prod.fis.office-int.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:df:dc:fc:dc:93:94:a2:ae:10:42:b7:09:34:2d:2d was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.fis.office-int.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:dc:fc:dc:93:94:a2:ae:10:42:b7:09:34:2d:2d
Serial Number (int): 6479276346467803182217739463596191021
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 92:8f:21:0e:68:dd:b9:90:43:be:9e:3e:da:f6:6e:b0:19:0b:2b:b8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): d3:ca:b6:4a:ad:6d:b5:13:5d:61:98:65:f7:5e:65:42:22:40:df:17
Fingerprint (sha256): 19:56:19:d2:3f:64:83:bc:f1:69:57:70:b1:f5:44:5c:8a:a0:1e:1a:74:85:e8:b0:f8:73:24:16:a9:73:b6:c1

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate prod.fis.office-int.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.fis.office-int.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.fis.office-int.com

Other certificates including the domain name office-int.com

(limited to 100 certificates)
lifecycle.office-int.com
neur.fis.office-int.com
*.osi.office-int.net
*.osi.office-int.net
c.msn-int.com
cert00046-azurecdn.akamaized.net
cert00046-azurecdn.akamaized.net
redwood.osikevlartorus.office-int.com
api.businesscentral.dynamics-tie.com
lynx.osikevlartorus.office-int.com
cdn.forms.office.net
tasks.osi.office-int.com
helene.osikevlartorus.office-int.com
sway.office-int.com
inclient.store.office-int.com
store.office-int.com
cert00046-azurecdn.akamaized.net
osikevlartorus.office-int.com
c.msn-int.com
*.r11s-wu2-ppe.prague.office-int.com
insertmedia.osi.office-int.net
Pineapple.osikevlartorus.office-int.com
*.financials.dynamics-tie.com
geneva-mds.rose.office-int.com
Eridanus-INT-Mds.office-int.com
ssu.office-int.com
tasks.office-int.com
Mahogany.osikevlartorus.office-int.com
*.osi.office-int.net
*.wu2-ppe.prague.office-int.com
jade.osikevlartorus.office-int.com
geneva-mds.Deimos.office-int.com
support.office-int.com
wheat.osikevlartorus.office-int.com
*.osi.office-int.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
cek.rps.lifecycle.office-int.com
geneva-mds.Galatea.office-int.com
*.osi.office-int.net
eucalyptus.osikevlartorus.office-int.com
row.fis.office-int.com
cert00046-azurecdn.akamaized.net
messaging.engagement.office-int.com
*.eu2.prague.office-int.com
forms.office-int.com
*.osi.office-int.net
geneva-mds.patriarch.office-int.com
*.osi.office-int.net
Buff.osikevlartorus.office-int.com
geneva-mds.Enceladus.office-int.com
sagittarius.osikevlartorus.office-int.com
Galatea.osikevlartorus.office-int.com
cluster.project.office-int.com
servicetrust.office-int.com
random12.fis.office-int.com
monitoring.servicetrust.office-int.com
cert00046-azurecdn.akamaized.net
eus.fis.office-int.com
servicetrust.office-int.com
Ginger.osikevlartorus.office-int.com
aqua.osikevlartorus.office-int.com
geneva-mds.Coffee.office-int.com
malachite.osikevlartorus.office-int.com
firstpartyapp-encrypt.marketplace.store.office-int.com
cert00046-azurecdn.akamaized.net
deployment.servicetrust.office-int.com
messaging.growth.office-int.com
cert00046-azurecdn.akamaized.net
persimmon.osikevlartorus.office-int.com
proteus.osikevlartorus.office-int.com
melon.osikevlartorus.office-int.com
addinslicensing.store.office-int.com
cert00046-azurecdn.akamaized.net
sway.office-int.com
cert00046-azurecdn.akamaized.net
burlywood.osikevlartorus.office-int.com
setup.office-int.com
prod.fis.office-int.com
*.r11s-wu2.prague.office-int.com
geneva-mds.auburn.office-int.com
cert00046-azurecdn.akamaized.net
*.osi.office-int.net
firstpartymarketplace.store.office-int.com
*.osi.office-int.net
api.servicetrust.office-int.com
sway.office-int.com
mint.osikevlartorus.office-int.com
forms.office-int.com
checkout.office-int.com
lifecycle.office-int.com
lumber.osikevlartorus.office-int.com
margaret.osikevlartorus.office-int.com
testIcmCert1.office-int.com
teal.officeapps.live-int.com
Eridanus-INT-Mds.office-int.com
ginger.osikevlartorus.office-int.com
store.office-int.com
messaging.engagement.office-int.com
scc-nexus.office-int.com

Certificate

The complete raw certificate details for prod.fis.office-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnDCCBYSgAwIBAgIQBN/c/NyTlKKuEEK3CTQtLTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAiMSAwHgYDVQQDExdwcm9kLmZp
cy5vZmZpY2UtaW50LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKhJiJfMaAZLpsaRmgGzh5Hj4fkxGrAg27D9cFKg5oU0mPY5+Zo49vNehAXMWVlB
h7YMJ6x6AjCxtjqf3oD4tx4gI84Ei9du7fXXyH9Wag3vOFrvTz58xTBCkH6//Z8L
gO5kq59r76Xyjj3Es5Y/VtXPDu3qdIpk8VZetnvKhDYzB9ZpW99E6jqBpGbPweZd
G/FgSdH7qqpxwf0VYB7VKgSjXQPosQIrsMJfm/FDmrxFdbX89gsakP6fDmOcjXAA
gLgBVBxwO7I/6VptgLkUt1Jo6PhPt+tYL0wmiQOa08xZlgDFHi7AA9DcHaI8vv8J
Fn/uLVHpkuv5IIMTbbBsWM0CAwEAAaOCA5IwggOOMB8GA1UdIwQYMBaAFKW01us2
xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBSSjyEOaN25kEO+nj7a9m6wGQsruDAi
BgNVHREEGzAZghdwcm9kLmZpcy5vZmZpY2UtaW50LmNvbTA+BgNVHSAENzA1MDMG
BmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v
R2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESG
Qmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw
OTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzAB
hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9j
YWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy
NTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0E
ggFpAWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYw8FE1D
AAAEAwBGMEQCIC4YpY4EoM8nC18OdkkTlLm/rSimU42WFhH1NlbiAeX0AiAnS9LE
8A8VHdy152Pc24fB1fgLcH3m/Zjz4J0ULUQ0SwB2AEiw42vapkc0D+VqAvqdMOsc
UgHLVt0sgdm7v6s52IRzAAABjDwUTWEAAAQDAEcwRQIgNZ5ZBAdTMlrMp5rcQMMg
CM2/ocAhFKZPuopiVYyUo6cCIQDXW3Oj1TzDc1NRUksqZHnmBwH9BX1Vm2RIxHPI
lXbP8gB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjDwUTVgA
AAQDAEcwRQIhAJrbVE27dJLoDoc6s9wgWep2O6J2pRqaDj0WbCINIfj0AiBzcGAW
KL4jGircgQbQ8gCkH+zhV79Bbfb62plnizXdIzANBgkqhkiG9w0BAQsFAAOCAgEA
K7GiH9a8ZkZaqGhin4QRMk/6msyxKv9mAz2gVbOVAAVgapIjQ7ElrQDUwTWwOEnq
0BkE3sXarwD7x0yZ8q4ga7fOPkX/dBtc5+S6ijbqD1MgLu+cNY7IpEixQMpEzBYh
s1EwQin4pxXfQz7wAEo6Q2ajs6RizcgaGsOEVnxSFN5gGzv8unHswLXvSCjZRAp8
RzBU97Pxt6ttXEfp+c3JlmMsI3x4Enmvd7EaUqiT1kDuHpzRGuncLCziY75r+Xz1
4bO9AAgbzDooeXe3AfWMwUmvWPSjENGdfu5ggZI3CwIWloGd8n+TeYusI3Fk/I0D
tTHwB0Bx44fD/IbtiVbBBiFcUWOcda7/1GP9kCQ/tJIeM1xIF8NUBTicUSeRIcfN
jKLy6kt1gDb7s4E89ZZm5fyCWFJf57dgcRpyjzbpZIQV+b8D97riANiNLZPwPnZ7
yrXQ2TfRgeXYsUAp/8J8IKT92v5KHNeZsK/Fci5zZNxLvj58sEyxlGS6FFPcZDy8
LsIb48E6HLKRAyB5P/1WevciC2POdwOWlBUSi9veG+qByvgJbV01QTPaGXPgBANb
T2bJulzjIoHlgR8kKeI1/nTPZxhtCU2pJ8rstxXT+N2SWW6glBxzhWtxymC3U+4W
p+FkdX1c9Zg+Os0tFKRvoMxW9izEaYshw8BavjtAUuA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEmIl8xoBkumxpGaAbOH
kePh+TEasCDbsP1wUqDmhTSY9jn5mjj2816EBcxZWUGHtgwnrHoCMLG2Op/egPi3
HiAjzgSL127t9dfIf1ZqDe84Wu9PPnzFMEKQfr/9nwuA7mSrn2vvpfKOPcSzlj9W
1c8O7ep0imTxVl62e8qENjMH1mlb30TqOoGkZs/B5l0b8WBJ0fuqqnHB/RVgHtUq
BKNdA+ixAiuwwl+b8UOavEV1tfz2CxqQ/p8OY5yNcACAuAFUHHA7sj/pWm2AuRS3
Umjo+E+361gvTCaJA5rTzFmWAMUeLsAD0Nwdojy+/wkWf+4tUemS6/kggxNtsGxY
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6479276346467803182217739463596191021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.fis.office-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21244295987277778838074297919127077087992476566630018454897333422837205654590947151576029620089414661217704309670603498255489747674594604578572483549459025749886493914341888380417125326203525229856757818179030106070007142174738546393384504273197795802204342740057397404063591483759417965847418552906934977664005305141499709979654122101378273077217001054420734865152242559014357295299459533285486865179754472991662720247825644427030173230818390697470735265793628313848896867979905538280980261826049790360327543549864208390322006827124797656234372553919787872197551680799057669552345210127050789131112423490455197210829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							928f210e68ddb99043be9e3edaf66eb0190b2bb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.fis.office-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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