tst.milo.vgz.nl

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:23:d5:c8:51:68:e0:da:26:35:00:ba:e3:7a:ea:8d was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tst.milo.vgz.nl

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:23:d5:c8:51:68:e0:da:26:35:00:ba:e3:7a:ea:8d
Serial Number (int): 9490662384616286650997386686773258893
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c9:aa:15:0c:62:9e:e4:80:53:62:d0:5c:76:c3:8e:3c:76:4e:69:d5
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 39:be:c1:dd:a1:e0:7e:22:a4:ab:9d:03:29:cf:d9:c2:37:48:5b:84
Fingerprint (sha256): 11:86:33:ab:75:de:c6:4c:58:e4:40:3f:5d:a6:ab:e3:05:2d:28:0a:b7:7e:43:aa:a6:fa:9b:89:1e:ee:5e:5c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate tst.milo.vgz.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tst.milo.vgz.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tst.milo.vgz.nl

Other certificates including the domain name vgz.nl

(limited to 100 certificates)
feedback.vgz.nl
mail.vgz.nl
zosbcsa.vgz.nl
www-t3.vgz.nl
acc.identity.vgz.nl
e-mail.vgz.nl
beheer.athena.ot.vgz.nl
gateway.tst.lzm.vgz.nl
apigateway.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
lemon.vgz.nl
agent.athena.vgz.nl
*.p.ase-sc.azure.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
at.zorgapp.vgz.nl
acc.mijn.vgz.nl
zkbap.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
azr.vgz.nl
www-t1.vgz.nl
onegini.br.vgz.nl
unive.athena.ot.vgz.nl
mijn.vgz.nl
services.vgz.nl
plan.vgz.nl
mail.vgz.nl
developer.pr.zorgapp.vgz.nl
info.vgz.nl
onegini.acc.vgz.nl
www.vgz.nl
bellenmetsam.vgz.nl
acc.sts.vgz.nl
igs-za-api.vgz.nl
hybrid.vgz.nl
www.vgz.nl
ucfewebext02.vgz.nl
ot.app.vgz.nl
tst.milo.vgz.nl
apollo.ot.vgz.nl
apollo.ot.vgz.nl
app.vgz.nl
wfo15app-acc.vgz.nl
wfo15app.vgz.nl
www2.vgz.nl
acc.xconnect.vgz.nl
webwerken.vgz.nl
gateway.acc.lzm.vgz.nl
portal.vgz.nl
apigateway.vgz.nl
ucaccess02.vgz.nl
zkbap.vgz.nl
tst.mijn.vgz.nl
prodstaging.mijn.vgz.nl
st.zorgapp.vgz.nl
fs.vgz.nl
e-mail.vgz.nl
info.vgz.nl
aux.vgz.nl
transactions.vgz.nl
e-mail.vgz.nl
premie.vgz.nl
acc.xconnect.vgz.nl
lemon.vgz.nl
pr.athena.vgz.nl
vpn.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www2.vgz.nl
mxapp.vgz.nl
sts.vgz.nl
www.vgz.nl
developer.at.zorgapp.vgz.nl
sam-pub.vgz.nl
inloggen.vgz.nl
mijn.vgz.nl
iwlz.vgz.nl
api.vgz.nl
www.tools.vgz.nl
ucfewebext02.vgz.nl
sftp.vgz.nl
e-mail.vgz.nl
inloggen.vgz.nl
mijn.acc.vgz.nl
accmft.vgz.nl
ucfewebext02.vgz.nl
gateway.pls.lzm.vgz.nl
sts.vgz.nl
sam-aut.vgz.nl
inloggen.vgz.nl
www-t4.vgz.nl
pub.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
inloggen.vgz.nl
zosbcsa.vgz.nl
www-t4.vgz.nl
voltage-pp-0000.vgz.nl
san-11-s51.tlsprovisioning.exacttarget.com
www.vgz.nl
mxapp-test.vgz.nl
tst.inloggen.iza.nl
pls.mijn.vgz.nl

Certificate

The complete raw certificate details for tst.milo.vgz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHizCCBXOgAwIBAgIQByPVyFFo4NomNQC643rqjTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwMzA0MDAwMDAwWhcNMjMwOTA0MjM1OTU5WjAaMRgwFgYDVQQDEw90c3QubWls
by52Z3oubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40naMnrAR
DwZ2TJYIWZMWvy+Y1RKVO7IVFSqvbk4QW5H/Dy+3ya4r2cMqCQMWXT2gp/N7BYLR
MuRGiBBkoJJCmA6DKTYAhm2uesmp9S6ZNPTWCyPeWWCmChD+DsbT1bcjiPy/p+JC
yaroPergGroXy+cqouU8L4vgvs5m1Kwm47rp8VfX5LgDNM5E4HTmr1dxFOZfS5AK
OPYlw/e4oiKBoH/8fw/tnKmb0sfJdt9mkDf9VkKAjyFYWvIEL8ydQF+GbrbSTj7H
BFmzvN8GBfphkYrYUfLodV8yrNdylxX18hyVi/mWTCkk4t4GNaIIR5KDt8tFqDb8
gSq7kW4vPGu5AgMBAAGjggOJMIIDhTAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQL
ASogBLhmIzAdBgNVHQ4EFgQUyaoVDGKe5IBTYtBcdsOOPHZOadUwGgYDVR0RBBMw
EYIPdHN0Lm1pbG8udmd6Lm5sMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw
MjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1
c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwPgYDVR0gBDcwNTAz
BgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20v
Q1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp
Z2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu
Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAkG
A1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AOg+0No+9QY1MudX
KLyJa8kD08vREWvs62nhd31tBr1uAAABhqxJT8YAAAQDAEgwRgIhAL231ASn7qPo
+HQKU6Gush9jt86/gloCN06wlHqtNDg6AiEAyr2fRewmmAZi865s5ceJAdcj+iuY
zKsqEoMBIYTgJQEAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAA
AYasSU/SAAAEAwBHMEUCIF+YSdtAE3RvWNMwrl7p+1uFpoiwNygKraRLK8QmzRAe
AiEAr5Sre8bRoGWWn1sIsLza/W2EFcTC4JS/ytw5AXWzuAwAdgC3Pvsk35xNunXy
OcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYasSU+lAAAEAwBHMEUCIQCI8lYI1yIw
7lJSiBLje2uftqdzet0Q200zreqzEhNckgIgbLXlRdcic0LSOsG7rwTaoaFSfHsj
QQzO4abO8SUgVMUwDQYJKoZIhvcNAQELBQADggIBAEen3oT7e4Cn09qa4qmxwjIh
T53XlGtY6kek8KwJAc3RAmb7e5V3IReqNkx/8cA5fSeu8eJks0FGXn+j8ynumhWn
chG/7NtJ9oSBX9QVWh0EeGpghrtCxHGNLWwBW2/q233FzE2ccL+1SsHHGaWpH1sY
voZ88HIhtnExkjCiMICUQwGWWjCd+QZXAYofLYIpCVQ2oRFCvTZ4kcLFlR09jTh0
CSHVh7jzB5fhCeW6tIqp5SBqWhbz2BSo4mJ4YuYsYxvUhfcCKkaA/4Rvr9oSPu6p
HKjt3CSejeHsuyFqIHuHOMJvNSu1hEId66WDx2nWjHa0k+bXxMMakKaf9lsfUPMs
yzan7UYlqGbbIOX2OA0C+9XgWj7MKVEKdmc/6vJuP4rgAb72iVSKyPo6LfvQk0Ir
w+8gES9ys8C8WNP1C5twu4nLQzOZ9oR2wChBvt8Z9BwhrhKTPR/TFv650KhqrhYW
GMAYDKEBbVzLNtLlKC1rQ/p+EE6QGVqifEK+PcIDEKcoq6ahn772tA6Oof9jIYDh
Xgv/cW/jfrvJDFQSl8FOszmStGQgXpGlrF7l3ssbE5DS87gcrsskzLunPhO6PQ54
Ip9o5ilY+en5Npyli9jK/nI64TnH2r/yz3pdNpYORDGe4RlcyhiyiBHpuwzXdYJ1
3yzzNfO68Txjaw9SpObG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNJ2jJ6wEQ8GdkyWCFmT
Fr8vmNUSlTuyFRUqr25OEFuR/w8vt8muK9nDKgkDFl09oKfzewWC0TLkRogQZKCS
QpgOgyk2AIZtrnrJqfUumTT01gsj3llgpgoQ/g7G09W3I4j8v6fiQsmq6D3q4Bq6
F8vnKqLlPC+L4L7OZtSsJuO66fFX1+S4AzTOROB05q9XcRTmX0uQCjj2JcP3uKIi
gaB//H8P7Zypm9LHyXbfZpA3/VZCgI8hWFryBC/MnUBfhm620k4+xwRZs7zfBgX6
YZGK2FHy6HVfMqzXcpcV9fIclYv5lkwpJOLeBjWiCEeSg7fLRag2/IEqu5FuLzxr
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9490662384616286650997386686773258893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tst.milo.vgz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23331631328128651671887606567598309359181299149606863521444439854998688678897480767133319142893745302462574564850873784120340067341556801464075111871529701411200000599869974284005021546711866968095988904240056304459631352542273516671615282580296984123916608729704242314808408618546015452122107714049426277574851778564041343804824218754371979587570126634228441634557404205749113415341094463608143279908074577074422949966721052531834441419457020242877463613742701546252802575219583705681968356728638713478886244949386236592047615823259653416644855759097945172348730091428553193542207145073895468893678563479538395540409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9aa150c629ee4805362d05c76c38e3c764e69d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.milo.vgz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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