liveca.analytix.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 07:ae:0f:fe:61:c7:39:6c:e4:da:18:10:3f:cf:6d:28 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=liveca.analytix.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:ae:0f:fe:61:c7:39:6c:e4:da:18:10:3f:cf:6d:28Serial Number (int): 10208380014237697890291249598298025256
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e0:2e:60:69:73:0d:04:50:cd:ad:b9:e1:0f:10:0e:3a:11:e6:53:56
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 83:91:e8:76:db:ef:b6:20:40:f2:de:c2:af:d6:88:8c:c2:93:0f:5d
Fingerprint (sha256): 28:71:c1:1a:e0:1a:d4:4a:4d:7a:07:7b:21:27:cc:71:dd:6f:af:68:1b:96:8a:05:24:37:3b:a1:52:d0:83:8d
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate liveca.analytix.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for liveca.analytix.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
liveca.analytix.com
Other certificates including the domain name analytix.com
(limited to 100 certificates)
portal.analytix.com
portal.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
restaurant.insight360.analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
analytix.com
portal.getaviera.com
analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
dental.insight360.analytix.com
portal.analytix.com
vet.insight360.aixsol.com
portal.analytix.com
dunkin.insight360.analytix.com
pattersoncpa.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
login.insight360.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
goshenaccountingsvcs.analytix.com
portal.analytix.com
analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
hateleyhampton.analytix.com
portal.analytixsolutions.com
portal.analytix.com
dental.insight360.analytix.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
vet.insight360.analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
analytix.com
analytix.com
dunkin.insight360.analytix.com
login.insight360.analytix.com
login.insight360.analytix.com
sportsix.analytix.com
dental.insight360.analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
chatapi.analytix.com
rickhoff.analytix.com
liveca.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
sni.cloudflaressl.com
login.insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytixsolutions.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytixsolutions.com
info.analytix.com
sni.cloudflaressl.com
portal.analytix.com
portal.analytix.com
analytix.com
dental.insight360.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
fasttracconsulting.analytix.com
foreyesbookkeeping.analytix.com
sni.cloudflaressl.com
www.analytix.com
sportsix.analytix.com
portal.analytixsolutions.com
analytix.com
sportsix.analytix.com
hrms.analytix.com
insight360.analytix.com
info.analytix.com
portal.analytix.com
mywoops.analytix.com
portal.analytix.com
hrms.analytix.com
hrms.analytix.com
portal.analytix.com
summafinancial.analytix.com
analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
promgmtco.analytix.com
vet.insight360.analytix.com
compliance.analytix.com
analytix.com
markbalogacpa.analytix.com
portal.analytix.com
primehrservices.analytix.com
portal.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
restaurant.insight360.analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
analytix.com
portal.getaviera.com
analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
dental.insight360.analytix.com
portal.analytix.com
vet.insight360.aixsol.com
portal.analytix.com
dunkin.insight360.analytix.com
pattersoncpa.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
login.insight360.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
goshenaccountingsvcs.analytix.com
portal.analytix.com
analytix.com
insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytix.com
hateleyhampton.analytix.com
portal.analytixsolutions.com
portal.analytix.com
dental.insight360.analytix.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
vet.insight360.analytix.com
portal.analytixsolutions.com
portal.analytixsolutions.com
dunkin.insight360.analytix.com
analytix.com
analytix.com
dunkin.insight360.analytix.com
login.insight360.analytix.com
login.insight360.analytix.com
sportsix.analytix.com
dental.insight360.analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
portal.analytix.com
chatapi.analytix.com
rickhoff.analytix.com
liveca.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
sni.cloudflaressl.com
login.insight360.analytix.com
restaurant.insight360.analytix.com
portal.analytixsolutions.com
portal.analytix.com
portal.analytix.com
portal.analytix.com
portal.analytixsolutions.com
info.analytix.com
sni.cloudflaressl.com
portal.analytix.com
portal.analytix.com
analytix.com
dental.insight360.analytix.com
portal.analytix.com
restaurant.insight360.analytix.com
fasttracconsulting.analytix.com
foreyesbookkeeping.analytix.com
sni.cloudflaressl.com
www.analytix.com
sportsix.analytix.com
portal.analytixsolutions.com
analytix.com
sportsix.analytix.com
hrms.analytix.com
insight360.analytix.com
info.analytix.com
portal.analytix.com
mywoops.analytix.com
portal.analytix.com
hrms.analytix.com
hrms.analytix.com
portal.analytix.com
summafinancial.analytix.com
analytix.com
portal.analytix.com
dunkin.insight360.analytix.com
promgmtco.analytix.com
vet.insight360.analytix.com
compliance.analytix.com
analytix.com
markbalogacpa.analytix.com
portal.analytix.com
primehrservices.analytix.com
Certificate
The complete raw certificate details for liveca.analytix.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHlDCCBXygAwIBAgIQB64P/mHHOWzk2hgQP89tKDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAeMRwwGgYDVQQDExNsaXZlY2Eu YW5hbHl0aXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOb+ M0JmYMqM2AxB6FYfeFh8XOAByf0rFQwRbXXABZQ0yXcnotkCtSgJexxaRG8fnwwS S7GtM3Tw32Vgf+uy/GbDq2sTUDPOif5POT57ycUBX5XOGbQtZ84XEbauUmfbf065 kM4orfJX/YL3jvGQXMco4IBI9Z6WgI7h82pRlukYUfZKizt+fL+/nPSvVMyLpDZU FlMWPNOk8H1XxoIBr/2/QZNaxcBlS8aXQO3YGXk0FXSAWi4mxTQfwULOTmQjL4E9 DAo5ufLr3MkiJpLvhQ2QUAQ3beO16045YKgp21uP3XdDHmhJm576SBQlzgF3dO2t VVg0TnkzwlmVs6bgmQIDAQABo4IDjjCCA4owHwYDVR0jBBgwFoAUpbTW6zbE52um 38RkCwEqIAS4ZiMwHQYDVR0OBBYEFOAuYGlzDQRQza254Q8QDjoR5lNWMB4GA1Ud EQQXMBWCE2xpdmVjYS5hbmFseXRpeC5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgEw KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1Ud HwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0 R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8v Y3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2 MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5k aWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNB MS5jcnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMPDKsmgAABAMARzBF AiEAsN19cR0ReblgyzD5XJEjd7ke4DSz3hdRzz6jdssef/YCIGeU46W2amxU0saL C7FnsJ681Jm9FjPrgYaoo9Ef4YMNAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGMPDKsrgAABAMARjBEAiBrJ2breFi/H5MLvVPGBsUzrEKv/zcB /CUvlxQXTC26NAIgGQrlTmFnG6lHCSzgb0e86awvAm/mvaePBlxINdrO+4QAdgDa tr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYw8MqzDAAAEAwBHMEUC ID3bLYciTEIAD98gHeQu+dmSytV203+RyDYL3ce1lXzrAiEA27vzP7G0ZJa1X6BB jjP96ePHpvHTHrHRXrZTOapaAf0wDQYJKoZIhvcNAQELBQADggIBAM/DKLo+iHRM 2Z8QA+Zis5R+qDCjgxHb1JUpLTRPPDszgzwJzhp0v0sEadb14pCwfbDNmjqsDtwS 5A2hyGNMp4L7CdQO48+/ttnb/QtL29kf/2fZF+UgjvSM5yfCf1JCzvE7h/Wi7GXz ZqjiO0hekE6liIXEZZH+qw9lDhexhP+z2lshj/NTqV5x/dIbnY7J77u4UBeSwV7v QO+TA/uE5sEpo+sy7g7l6Bu9AGIkrwfcysrfqErTUxye4GrwMdywTrjKBaN5m1dm sYft4bfOCh7DxxXxgYN3bbIWYHgvPvRX8g/Wu+VVW4aoQ0VWeOeN+hpj2LMS241r NcMw8NFzF4dTqgtMWTz73BD76rvZ7SVXu5nUkfR0qrNOdWBrsOUWQflDbVrTcW80 qy6uayMXqT96jWYowMOlQSHBCiLjYHFXS6xdJkQ7cagl7lbfQzfQ8Ar1/azEYufa nqAy8BDR5SfG9lIVwQ88/c/coQ53C/jkhAPwqkhQ/BH/5sTVFk8spLC3CvySAHtA RWvJHIFtIfN+D8mjTb1Ou8VqYshPZiv3NBHYXjGIFXiiF7E8A/AvzKqpU3a6QgfI +H1UUQfpi85Nwn0dqbZRouVg2rom7neQ7ouzB+ppOOOWmhFesjk8R3ObgwJz02XL AwhkFPyZonY2VbsvrDKTMWOhXHd+F/KL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOb+M0JmYMqM2AxB6FYf eFh8XOAByf0rFQwRbXXABZQ0yXcnotkCtSgJexxaRG8fnwwSS7GtM3Tw32Vgf+uy /GbDq2sTUDPOif5POT57ycUBX5XOGbQtZ84XEbauUmfbf065kM4orfJX/YL3jvGQ XMco4IBI9Z6WgI7h82pRlukYUfZKizt+fL+/nPSvVMyLpDZUFlMWPNOk8H1XxoIB r/2/QZNaxcBlS8aXQO3YGXk0FXSAWi4mxTQfwULOTmQjL4E9DAo5ufLr3MkiJpLv hQ2QUAQ3beO16045YKgp21uP3XdDHmhJm576SBQlzgF3dO2tVVg0TnkzwlmVs6bg mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10208380014237697890291249598298025256 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liveca.analytix.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20312035673274253871209513471531888306842308517990467669153377223567001991378067577420799089847125915873740266939095339606419013243132771170315209078320946798175498536941165894696796169717625114172076197233666003055741686636011434843520360388107086963003311864861987599904164380241789585209353350692494263213148267405588139228597455891925614569801180750106450872448536231350193610093089503777831372621534070903432812746056618004460024484544464323054934788574722925410711919998657726117227237948194638895244614349010812530965087416606372860188112508354962877253946896306279938419535574847082690036528154418527475261593 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e02e6069730d0450cdadb9e10f100e3a11e65356 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveca.analytix.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00cfc328ba3e88744cd99f1003e662b3947ea830a38311dbd495292d344f3c3b33833c09ce1a74bf4b0469d6f5e290b07db0cd9a3aac0edc12e40da1c8634ca782fb09d40ee3cfbfb6d9dbfd0b4bdbd91fff67d917e5208ef48ce727c27f5242cef13b87f5a2ec65f366a8e23b485e904ea58885c46591feab0f650e17b184ffb3da5b218ff353a95e71fdd21b9d8ec9efbbb8501792c15eef40ef9303fb84e6c129a3eb32ee0ee5e81bbd006224af07dccacadfa84ad3531c9ee06af031dcb04eb8ca05a3799b5766b187ede1b7ce0a1ec3c715f18183776db21660782f3ef457f20fd6bbe5555b86a843455678e78dfa1a63d8b312db8d6b35c330f0d173178753aa0b4c593cfbdc10fbeabbd9ed2557bb99d491f474aab34e75606bb0e51641f9436d5ad3716f34ab2eae6b2317a93f7a8d6628c0c3a54121c10a22e36071574bac5d26443b71a825ee56df4337d0f00af5fdacc462e7da9ea032f010d1e527c6f65215c10f3cfdcfdca10e770bf8e48403f0aa4850fc11ffe6c4d5164f2ca4b0b70afc92007b40456bc91c816d21f37e0fc9a34dbd4ebbc56a62c84f662bf73411d85e31881578a217b13c03f02fccaaa95376ba4207c8f87d545107e98bce4dc27d1da9b651a2e560daba26ee7790ee8bb307ea6938e3969a115eb2393c47739b830273d365cb03086414fc99a2763655bb2fac32933163a15c777e17f28b