deals-dev.keurig.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 02:f9:fe:3a:b5:85:05:05:cb:a4:d2:a2:fd:07:98:d0 was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=deals-dev.keurig.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:f9:fe:3a:b5:85:05:05:cb:a4:d2:a2:fd:07:98:d0Serial Number (int): 3956494292795354807343393653458966736
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 05:db:98:6e:0f:71:43:52:c9:6f:f0:10:f4:e8:b1:81:f2:37:bb:f7
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 6b:b8:c2:e2:18:35:48:73:f6:e9:ff:93:da:d4:5b:49:27:92:1a:d6
Fingerprint (sha256): 16:3e:a2:9c:0a:95:8b:5c:04:92:0b:4b:33:00:93:51:00:63:79:7c:f8:b3:2e:fa:5e:1d:75:ae:60:67:e4:4f
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate deals-dev.keurig.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for deals-dev.keurig.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
deals-dev.keurig.com
Other certificates including the domain name keurig.com
(limited to 100 certificates)
www.greenmountaincoffee.com
surprise.keurig.com
www.greenmountaincoffee.com
oa.gmcr.com
sign.oakslab.com
www.mykeurig.com
www.greenmountaincoffee.com
www.kevinhcross.dev
cdp-krgdevapp.keurig.com
www.tvattkalendern.app
test-jira.keurig.com
www.harshchandra.com
reg-testing.keurig.com
www.keurig.com
www.mykeurig.com
www.jahnavitapes.in
*.keurig.com
fs.keurig.com
www.greenmountaincoffee.com
login-perf.keurig.com
neuron-uat.keurig.com
login.keurig.com
transfer.keurig.com
login-dev.keurig.com
gmcruccx1-ms.keurig.com
www.gmcr.com
leads.commercial.keurig.com
www.gmcr.com
www.greenmountaincoffee.com
rds.keurig.com
fs2.keurig.com
www.keurig.com
hibody.app
forum.isthmus.com
*.iot.keurig.com
brewer.neuron.keurig.com
transfer.keurig.com
www.mykeurig.com
login.keurig.com
login.neuron.keurig.com
www.gmcr.com
*.keurig.com
www.keurig.com
redacaoomega.com.br
www.harshchandra.com
GMCRPUB-ms.gmcr.com
www.keurig.com
leads.commercial.keurig.com
mtl-token.keurig.com
login.neuron-uat.keurig.com
service.dhanvarsha.co
email-preferences.keurig.com
login.neuron-uat.keurig.com
login.neuron-uat.keurig.com
nexus-qa.keurig.com
crowd.keurig.com
www.keurig.com
gmcrvcse.gmcr.com
gmcruccx1-EC-ms.keurig.com
gmcrvcsc.gmcr.com
login-ist3.keurig.com
email-preferences.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
*.neuron-dev.keurig.com
dev-login.neuron-dev.keurig.com
www.yasinseemeshine.com
app.fusionsushi.es
www.greenmountaincoffee.com
GMCRCUP.gmcr.com
sblqa2.keurig.com
jira.keurig.com
mikmak.keurig.com
webmail.gmcr.com
www.mykeurig.com
game.jinro.chat
www.mykeurig.com
upload.neuron.keurig.com
coreserver.keurig.com
deals-dev.keurig.com
kconnect-dev.keurig.com
dev-login.neuron-dev.keurig.com
www.keurig.com
login.keurig.com
dev-auth.neuron-dev.keurig.com
www.greenmountaincoffee.com
confluence.keurig.com
bevpod-prod.keurig.com
agency.umrahmarket.com
peopledev.keurig.com
*.keurig.com
csrm.keurig.com
brewer.neuron.keurig.com
transfer.keurig.com
bevpod-otest.keurig.com
login.keurig.com
gmcrvcse.gmcr.com
www.2alan.com
game.braille.hadley.edu
surprise.keurig.com
www.greenmountaincoffee.com
oa.gmcr.com
sign.oakslab.com
www.mykeurig.com
www.greenmountaincoffee.com
www.kevinhcross.dev
cdp-krgdevapp.keurig.com
www.tvattkalendern.app
test-jira.keurig.com
www.harshchandra.com
reg-testing.keurig.com
www.keurig.com
www.mykeurig.com
www.jahnavitapes.in
*.keurig.com
fs.keurig.com
www.greenmountaincoffee.com
login-perf.keurig.com
neuron-uat.keurig.com
login.keurig.com
transfer.keurig.com
login-dev.keurig.com
gmcruccx1-ms.keurig.com
www.gmcr.com
leads.commercial.keurig.com
www.gmcr.com
www.greenmountaincoffee.com
rds.keurig.com
fs2.keurig.com
www.keurig.com
hibody.app
forum.isthmus.com
*.iot.keurig.com
brewer.neuron.keurig.com
transfer.keurig.com
www.mykeurig.com
login.keurig.com
login.neuron.keurig.com
www.gmcr.com
*.keurig.com
www.keurig.com
redacaoomega.com.br
www.harshchandra.com
GMCRPUB-ms.gmcr.com
www.keurig.com
leads.commercial.keurig.com
mtl-token.keurig.com
login.neuron-uat.keurig.com
service.dhanvarsha.co
email-preferences.keurig.com
login.neuron-uat.keurig.com
login.neuron-uat.keurig.com
nexus-qa.keurig.com
crowd.keurig.com
www.keurig.com
gmcrvcse.gmcr.com
gmcruccx1-EC-ms.keurig.com
gmcrvcsc.gmcr.com
login-ist3.keurig.com
email-preferences.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
*.neuron-dev.keurig.com
dev-login.neuron-dev.keurig.com
www.yasinseemeshine.com
app.fusionsushi.es
www.greenmountaincoffee.com
GMCRCUP.gmcr.com
sblqa2.keurig.com
jira.keurig.com
mikmak.keurig.com
webmail.gmcr.com
www.mykeurig.com
game.jinro.chat
www.mykeurig.com
upload.neuron.keurig.com
coreserver.keurig.com
deals-dev.keurig.com
kconnect-dev.keurig.com
dev-login.neuron-dev.keurig.com
www.keurig.com
login.keurig.com
dev-auth.neuron-dev.keurig.com
www.greenmountaincoffee.com
confluence.keurig.com
bevpod-prod.keurig.com
agency.umrahmarket.com
peopledev.keurig.com
*.keurig.com
csrm.keurig.com
brewer.neuron.keurig.com
transfer.keurig.com
bevpod-otest.keurig.com
login.keurig.com
gmcrvcse.gmcr.com
www.2alan.com
game.braille.hadley.edu
Certificate
The complete raw certificate details for deals-dev.keurig.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKjCCBBKgAwIBAgIQAvn+OrWFBQXLpNKi/QeY0DANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjE1MDAwMDAwWhcNMjQwNjE1MjM1OTU5WjAfMR0wGwYDVQQDExRkZWFscy1k ZXYua2V1cmlnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVO WBvKH5Xp56N1G8cYt2M9i0agZDjR5JATqUfZgNZAtvWhdGQroi0wn7LOYTaeDCk4 KOgN3cM+6X8lLsY77FlJYOCiujb2eoO7AuPdL3ePT8wTAEy/ov2ekabtZ57DXM+6 UsE6H7fiLyggqNCGa4Vso8Hy/iFxg3EGK/3jHRp59U9Rp1Xs8aeyI5VzRhppv5yW nJYwdTN4rjLzK0AbduAW1sJrcprKZRQ7gbLBrKPh+a9sYiJO9RrDAjcgcqax0UIc JFmUGGJatHbfS3zZMRElv1vzE4ZVkNZbd/0qRjb0e3EmWy6mJJP+4knWttsVzdUM 4/4Xk9GqGgq7AG/2cc0CAwEAAaOCAiMwggIfMB8GA1UdIwQYMBaAFKW01us2xOdr pt/EZAsBKiAEuGYjMB0GA1UdDgQWBBQF25huD3FDUslv8BD06LGB8je79zAfBgNV HREEGDAWghRkZWFscy1kZXYua2V1cmlnLmNvbTA+BgNVHSAENzA1MDMGBmeBDAEC ATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYD VR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1 c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6 Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy NTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy Q0ExLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4ICAQDD9rxA+K0YfVxzqan45Fcu2b7+s9oMTC02nXTgtwFzbKLB ap1Yv/3w/znaCXgkiZdHp18Yd7grSrYudXXE0WrQFmP5bVbTYaeGQ+HQPAoUZ7iM emKnmIbSdIjLqb1PgKi9+FGkouTrzmyOMdkagcYO0Smb8d717wft70OX9CTGoFam 5lL4gEI88GJ3KFk3xCFxmGGUpup5mxrSMbGg8oWteNfvfdtBXYlFELOtF9+J1gDy OJNc+FLjDoxkJSOZcj4qvbZdnVTlfc7NZVIbRnk1cJBRZlLi1TbZXtsFnFotbGPz t150ppCInkf+wepZbidsvfuie2J75ddxWBmtVHfWV5P+Z2OYwn0c+w7AQu5vhOis OMMDs7r1v2aKw5ET+jTtHj17k2SYLSX/nOjZ3hEebzmr8h4683z6YXnujpyKcusB 86BZqs/zBjAcSz5MV01dv+VaJxa8xnSE/YR6P4FNMcnGn4ttlT6Qj1LKvTQ5+PbC bQNiCCHd96QkHphCAEaFAs4CHLOAGWxm8J6wCkRfK/ZlbqaARgA0xRX8m6Vc5Q4Q LUDBJLksrvkV6yXRNmBnlGvqwjswHDPbV90jd8t97he53A8dStiwNe4oNyxyX/sx pQ5WGqpeRl0xEkYG/m+f/MrgF30UoYGC09XH5LW0KImG8b2VstDcYBom+XN8mA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU5YG8oflenno3Ubxxi3 Yz2LRqBkONHkkBOpR9mA1kC29aF0ZCuiLTCfss5hNp4MKTgo6A3dwz7pfyUuxjvs WUlg4KK6NvZ6g7sC490vd49PzBMATL+i/Z6Rpu1nnsNcz7pSwToft+IvKCCo0IZr hWyjwfL+IXGDcQYr/eMdGnn1T1GnVezxp7IjlXNGGmm/nJacljB1M3iuMvMrQBt2 4BbWwmtymsplFDuBssGso+H5r2xiIk71GsMCNyByprHRQhwkWZQYYlq0dt9LfNkx ESW/W/MThlWQ1lt3/SpGNvR7cSZbLqYkk/7iSda22xXN1Qzj/heT0aoaCrsAb/Zx zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3956494292795354807343393653458966736 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deals-dev.keurig.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24907579030399949675172074572233557500119931987622729246799426609042462247293348546831061550982162007713445293271775885243521922209807589347027868658557193972242345662388018015870582921691212627289519145796064485388997013490760352448216482995940573112613498791564521935021598256844323552027867572574757429701862437139412129239034269431737172144987464637790277632431075915959757388942205857750737220505588009765302128942013029004827113124629486317897589824287126914014047252885433139213165430871957027379946947861445957242032977656408119936665688789168160362945668486086412338784461125125312267341378870874802522321357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 05db986e0f714352c96ff010f4e8b181f237bbf7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals-dev.keurig.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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