www.mojeek.com

- Mojeek Limited -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:20:38:46:57:70:68:a8:00:67:09:c7:95:21:de:9a was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Mojeek Limited

Organization: Mojeek Limited
Locality: Croydon
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:20:38:46:57:70:68:a8:00:67:09:c7:95:21:de:9a
Serial Number (int): 12130346849507627603744696967542988442
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:56:2f:0d:ee:96:2c:8e:fa:90:0f:a6:fc:77:41:f2:da:1d:bb:53
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 20:4a:28:eb:37:25:48:b9:e8:64:6c:15:ad:81:fb:2c:eb:95:bf:93
Fingerprint (sha256): 18:4d:14:25:bd:2b:17:0b:bc:eb:e8:40:7b:70:5c:2d:78:61:b0:64:1e:4f:15:00:d3:2f:53:5f:95:96:55:9f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.mojeek.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mojeek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mojeek.com
www.mojeek.co.uk
www.mojeek.de
www.mojeek.fr
mojeek.com
mojeek.co.uk
blog.mojeek.com
accounts.mojeek.com
api.mojeek.com
forcesafesearch.mojeek.com

Other certificates including the domain name mojeek.com

(limited to 100 certificates)
systemstatus.rrc.ca
www.mojeek.com
status.hpiinc.com
status.digitary.net
systemstatus.rrc.ca
status.stability.ai
status.cofh.org
statusp.dotdigital.com
stg.dotdigitalstatus.com
statuspage.vantage.online
status.fmgsuite.com
site-status.motor.com
systemstatus.rrc.ca
systemstatus.rrc.ca
status.esafetysystems.com
www.mojeek.com
www.mojeek.com
status.ssactivewear.com
status.reliancenetwork.com
systemstatus.rrc.ca
systemstatus.rrc.ca
status.crewbuilder.ca
caloes-status.ravemobilesafety.com
status.c9cg.com
status.esafetysystems.com
systemstatus.rrc.ca
www.mojeek.com
status.ssactivewear.com
systemstatus.rrc.ca
status.stability.ai
status.crewbuilder.ca
status.reliancenetwork.com
stg.dotdigitalstatus.com
systemstatus.rrc.ca
status.internal.clear.co
status.sabbagradiologos.com
status.clear.co
systemstatus.rrc.ca
status.platform.creditxpert.com
status.myfundingchoices.com
systemstatus.rrc.ca
statusp.dotdigital.com
status-ca-gtassurancetool.gtil.gt.com
status.daydev.lol
status.mojeek.com
status.explaineverything.com
systemstatus.rrc.ca
status.powerdmarc.com
status.cofh.org
status.daydev.lol
site-status.motor.com
status.fmgsuite.com
status.snapcraft.io
status.powerdmarc.com
systemstatus.rrc.ca
status.myfundingchoices.com
systemstatus.rrc.ca
status.mojeek.com
status.statusiq.com
status.stability.ai
status.clear.co
status.digitary.net
www.mojeek.com
systemstatus.rrc.ca
systemstatus.rrc.ca
status.hpiinc.com
systemstatus.rrc.ca
systemstatus.rrc.ca
statusp.dotdigital.com
status.esafetysystems.com
systemstatus.rrc.ca
status.snapcraft.io
stg.dotdigitalstatus.com
systemstatus.rrc.ca
status-ca-gtassurancetool.gtil.gt.com
status.internal.clear.co
systemstatus.rrc.ca
status.cofh.org
status.landell.org
systemstatus.rrc.ca
systemstatus.rrc.ca
stg.dotdigitalstatus.com
status.c9cg.com
status.landell.org
systemstatus.rrc.ca
status.internal.clear.co
www.mojeek.com
caloes-status.ravemobilesafety.com
status.mojeek.com
status.jucy.cloud
status.sabbagradiologos.com
systemstatus.rrc.ca
status.stability.ai
www.mojeek.com
caloes-status.ravemobilesafety.com
systemstatus.rrc.ca
systemstatus.rrc.ca
systemstatus.rrc.ca
systemstatus.rrc.ca
status.clear.co

Certificate

The complete raw certificate details for www.mojeek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXzCCBkegAwIBAgIQCSA4RldwaKgAZwnHlSHemjANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw
MTE1MDAwMDAwWhcNMjUwMTI4MjM1OTU5WjBRMQswCQYDVQQGEwJHQjEQMA4GA1UE
BxMHQ3JveWRvbjEXMBUGA1UEChMOTW9qZWVrIExpbWl0ZWQxFzAVBgNVBAMTDnd3
dy5tb2plZWsuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXCj
dAUzn4q5NG4GNhbec/o5XpD6+8NOkHHRnEcGLocHEf5KPCXhiUZcon2HO5bxNSlG
JnFj5uf5SzSohfI7Ns79weobWlr9oFhk7tLxZCxF1Im7y62LC3umPGtkIWipGTGm
9T3ySeBKZNTasnWQ4oBW42irSBmKnsZX30BPJ7KQoF6GQJrA4EzpJEDvKLcwDd5e
WUy5h0wfB6U9d3hCAriqcTJDqdI3xb+vcU0yUcJeMQvlTyYddbGrzD29xNqxVT8h
W0dpoI1/VllzK7SpFdj+TvPhhOno8HbNc4XDn3sSbQDZLu/66p7u8oU+W2gmCy+2
QjRhrC4FFOEkqwZAhwIDAQABo4IEKTCCBCUwHwYDVR0jBBgwFoAUdIWAwGbH3zfe
z70pN6oDHb7tzRcwHQYDVR0OBBYEFA1WLw3uliyO+pAPpvx3QfLaHbtTMIG3BgNV
HREEga8wgayCDnd3dy5tb2plZWsuY29tghB3d3cubW9qZWVrLmNvLnVrgg13d3cu
bW9qZWVrLmRlgg13d3cubW9qZWVrLmZyggptb2plZWsuY29tggxtb2plZWsuY28u
dWuCD2Jsb2cubW9qZWVrLmNvbYITYWNjb3VudHMubW9qZWVrLmNvbYIOYXBpLm1v
amVlay5jb22CGmZvcmNlc2FmZXNlYXJjaC5tb2plZWsuY29tMD4GA1UdIAQ3MDUw
MwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDBIoEag
RIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNS
U0FTSEEyNTYyMDIwQ0ExLTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDov
L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEy
NTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIB
bgSCAWoBaAB1AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjQ0F
/BwAAAQDAEYwRAIgSrwRwYO4mteL8Dr1TtlOLeNhctDVZbRw7YBz99m+QiECICwS
yjkAX/9tyz9S2zi4K5c0CyUtVB3Y1tMTRZNmfA0PAHcAfVkeEuF4KnscYWd8Xv34
0IdcFKBOlZ65Ay/ZDowuebgAAAGNDQX8HAAABAMASDBGAiEAuEDkhNZ8O7werCyX
NL6wRToNzj7dd2lmqOGfG31/aUACIQDBjTiqUrx8b6yeSJQPg8kkCPlWe6ip75S9
HLieaLSungB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjQ0F
/EUAAAQDAEcwRQIgWz/SGkYHAhohfMXH064vSzkKc0HJ1vSkk7PePdtk8OQCIQDp
Ri4Jj4vv6Am8eQfb6CPTioQQMsBVbF5EnYJd1DDKyTANBgkqhkiG9w0BAQsFAAOC
AQEAFsf+RvHPT0jpR9DFbMhEzAtPcOzwsjg00GY82Gfll1g82h5XruGdoPud57QQ
48KnISMZ2YJNxuQFV5LRDFGt+GADGHfZYRtPN0kjIw2fEwj51wKoQhHRKHFxGrLn
Vkg/XrmzaioVAq8xPBPqa9B/AlTa/udquSmtKRRlZAnl1jbZ6dS5MSN2YZrjV1ej
zH9Qj8ecWaOOiRFeY/cdV6fWOdsmycPsL75hcUd8H7JsGu5mdG7X1CNQBJ9vkjp6
RefrmZsjz+GFSIzbav3Yhrbg0ezgNeDYR/VHru6kmk6hZXAeKMD2pm5q49Gn27kc
ixUyzXDTyZiXD35r4CGB8gPLYg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXCjdAUzn4q5NG4GNhbe
c/o5XpD6+8NOkHHRnEcGLocHEf5KPCXhiUZcon2HO5bxNSlGJnFj5uf5SzSohfI7
Ns79weobWlr9oFhk7tLxZCxF1Im7y62LC3umPGtkIWipGTGm9T3ySeBKZNTasnWQ
4oBW42irSBmKnsZX30BPJ7KQoF6GQJrA4EzpJEDvKLcwDd5eWUy5h0wfB6U9d3hC
AriqcTJDqdI3xb+vcU0yUcJeMQvlTyYddbGrzD29xNqxVT8hW0dpoI1/VllzK7Sp
Fdj+TvPhhOno8HbNc4XDn3sSbQDZLu/66p7u8oU+W2gmCy+2QjRhrC4FFOEkqwZA
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12130346849507627603744696967542988442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Croydon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mojeek Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mojeek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23914583747707514447412638727665054112687461182453263692103633027896311226225752496367453946519835596938727036570507375012109556111890149966330313895359387606280457301610054397346923220315937321149321039928092352242191994545348433359406351331612697369250964423321068519679337320704146081014555983478059224658345623628580269620878167751882674407432894822187199490815697274146650517431189696055617335550385519753298133601285246687334479919773705253135921665731806635661090447457017980659399404486448948770305405953718337085631264866847554001916980124919552537697150240488869346786413788367369073204496476075804020064391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d562f0dee962c8efa900fa6fc7741f2da1dbb53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojeek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forcesafesearch.mojeek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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