLanhIUw4A
yr9hpzsK+anO5Os/CBcStmsUZOyA3skj4diNxX+yEzebXzQE3nqVgd3rIhyHHSwT
nmA273su1pcmd5pUNtvPOllaYGEr69TBMmXkdsR+TXpO/HNYENNsRF1ypEDcRCRd
hEb68Bj8uvYGS+cez4iN4/dtUTFfJhEBzNU6nQZ13mQ/REuYFRRdUn5spdwAh5XA
vk+UDgVtKgdiBGum1CfNrUpNOr6V55BpJSUz3OCHq7jiNVGrrwGDwiq6vLuRo19w
9BKiaPrKJkbXpAvOg48bnR2YE+xzRBSHzwNd2KlGd8eH/ycWorZCZla4Zcqtrkh5
ZP09wTIurjEm+o24QQ9zsQy+/Qc3h0kVlqNrESLQ7Z6OJgWdgV3rAPzrzoatMrmP
oKBUYBdVzLTcxnjZkvwxndYnPgezzifIH5kqTaPFPKofATSNbnkT0BrzzZ7AEomq
h7sNeeTNtX6q3YE/dTVEdvMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12565207430214957070614005867463990457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.uiicon.dlt.ri.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862396247981253469292601705919894409324937190209796923155027251877724219477015765717246090811979805643734216536126060900778874473196920402068499924180922114604815676744566436701379902544625124444383162926580089956917917938770751214427283057509159534587506385239131541738658971544830528944131408467224931777544509381655108412693188434255486462021576989739316748562697672588751133183666777026397859124606933289231525741598704770108950769182792648266460047307075123222129766617073761423829927510593586413719892677070157450105209431979911568106896020080884013503273406738502035378711758074710908303162876246069864715975386440082120798671612953464128807647149964579883886931173253973907017805448165060048772009206093109172715566822692360406315336765150464896678353912746189252253392931405355352361839559657574843930215249931799796073882859217349548653884526335378939758625099847966949912827549980564352953035870076214218334905790024781633983828691358407381789638756029623526268689748331893137202666345931466575326062713839066577725696979709717311486565866120075289627395840593673847462869572789612566577113796949424034118398970649746088975814618120417628525241212635350695764504097188460475687812307361849956603160446272102810785692284659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbfe20f786bfa19999bfecf56b447b38d2cf4908
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.uiicon.dlt.ri.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.uiicon.dlt.ri.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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