media.lanxess.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0b:e8:02:7f:3f:24:26:dd:44:03:46:06:06:6f:be:8c was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=media.lanxess.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:e8:02:7f:3f:24:26:dd:44:03:46:06:06:6f:be:8cSerial Number (int): 15826171471151261706481168213527740044
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: cf:8f:f0:cb:1d:a4:80:1c:07:bc:eb:e3:90:52:60:49:14:29:b2:90
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 25:b1:9f:67:35:4b:6d:2a:18:21:23:8f:57:8c:e5:27:ea:7a:0f:83
Fingerprint (sha256): 25:a4:50:68:89:18:56:8f:51:1a:cb:58:8e:e0:fc:ac:a4:2a:65:03:c5:dc:bf:43:1a:88:78:98:e9:6b:e2:2a
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate media.lanxess.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for media.lanxess.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
media.lanxess.com
Other certificates including the domain name lanxess.com
(limited to 100 certificates)
procurement.lanxess.com
lxcsg01.lanxess.com
digital.lanxess.com
webcam.lanxess.com
lxcsg03.lanxess.com
lanxess.com
dam-test.lanxess.com
flameretardants.lanxess.cn
mdmtunnelgatewayprod.lanxess.com
cnt.lanxess.com
new-mobility.lanxess.com
flameretardants.lanxess.cn
microbialcontrol.lanxess.com
flameretardants.lanxess.cn
techcenter.lanxess.com
myapps.lanxess.com
numb3rs.lanxess.com
procurement.lanxess.com
webmagazine.lanxess.com
ext.lanxess.com
lanxessone.lanxess.com
sgpa1a.gp.lanxess.com
prod-intra.lanxess.com
securexhub.lanxess.com
extapps-dev.lanxess.com
infobase.lanxess.com
k2019.lanxess.de
MyGateTo.lanxess.com
contactsearch.lanxess.com
crtool.lanxess.com
*.lanxess.com
new-mobility.lanxess.com
inpa1a.gp.lanxess.com
lxcsg01.lanxess.com
defw3x.gp.lanxess.com
us.lanxess.com
forwarderportal.lanxess.com
csg.lanxess.com
extapps.lanxess.com
securexhub.lanxess.com
cnt.lanxess.com
surveys.lanxess.com
flameretardants.lanxess.cn
crtool.lanxess.com
media.lanxess.com
tecci.lanxess.com
smtp11.lanxess.com
xticket-test.lanxess.com
xticket-dev.lanxess.com
cnt.lanxess.com
cnt.lanxess.com
lanxessone.lanxess.com
int-www.lanxess.com
karriereportal.lanxess.com
xticket-dev.lanxess.com
prod-www.lanxess.com
lxcsg01.lanxess.com
securehub.lanxess.com
capa1a.gp.lanxess.com
quality.lanxess.com
mdm.lanxess.com
mymail.lanxess.com
pa66-shortage.lanxess.com
techcenter.lanxess.com
procurement.lanxess.com
cnt.lanxess.com
xticket-test.lanxess.com
myapps.lanxess.com
ext.lanxess.com
excom.lanxess.com
*.lanxess.com
gitlab.lanxess.com
new-mobility.lanxess.com
mygateto.lanxess.com
digital.lanxess.com
ssl.lanxess.com
infobase.lanxess.com
cnt.lanxess.com
*.lanxess.com
surveys.lanxess.com
webcam.lanxess.com
flameretardants.lanxess.cn
forwarderportal.lanxess.com
coronavirus.lanxess.com
lxcsg01.lanxess.com
typo3.t3.lanxess.com
securexhub.lanxess.com
surveys.lanxess.com
ekc-integration.lanxess.com
lanxessone.lanxess.com
techcenter.lanxess.com
cnpa1a.gp.lanxess.com
digitalisierung.lanxess.de
qm-www.lanxess.com
karriereportal.lanxess.com
tecci.lanxess.com
digital.lanxess.com
us.lanxess.com
dexa03.lan.lanxess.com
inpa1a.gp.lanxess.com
lxcsg01.lanxess.com
digital.lanxess.com
webcam.lanxess.com
lxcsg03.lanxess.com
lanxess.com
dam-test.lanxess.com
flameretardants.lanxess.cn
mdmtunnelgatewayprod.lanxess.com
cnt.lanxess.com
new-mobility.lanxess.com
flameretardants.lanxess.cn
microbialcontrol.lanxess.com
flameretardants.lanxess.cn
techcenter.lanxess.com
myapps.lanxess.com
numb3rs.lanxess.com
procurement.lanxess.com
webmagazine.lanxess.com
ext.lanxess.com
lanxessone.lanxess.com
sgpa1a.gp.lanxess.com
prod-intra.lanxess.com
securexhub.lanxess.com
extapps-dev.lanxess.com
infobase.lanxess.com
k2019.lanxess.de
MyGateTo.lanxess.com
contactsearch.lanxess.com
crtool.lanxess.com
*.lanxess.com
new-mobility.lanxess.com
inpa1a.gp.lanxess.com
lxcsg01.lanxess.com
defw3x.gp.lanxess.com
us.lanxess.com
forwarderportal.lanxess.com
csg.lanxess.com
extapps.lanxess.com
securexhub.lanxess.com
cnt.lanxess.com
surveys.lanxess.com
flameretardants.lanxess.cn
crtool.lanxess.com
media.lanxess.com
tecci.lanxess.com
smtp11.lanxess.com
xticket-test.lanxess.com
xticket-dev.lanxess.com
cnt.lanxess.com
cnt.lanxess.com
lanxessone.lanxess.com
int-www.lanxess.com
karriereportal.lanxess.com
xticket-dev.lanxess.com
prod-www.lanxess.com
lxcsg01.lanxess.com
securehub.lanxess.com
capa1a.gp.lanxess.com
quality.lanxess.com
mdm.lanxess.com
mymail.lanxess.com
pa66-shortage.lanxess.com
techcenter.lanxess.com
procurement.lanxess.com
cnt.lanxess.com
xticket-test.lanxess.com
myapps.lanxess.com
ext.lanxess.com
excom.lanxess.com
*.lanxess.com
gitlab.lanxess.com
new-mobility.lanxess.com
mygateto.lanxess.com
digital.lanxess.com
ssl.lanxess.com
infobase.lanxess.com
cnt.lanxess.com
*.lanxess.com
surveys.lanxess.com
webcam.lanxess.com
flameretardants.lanxess.cn
forwarderportal.lanxess.com
coronavirus.lanxess.com
lxcsg01.lanxess.com
typo3.t3.lanxess.com
securexhub.lanxess.com
surveys.lanxess.com
ekc-integration.lanxess.com
lanxessone.lanxess.com
techcenter.lanxess.com
cnpa1a.gp.lanxess.com
digitalisierung.lanxess.de
qm-www.lanxess.com
karriereportal.lanxess.com
tecci.lanxess.com
digital.lanxess.com
us.lanxess.com
dexa03.lan.lanxess.com
inpa1a.gp.lanxess.com
Certificate
The complete raw certificate details for media.lanxess.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjzCCBXegAwIBAgIQC+gCfz8kJt1EA0YGBm++jDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwODEzMDAwMDAwWhcNMjQwMjEzMjM1OTU5WjAcMRowGAYDVQQDExFtZWRpYS5s YW54ZXNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBbRaIS OyJ1VKQGHvxuAn87vxAJoLLAqNgtu6oe5TNzEF3VEkIyutb8dp9RCmdQ8ojx2f/A tvhaeQ5OYJyC9/YrjjrtuALVhc6+QdEJSuB97psWSxD2yOTnTTLAo+QbL0azkja6 9gxfBVxSEFKHkEEr8nV74TNLUSPd1qhZrODekZ7oWECigcUzpAfba/t/WQEcAAZ9 on6V4ztCper7qX7/3lReJ47FM4/UumB6Fxd5CcE/+8OX1ib2B8qbE+RHN3PZohuF n4JbrLopYGhea5wpBz6YofUD9OzD7exI95CdayIzcoXug1axo1qSH4SblcXY4nG+ ntZKaQqkM0w0ItkCAwEAAaOCA4swggOHMB8GA1UdIwQYMBaAFKW01us2xOdrpt/E ZAsBKiAEuGYjMB0GA1UdDgQWBBTPj/DLHaSAHAe86+OQUmBJFCmykDAcBgNVHREE FTATghFtZWRpYS5sYW54ZXNzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy NTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3 MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz cC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2lj ZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNy dDAJBgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYnvU2+vAAAEAwBIMEYCIQCKjJN8 ryGnxIzis4e95vkCWqWKW+3t3GXfuR6pXcR5GQIhALpkzOfA1lgjp5k8vJiAV+Qh BKS5YJC2npGurx6yp8SbAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY hHMAAAGJ71NvmgAABAMARzBFAiEA9rlTVDQQLHNTWyv2PjEPj35LTNQ+Kex49OhF /mIHJsgCIDP8jLLNiDNJkMlL8mBImGNTbBs/ycCgFmAPsY7ylAbzAHYA2ra/az+1 tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJ71NvZAAABAMARzBFAiEA2/Y3 16E68DqRG+MtgJLDKQQ0xZRVqROUQHuDV2HSCKECIHOaHG72GyYodqx3VQ20iJ1N a3eC1aHbWpRjqYe6GN/IMA0GCSqGSIb3DQEBCwUAA4ICAQCBinUPVPrsCeotgXV1 k/L2BSGW9df6xWgoWDNfNQtj5uypeXniS3tTEmn8wtfe6W2mnNbyi4F+S41OywXK 1MLag3nO6+l9FGf1wKwUZA5b6a8/hBk3k3iVtcdhfA+4E7Bjn3kDtRGWOp3S4dpa MKwjhb1g7bizA9UtMtZQH0tE/BJVIROYafuVRWy1DgOtyOAcE8as7NX3F81hK9xS RGqxzWTNDtT4Ir60ZW0oGiAVBRhytJR87AujlS/J4hj1vyA9fs0xuENwAN3eJfy+ 6wychkAPHCZk5eTSapmipZNwMuMx8WHj4N4NgxFBjdAGyBcYxJ42RopxUpWn0pvq tRslzy5pgC2il/B6OCwdQzlwG6DqnOBzplAnJqJrcwDwdVcJQpDMEfhPTvoxWFOF h8u7FH9q7B0S493oFWtLlNqNOliZzVyOTMzA7O7yJuPKow9F++Hyp0RiyF7uMV9U Fya7bnf6BoHvHoJm9MMO9duSH2234UWlq463FrR5DUIAHK6x1NOSVGOJj57TkqcP vlQq7eLF46oMC2tROTruASJ/hRILhdsTYiAnpegcHqtUYMbDTqscFU/J7sa+Wx6C yNYA70JpH/kSbAox5zNWaQShEDJQMZK0nhGrP8H5U/37QmaslDiUYKaCFn0xcnI6 TKi96dv2EH2C0bI5lhz9LJZZCg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFtFohI7InVUpAYe/G4C fzu/EAmgssCo2C27qh7lM3MQXdUSQjK61vx2n1EKZ1DyiPHZ/8C2+Fp5Dk5gnIL3 9iuOOu24AtWFzr5B0QlK4H3umxZLEPbI5OdNMsCj5BsvRrOSNrr2DF8FXFIQUoeQ QSvydXvhM0tRI93WqFms4N6RnuhYQKKBxTOkB9tr+39ZARwABn2ifpXjO0Kl6vup fv/eVF4njsUzj9S6YHoXF3kJwT/7w5fWJvYHypsT5Ec3c9miG4WfglusuilgaF5r nCkHPpih9QP07MPt7Ej3kJ1rIjNyhe6DVrGjWpIfhJuVxdjicb6e1kppCqQzTDQi 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15826171471151261706481168213527740044 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.lanxess.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22262949576794668636566184918938860846234501422352005569819794600859442153208245335603319668616665102260473298294169908135204537119887138940870792984957937200769646584742907123673837709141236356592974242296988250470790821367250561328068294470217655332134058245254850680216461572352790283076190492991381020625179889284621249979290819066279212555865802649002925328007041905345654056345586410701865351768752824782596298955110617238760641640948421891481214740474239238113723447091403090154310558812629842201798792441092347593753753698838597835466134377743403376300706515204924437523366053010328989730824496824271609537241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf8ff0cb1da4801c07bcebe3905260491429b290 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lanxess.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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