media.lanxess.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:e8:02:7f:3f:24:26:dd:44:03:46:06:06:6f:be:8c was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=media.lanxess.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:e8:02:7f:3f:24:26:dd:44:03:46:06:06:6f:be:8c
Serial Number (int): 15826171471151261706481168213527740044
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cf:8f:f0:cb:1d:a4:80:1c:07:bc:eb:e3:90:52:60:49:14:29:b2:90
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 25:b1:9f:67:35:4b:6d:2a:18:21:23:8f:57:8c:e5:27:ea:7a:0f:83
Fingerprint (sha256): 25:a4:50:68:89:18:56:8f:51:1a:cb:58:8e:e0:fc:ac:a4:2a:65:03:c5:dc:bf:43:1a:88:78:98:e9:6b:e2:2a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate media.lanxess.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media.lanxess.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media.lanxess.com

Other certificates including the domain name lanxess.com

(limited to 100 certificates)
procurement.lanxess.com
lxcsg01.lanxess.com
digital.lanxess.com
webcam.lanxess.com
lxcsg03.lanxess.com
lanxess.com
dam-test.lanxess.com
flameretardants.lanxess.cn
mdmtunnelgatewayprod.lanxess.com
cnt.lanxess.com
new-mobility.lanxess.com
flameretardants.lanxess.cn
microbialcontrol.lanxess.com
flameretardants.lanxess.cn
techcenter.lanxess.com
myapps.lanxess.com
numb3rs.lanxess.com
procurement.lanxess.com
webmagazine.lanxess.com
ext.lanxess.com
lanxessone.lanxess.com
sgpa1a.gp.lanxess.com
prod-intra.lanxess.com
securexhub.lanxess.com
extapps-dev.lanxess.com
infobase.lanxess.com
k2019.lanxess.de
MyGateTo.lanxess.com
contactsearch.lanxess.com
crtool.lanxess.com
*.lanxess.com
new-mobility.lanxess.com
inpa1a.gp.lanxess.com
lxcsg01.lanxess.com
defw3x.gp.lanxess.com
us.lanxess.com
forwarderportal.lanxess.com
csg.lanxess.com
extapps.lanxess.com
securexhub.lanxess.com
cnt.lanxess.com
surveys.lanxess.com
flameretardants.lanxess.cn
crtool.lanxess.com
media.lanxess.com
tecci.lanxess.com
smtp11.lanxess.com
xticket-test.lanxess.com
xticket-dev.lanxess.com
cnt.lanxess.com
cnt.lanxess.com
lanxessone.lanxess.com
int-www.lanxess.com
karriereportal.lanxess.com
xticket-dev.lanxess.com
prod-www.lanxess.com
lxcsg01.lanxess.com
securehub.lanxess.com
capa1a.gp.lanxess.com
quality.lanxess.com
mdm.lanxess.com
mymail.lanxess.com
pa66-shortage.lanxess.com
techcenter.lanxess.com
procurement.lanxess.com
cnt.lanxess.com
xticket-test.lanxess.com
myapps.lanxess.com
ext.lanxess.com
excom.lanxess.com
*.lanxess.com
gitlab.lanxess.com
new-mobility.lanxess.com
mygateto.lanxess.com
digital.lanxess.com
ssl.lanxess.com
infobase.lanxess.com
cnt.lanxess.com
*.lanxess.com
surveys.lanxess.com
webcam.lanxess.com
flameretardants.lanxess.cn
forwarderportal.lanxess.com
coronavirus.lanxess.com
lxcsg01.lanxess.com
typo3.t3.lanxess.com
securexhub.lanxess.com
surveys.lanxess.com
ekc-integration.lanxess.com
lanxessone.lanxess.com
techcenter.lanxess.com
cnpa1a.gp.lanxess.com
digitalisierung.lanxess.de
qm-www.lanxess.com
karriereportal.lanxess.com
tecci.lanxess.com
digital.lanxess.com
us.lanxess.com
dexa03.lan.lanxess.com
inpa1a.gp.lanxess.com

Certificate

The complete raw certificate details for media.lanxess.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjzCCBXegAwIBAgIQC+gCfz8kJt1EA0YGBm++jDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwODEzMDAwMDAwWhcNMjQwMjEzMjM1OTU5WjAcMRowGAYDVQQDExFtZWRpYS5s
YW54ZXNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBbRaIS
OyJ1VKQGHvxuAn87vxAJoLLAqNgtu6oe5TNzEF3VEkIyutb8dp9RCmdQ8ojx2f/A
tvhaeQ5OYJyC9/YrjjrtuALVhc6+QdEJSuB97psWSxD2yOTnTTLAo+QbL0azkja6
9gxfBVxSEFKHkEEr8nV74TNLUSPd1qhZrODekZ7oWECigcUzpAfba/t/WQEcAAZ9
on6V4ztCper7qX7/3lReJ47FM4/UumB6Fxd5CcE/+8OX1ib2B8qbE+RHN3PZohuF
n4JbrLopYGhea5wpBz6YofUD9OzD7exI95CdayIzcoXug1axo1qSH4SblcXY4nG+
ntZKaQqkM0w0ItkCAwEAAaOCA4swggOHMB8GA1UdIwQYMBaAFKW01us2xOdrpt/E
ZAsBKiAEuGYjMB0GA1UdDgQWBBTPj/DLHaSAHAe86+OQUmBJFCmykDAcBgNVHREE
FTATghFtZWRpYS5sYW54ZXNzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy
NTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dl
b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3
MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2lj
ZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNy
dDAJBgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYnvU2+vAAAEAwBIMEYCIQCKjJN8
ryGnxIzis4e95vkCWqWKW+3t3GXfuR6pXcR5GQIhALpkzOfA1lgjp5k8vJiAV+Qh
BKS5YJC2npGurx6yp8SbAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY
hHMAAAGJ71NvmgAABAMARzBFAiEA9rlTVDQQLHNTWyv2PjEPj35LTNQ+Kex49OhF
/mIHJsgCIDP8jLLNiDNJkMlL8mBImGNTbBs/ycCgFmAPsY7ylAbzAHYA2ra/az+1
tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJ71NvZAAABAMARzBFAiEA2/Y3
16E68DqRG+MtgJLDKQQ0xZRVqROUQHuDV2HSCKECIHOaHG72GyYodqx3VQ20iJ1N
a3eC1aHbWpRjqYe6GN/IMA0GCSqGSIb3DQEBCwUAA4ICAQCBinUPVPrsCeotgXV1
k/L2BSGW9df6xWgoWDNfNQtj5uypeXniS3tTEmn8wtfe6W2mnNbyi4F+S41OywXK
1MLag3nO6+l9FGf1wKwUZA5b6a8/hBk3k3iVtcdhfA+4E7Bjn3kDtRGWOp3S4dpa
MKwjhb1g7bizA9UtMtZQH0tE/BJVIROYafuVRWy1DgOtyOAcE8as7NX3F81hK9xS
RGqxzWTNDtT4Ir60ZW0oGiAVBRhytJR87AujlS/J4hj1vyA9fs0xuENwAN3eJfy+
6wychkAPHCZk5eTSapmipZNwMuMx8WHj4N4NgxFBjdAGyBcYxJ42RopxUpWn0pvq
tRslzy5pgC2il/B6OCwdQzlwG6DqnOBzplAnJqJrcwDwdVcJQpDMEfhPTvoxWFOF
h8u7FH9q7B0S493oFWtLlNqNOliZzVyOTMzA7O7yJuPKow9F++Hyp0RiyF7uMV9U
Fya7bnf6BoHvHoJm9MMO9duSH2234UWlq463FrR5DUIAHK6x1NOSVGOJj57TkqcP
vlQq7eLF46oMC2tROTruASJ/hRILhdsTYiAnpegcHqtUYMbDTqscFU/J7sa+Wx6C
yNYA70JpH/kSbAox5zNWaQShEDJQMZK0nhGrP8H5U/37QmaslDiUYKaCFn0xcnI6
TKi96dv2EH2C0bI5lhz9LJZZCg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFtFohI7InVUpAYe/G4C
fzu/EAmgssCo2C27qh7lM3MQXdUSQjK61vx2n1EKZ1DyiPHZ/8C2+Fp5Dk5gnIL3
9iuOOu24AtWFzr5B0QlK4H3umxZLEPbI5OdNMsCj5BsvRrOSNrr2DF8FXFIQUoeQ
QSvydXvhM0tRI93WqFms4N6RnuhYQKKBxTOkB9tr+39ZARwABn2ifpXjO0Kl6vup
fv/eVF4njsUzj9S6YHoXF3kJwT/7w5fWJvYHypsT5Ec3c9miG4WfglusuilgaF5r
nCkHPpih9QP07MPt7Ej3kJ1rIjNyhe6DVrGjWpIfhJuVxdjicb6e1kppCqQzTDQi
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15826171471151261706481168213527740044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.lanxess.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22262949576794668636566184918938860846234501422352005569819794600859442153208245335603319668616665102260473298294169908135204537119887138940870792984957937200769646584742907123673837709141236356592974242296988250470790821367250561328068294470217655332134058245254850680216461572352790283076190492991381020625179889284621249979290819066279212555865802649002925328007041905345654056345586410701865351768752824782596298955110617238760641640948421891481214740474239238113723447091403090154310558812629842201798792441092347593753753698838597835466134377743403376300706515204924437523366053010328989730824496824271609537241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf8ff0cb1da4801c07bcebe3905260491429b290
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.lanxess.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00818a750f54faec09ea2d81757593f2f6052196f5d7fac5682858335f350b63e6eca97979e24b7b531269fcc2d7dee96da69cd6f28b817e4b8d4ecb05cad4c2da8379ceebe97d1467f5c0ac14640e5be9af3f841937937895b5c7617c0fb813b0639f7903b511963a9dd2e1da5a30ac2385bd60edb8b303d52d32d6501f4b44fc125521139869fb95456cb50e03adc8e01c13c6acecd5f717cd612bdc52446ab1cd64cd0ed4f822beb4656d281a2015051872b4947cec0ba3952fc9e218f5bf203d7ecd31b8437000ddde25fcbeeb0c9c86400f1c2664e5e4d26a99a2a5937032e331f161e3e0de0d8311418dd006c81718c49e36468a715295a7d29beab51b25cf2e69802da297f07a382c1d4339701ba0ea9ce073a6502726a26b7300f07557094290cc11f84f4efa3158538587cbbb147f6aec1d12e3dde8156b4b94da8d3a5899cd5c8e4cccc0eceef226e3caa30f45fbe1f2a74462c85eee315f541726bb6e77fa0681ef1e8266f4c30ef5db921f6db7e145a5ab8eb716b4790d42001caeb1d4d3925463898f9ed392a70fbe542aede2c5e3aa0c0b6b51393aee01227f85120b85db13622027a5e81c1eab5460c6c34eab1c154fc9eec6be5b1e82c8d600ef42691ff9126c0a31e733566904a11032503192b49e11ab3fc1f953fdfb4266ac94389460a682167d3172723a4ca8bde9dbf6107d82d1b239961cfd2c96590a