start-stop-vms.sandbox.vista.co
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 09:79:a6:56:c3:fc:17:94:a1:98:ec:90:d9:ee:25:1f was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=start-stop-vms.sandbox.vista.co
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:79:a6:56:c3:fc:17:94:a1:98:ec:90:d9:ee:25:1fSerial Number (int): 12594693636217476981106582694505882911
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6a:c8:a8:c4:f3:78:3a:12:53:40:18:8a:24:c5:bc:b9:1a:83:e8:54
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 08:cb:e5:07:f6:f6:51:26:03:73:4c:6e:b7:a9:24:33:3d:d5:dc:8d
Fingerprint (sha256): 26:f3:d1:dd:4c:bc:77:85:50:27:fe:10:57:8d:13:da:1f:5a:2e:91:e9:4e:29:5f:48:a2:43:52:66:c6:ec:dd
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate start-stop-vms.sandbox.vista.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for start-stop-vms.sandbox.vista.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
start-stop-vms.sandbox.vista.co
Other certificates including the domain name vista.co
(limited to 100 certificates)
helpdesk.azdelta.be
status.site24x7.jp
helpdesk.azdelta.be
fsus-3.freshservice.com
podpora.bonnet.cz
vpn.vista.co
start-stop-vms.app.vista.co
helpdesk.azdelta.be
sni21faegl.wpc.edgecastcdn.net
help.vista.co
www.vista.co
sni.cloudflaressl.com
helpdesk.azdelta.be
helpdesk.azdelta.be
support.vista.co
get-vms-running-status.sandbox.vista.co
podpora.bonnet.cz
podpora.bonnet.cz
help.vista.co
*.vista.co
status.area9lyceum.com
vista.co
status.eurabo.be
start-stop-vms.sandbox.vista.co
sip.vista.co
status.licenstream.nl
status.synccentral.eu
cloud.vista.co
status.zoho.sa
podpora.bonnet.cz
podpora.bonnet.cz
status.die-datenschutzberater.com
*.uat.vista.co
help.vista.co
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
helpdesk.azdelta.be
podpora.bonnet.cz
developer.vista.co
ict.vista.co
wallis.status.app.vista.co
status.skynetexpress.com
podpora.bonnet.cz
help.vista.co
ict.vista.co
patnl.status.app.vista.co
status.tbft.org.uk
helpdesk.azdelta.be
email.vista.co
status.site24x7.jp
adfs.vista.co
status.codafish.net
engage.vista.co
podpora.bonnet.cz
vista.co
status.codafish.net
status.site24x7.jp
get-vms-running-status.app.vista.co
learn.vista.co
podpora.bonnet.cz
lyncext.vista.co
helpdesk.azdelta.be
developer.vista.co
owa.vista.co
*.vista.co
cloud.vista.co
mail.vista.co
status.eurabo.be
status.synccentral.eu
helpdesk.azdelta.be
feedback.vista.co
helpdesk.azdelta.be
email.vista.co
status.hotel-spider.com
fsus-3.freshservice.com
www.vista.co
cloud.vista.co
fsus-3.freshservice.com
helpdesk.azdelta.be
feedback.vista.co
aklync01-ext.vista.co.nz
mail.vista.co
status.absis-ciborg.com
lsweb-ext.vista.co.nz
podpora.bonnet.cz
podpora.bonnet.cz
status.autospf.com
podpora.bonnet.cz
feedback.vista.co
learn.vista.co
*.vista.co
helpdesk.azdelta.be
status.autospf.com
owa.vista.co
sperry.status.app.vista.co
helpdesk.azdelta.be
status.die-datenschutzberater.com
cloud.vista.co
helpdesk.azdelta.be
status.site24x7.jp
helpdesk.azdelta.be
fsus-3.freshservice.com
podpora.bonnet.cz
vpn.vista.co
start-stop-vms.app.vista.co
helpdesk.azdelta.be
sni21faegl.wpc.edgecastcdn.net
help.vista.co
www.vista.co
sni.cloudflaressl.com
helpdesk.azdelta.be
helpdesk.azdelta.be
support.vista.co
get-vms-running-status.sandbox.vista.co
podpora.bonnet.cz
podpora.bonnet.cz
help.vista.co
*.vista.co
status.area9lyceum.com
vista.co
status.eurabo.be
start-stop-vms.sandbox.vista.co
sip.vista.co
status.licenstream.nl
status.synccentral.eu
cloud.vista.co
status.zoho.sa
podpora.bonnet.cz
podpora.bonnet.cz
status.die-datenschutzberater.com
*.uat.vista.co
help.vista.co
podpora.bonnet.cz
podpora.bonnet.cz
podpora.bonnet.cz
helpdesk.azdelta.be
podpora.bonnet.cz
developer.vista.co
ict.vista.co
wallis.status.app.vista.co
status.skynetexpress.com
podpora.bonnet.cz
help.vista.co
ict.vista.co
patnl.status.app.vista.co
status.tbft.org.uk
helpdesk.azdelta.be
email.vista.co
status.site24x7.jp
adfs.vista.co
status.codafish.net
engage.vista.co
podpora.bonnet.cz
vista.co
status.codafish.net
status.site24x7.jp
get-vms-running-status.app.vista.co
learn.vista.co
podpora.bonnet.cz
lyncext.vista.co
helpdesk.azdelta.be
developer.vista.co
owa.vista.co
*.vista.co
cloud.vista.co
mail.vista.co
status.eurabo.be
status.synccentral.eu
helpdesk.azdelta.be
feedback.vista.co
helpdesk.azdelta.be
email.vista.co
status.hotel-spider.com
fsus-3.freshservice.com
www.vista.co
cloud.vista.co
fsus-3.freshservice.com
helpdesk.azdelta.be
feedback.vista.co
aklync01-ext.vista.co.nz
mail.vista.co
status.absis-ciborg.com
lsweb-ext.vista.co.nz
podpora.bonnet.cz
podpora.bonnet.cz
status.autospf.com
podpora.bonnet.cz
feedback.vista.co
learn.vista.co
*.vista.co
helpdesk.azdelta.be
status.autospf.com
owa.vista.co
sperry.status.app.vista.co
helpdesk.azdelta.be
status.die-datenschutzberater.com
cloud.vista.co
helpdesk.azdelta.be
Certificate
The complete raw certificate details for start-stop-vms.sandbox.vista.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHrTCCBZWgAwIBAgIQCXmmVsP8F5ShmOyQ2e4lHzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMDA2MDAwMDAwWhcNMjQwNDA2MjM1OTU5WjAqMSgwJgYDVQQDEx9zdGFydC1z dG9wLXZtcy5zYW5kYm94LnZpc3RhLmNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAsbE/jj9jIUfasSqvtV49LVatIHQBrKD3FmPa2Q1JJTqFuBVqThIA hSJFK78Mvu9RpMx3PV98E8hrd0scov9e0FiYE4KqCsIm4gaZVsu7OqS59rGHWyWu 4R6ss02rDojgBeVF97cMvGXAzyKCOGKM07UL2GMC6K49fnSvM57AKRntaZjBcynB 9I1xGMX7CgtuwcrWlatfwv1twUnwfFWJ/CrN2TRWcmu0u6hZQgK3obPt4LaQus5z 4ExAd3J29xILIM9SxpaiEl7zg0PRBr4DpSn+/ur3JBIEg1p96sCtzqdCC3iMfWwH queOV1bAyOTRjoiEZnlZLykBwohS/8a/pQIDAQABo4IDmzCCA5cwHwYDVR0jBBgw FoAUpbTW6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFGrIqMTzeDoSU0AYiiTF vLkag+hUMCoGA1UdEQQjMCGCH3N0YXJ0LXN0b3Atdm1zLnNhbmRib3gudmlzdGEu Y28wPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3 dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2Ny bDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw MjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1 c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEB BHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsG AQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9i YWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIwADCCAX4G CisGAQQB1nkCBAIEggFuBIIBagFoAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC Cp/mZ0xaOnQAAAGLBmlVYAAABAMASDBGAiEA+0t5I3nIo46mfs/uvS57/RgH6I4B 9I6khsMox7v/I6gCIQCLUuC2M6HSGrzsLaucehOwMApTQ3CTUm7948pR60ZQ9QB1 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiwZpVVkAAAQDAEYw RAIgK1wJTfADqhkiwmCb8VWm15QxUVoQsey45Zr1UpJoeK8CIC1S1BI4aaOFh+ux yi0E5mGFS9YBoETO38y4JyDkeogcAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0 vaQ9MEjX+6sAAAGLBmlVVAAABAMARzBFAiEAwD0OdoZ6UGniIyZ8KuCNSwmw7ksX cVrh4Gy/JzGzex0CIHQjXDXn690Nke4yp0rXfoSA++L0fc5CFTifIRFsOb6lMA0G CSqGSIb3DQEBCwUAA4ICAQBl/hDeDxcE27APYEQloEy42kuirZqMXoX7/uma037f BGt73VJOhgDrkPk6s+LAzl2A0ov8IjEZrnuQ39gq0KS84qcYZitBs+jrI2ju8lkX AxxSlk+xHEwB3lkdcbzq+xowWzGoS/td7R+EkWftDQ0CF6MWls+Ibny8u/98VcJC UcynvrczYtFv7Yb+y1hZVd8/NBwl+Snl7xRH/hbhHO2qyOkRU5pXMkGY39nIPp0q gk3fdYvmda8HHuHUW4nVqqgkE5sdloKJZnY+KCNvK/JHp1twQIxZ839moMBxVv/H ASuj9i9W85SVpZv8De0YbS/EGOkAu083XjECoWyLX4O/JBiqT0ytCxJpDL9qlZHj MBql9OO+1I3LrXqN9SWScJ3m48tKLs8o+NOyuTY64tT6GZiNcnZ8neszTEqBTAmw vvB2GGLucl7EVVp14yEd4YdCgAnPkICHImauOI6+uzmsB96m5Fg0hfQvs1L509BS ZaP4ILi4zhadmSyManq+WiXAHXlCjzF6kadBqoKenNaqhFEkdX1qBmo5E6x4m3Cg TZbv4eN6SH29YAt9OML/JUu1PjlPyq0K3/DsWAW9NYVSgN0C/23PS5V4viig0Mmz snYJN3J9un/0IcWOnlJb6m7BABIbFeeqZkcL97NqBdhsrvoPW7nY0kZvVNwfyJic uw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbE/jj9jIUfasSqvtV49 LVatIHQBrKD3FmPa2Q1JJTqFuBVqThIAhSJFK78Mvu9RpMx3PV98E8hrd0scov9e 0FiYE4KqCsIm4gaZVsu7OqS59rGHWyWu4R6ss02rDojgBeVF97cMvGXAzyKCOGKM 07UL2GMC6K49fnSvM57AKRntaZjBcynB9I1xGMX7CgtuwcrWlatfwv1twUnwfFWJ /CrN2TRWcmu0u6hZQgK3obPt4LaQus5z4ExAd3J29xILIM9SxpaiEl7zg0PRBr4D pSn+/ur3JBIEg1p96sCtzqdCC3iMfWwHqueOV1bAyOTRjoiEZnlZLykBwohS/8a/ pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12594693636217476981106582694505882911 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'start-stop-vms.sandbox.vista.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22431584355712712134035439128580395837296915044142723552405489228204482229567133707463256548892477269834231588637832062480073236913969961040092506198598299290833882980910109030178491198056170739501401523592889677381108254412451401557548495911717373878193222717253389057298179699073308232480750875795335136811759143564450436187081543437882322895230917806342634987140948748718119918560891950329061121889428368038944143502780385335838629090866696614934764981507390338213982852286737071736211374507001432273538016772544178632857281350877239885233853906911797445419468502050807007388164556557189995799975188636962302377893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6ac8a8c4f3783a125340188a24c5bcb91a83e854 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start-stop-vms.sandbox.vista.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0065fe10de0f1704dbb00f604425a04cb8da4ba2ad9a8c5e85fbfee99ad37edf046b7bdd524e8600eb90f93ab3e2c0ce5d80d28bfc223119ae7b90dfd82ad0a4bce2a718662b41b3e8eb2368eef25917031c52964fb11c4c01de591d71bceafb1a305b31a84bfb5ded1f849167ed0d0d0217a31696cf886e7cbcbbff7c55c24251cca7beb73362d16fed86fecb585955df3f341c25f929e5ef1447fe16e11cedaac8e911539a57324198dfd9c83e9d2a824ddf758be675af071ee1d45b89d5aaa824139b1d96828966763e28236f2bf247a75b70408c59f37f66a0c07156ffc7012ba3f62f56f39495a59bfc0ded186d2fc418e900bb4f375e3102a16c8b5f83bf2418aa4f4cad0b12690cbf6a9591e3301aa5f4e3bed48dcbad7a8df52592709de6e3cb4a2ecf28f8d3b2b9363ae2d4fa19988d72767c9deb334c4a814c09b0bef0761862ee725ec4555a75e3211de187428009cf9080872266ae388ebebb39ac07dea6e4583485f42fb352f9d3d05265a3f820b8b8ce169d992c8c6a7abe5a25c01d79428f317a91a741aa829e9cd6aa845124757d6a066a3913ac789b70a04d96efe1e37a487dbd600b7d38c2ff254bb53e394fcaad0adff0ec5805bd35855280dd02ff6dcf4b9578be28a0d0c9b3b2760937727dba7ff421c58e9e525bea6ec100121b15e7aa66470bf7b36a05d86caefa0f5bb9d8d2466f54dc1fc8989cbb