cei-reporting-api.campuslabs.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:63:70:76:ed:f7:9c:ad:fd:70:cd:0c:c6:46:60:67 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cei-reporting-api.campuslabs.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:63:70:76:ed:f7:9c:ad:fd:70:cd:0c:c6:46:60:67
Serial Number (int): 20454738378214763602884912225196597351
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 67:0b:46:ec:f4:8a:08:5d:3f:9e:24:df:8c:c2:c7:78:79:14:21:95
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ea:db:5a:a7:ae:18:ff:9c:ea:f7:b7:f7:ec:18:2a:f1:cc:11:4c:59
Fingerprint (sha256): 2a:41:e2:b1:79:61:da:c1:66:4b:db:2c:b9:06:a3:ed:0d:b8:b8:1a:c7:e8:c9:fc:b0:91:76:cf:06:ad:d4:4b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate cei-reporting-api.campuslabs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cei-reporting-api.campuslabs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cei-reporting-api.campuslabs.com

Other certificates including the domain name campuslabs.com

(limited to 100 certificates)
sa6gl.wpc.edgecastcdn.net
courseevaluationsupport.campuslabs.com
engage3.campuslabs.com
beaconsupport.campuslabs.com
ssl279011.cloudflaressl.com
Collegiatelink4.Campuslabs.com
insightsupport.campuslabs.com
ssl2155.cloudflare.com
evaluations.campuslabs.com
collegiatelink6.campuslabs.com
beaconsupport.campuslabs.com
ssl279011.cloudflaressl.com
connect.campuslabs.com
collegiatelink.campuslabs.com
ideas.campuslabs.com
ssl379908.cloudflaressl.com
baselinesupport.campuslabs.com
learninglab.campuslabs.com
baseline.campuslabs.com
core-data-api.campuslabs.com
ssl2155.cloudflare.com
engagesupport.campuslabs.com
demographics.api.campuslabs.com
outcomessupport.campuslabs.com
complianceassistsupport.campuslabs.com
courseevaluationsupport.campuslabs.com
complianceassistsupport.campuslabs.com
bourne-status.wifinity.net
courseevaluationsupport.campuslabs.com
baselinesupport.campuslabs.com
cereportapi.campuslabs.com
identityserver.campuslabs.com
ssl379908.cloudflaressl.com
sa6gl.wpc.edgecastcdn.net
courseevaluationsupport.campuslabs.com
insight.campuslabs.com
connect.campuslabs.com
baselinesupport.campuslabs.com
cereportapi.campuslabs.com
outcomessupport.campuslabs.com
ssl379908.cloudflaressl.com
demographics-internal-api.campuslabs.com
insightsupport.campuslabs.com
ssl2155.cloudflare.com
engagesupport.campuslabs.com
beaconsupport.campuslabs.com
beaconsupport.campuslabs.com
ceapi.campuslabs.com
sa6gl.wpc.edgecastcdn.net
Collegiatelink3.CampusLabs.com
ssl279010.cloudflaressl.com
ssl379908.cloudflaressl.com
courseevaluationsupport.campuslabs.com
www3.campuslabs.com
outcomessupport.campuslabs.com
collegiatelink3.campuslabs.com
baseline.campuslabs.com
outcomessupport.campuslabs.com
ssl379906.cloudflaressl.com
ideas.campuslabs.com
cei-reporting-api.campuslabs.com
beaconsupport.campuslabs.com
complianceassistsupport.campuslabs.com
access.campuslabs.com
collegiatelink5.campuslabs.com
outcomessupport.campuslabs.com
ssl379908.cloudflaressl.com
ssl379907.cloudflaressl.com
ssl279011.cloudflaressl.com
ssl279011.cloudflaressl.com
Collegiatelink3.CampusLabs.com
*.home.campuslabs.com
courseevaluationsupport.campuslabs.com
notations.api.campuslabs.com
www3.campuslabs.com
ssl279011.cloudflaressl.com
vpn.campuslabs.com
ssl279011.cloudflaressl.com
ssl279009.cloudflaressl.com
engagesupport.campuslabs.com
complianceassistsupport.campuslabs.com
ssl379908.cloudflaressl.com
www3.campuslabs.com
Collegiatelink3.CampusLabs.com
ssl279011.cloudflaressl.com
collegiatelink2.campuslabs.com
ssl279009.cloudflaressl.com
engagesupport.campuslabs.com
ssl279011.cloudflaressl.com
sa6gl.wpc.edgecastcdn.net
complianceassistsupport.campuslabs.com
ssl279011.cloudflaressl.com
ssl2155.cloudflare.com
cei-setup-api.campuslabs.com
evaluations.api.campuslabs.com
Collegiatelink4.Campuslabs.com
ssl279011.cloudflaressl.com
ssl279011.cloudflaressl.com
beaconsupport.campuslabs.com
corp-exch-01.corp.campuslabs.com

Certificate

The complete raw certificate details for cei-reporting-api.campuslabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrDCCBZSgAwIBAgIQD2Nwdu33nK39cM0MxkZgZzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwMjIyMDAwMDAwWhcNMjMwODIyMjM1OTU5WjArMSkwJwYDVQQDEyBjZWktcmVw
b3J0aW5nLWFwaS5jYW1wdXNsYWJzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM9b6jko4/CqNcB26sf6VlNNsZ3cmhxvQMEJjEicP/B6TthhFgnf
EutvCs5oz1oH3ZG1R84K+9HzjOLWctnh1lEyLZO9ALxzrlxb+Ww8Me1FVfx/COyv
cWwTNESWSbvsC5bokwct+t9m+jekk9nvGvImRKreBkkCOCEsF4U0J76MP192SsGt
2pSBhxrZRKxaKKR5QWxRk57qNkVCi+esjtKs6/3Ng2hc2T0Cu2rrUumqem8IZhmS
6j5fxn1VWpqCSuFzhNPc2INx8XnHW59NMyAmsEmQSrvZDWN0sq8eAF27+itYfTow
qHQUiIpLrwt+xaeQdSW9slSrBKByZgw0YKkCAwEAAaOCA5kwggOVMB8GA1UdIwQY
MBaAFKW01us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBRnC0bs9IoIXT+eJN+M
wsd4eRQhlTArBgNVHREEJDAigiBjZWktcmVwb3J0aW5nLWFwaS5jYW1wdXNsYWJz
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEag
RIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNB
NDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYI
KwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBhwYIKwYBBQUH
AQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYI
KwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEds
b2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAJBgNVHRMEAjAAMIIBfgYK
KwYBBAHWeQIEAgSCAW4EggFqAWgAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp
4Xd9bQa9bgAAAYZ20v8dAAAEAwBIMEYCIQCfGsVAfnbKaG/BCgXac4lbHnxgS2Qf
/ecmM5yRYie+NwIhANyeM0pjAffi/LDQcW0W/3fAWaaoiWVBgf7GVHgDRMlYAHYA
s3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGGdtL/XwAABAMARzBF
AiEAmput3PSrx/HDcjirmayxMwWvU45mwO4K1qAN8uWEIyYCIAaKNwZ8JLkSstrO
CNgGjRl3Tnc9sbCgL3tIe1MrCANyAHUArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk
yoWGNOvcgooAAAGGdtL/bwAABAMARjBEAiBuwtAGbjv7Zqc9Ur0kyAqX6sOg5nw+
Xc9bTVSAigTQaQIgI7cmwm+L71aMrxJ7GXX4vROwqM9ixTGI0f0qYL52A4YwDQYJ
KoZIhvcNAQELBQADggIBAGq0GCpMuJTgEwZbyS/0ps/14kXZdoLlbizczBVjv1KH
t3QwhbC6Dj7MiOyr7M/xjqFpRcZ3rH6AncP8rYjOXl8gC3mLLoAaTRrWIFuRvdM3
cmRdYQHjq4lff79XneOr3VmAnR27ujt5E/rC3xa+VSKkYZtV6Jfyd5cIRSSsoBe+
1NVvoVPcZT6XN06S6B9TEc9KSCK/R+u3YDpdZVWcHZ7UsalKfSnXeBnzp0MCzvBf
XOoFeJrKZXt3d+CnuPfUXwDwd9sw75oIIANsocsr5b1jBtXHj38pm9WwhwiyHzJf
izDCr5b2bA0Ypszm8CqGRHI1o4Fgv23l/h2/T7mBRbDkgDSxOVnkuoxQmc6CrUPm
1a+XYrThjAwiyBtbD0I/SmEa1rrc7jNbl4Zz2lbcWQGjQaWXsRsL23usQsTArKrs
EkM82FWYB7ta/iicyqpcEl5ycHL6H7MDuNrA7E0IoBB1Ue5vQFVleeFMnmJr8PPM
v4xiBLnw8e85dNiZaJMYqAFQhikhHQsRHfWsz+fg4XAADDS4yaE4QivwWuafrhkF
st61iReOelblCIUSCnFJVS2S4jlBLw+gzypL3jZzAee4LzfqYVjas5jsSpsYVxEW
Jjk+4hcSYHIl6bzm0oUeQfLx+E3Xr4DgF/Sk/cKLDcriULBkpz24przCbNZ504VA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1vqOSjj8Ko1wHbqx/pW
U02xndyaHG9AwQmMSJw/8HpO2GEWCd8S628KzmjPWgfdkbVHzgr70fOM4tZy2eHW
UTItk70AvHOuXFv5bDwx7UVV/H8I7K9xbBM0RJZJu+wLluiTBy3632b6N6ST2e8a
8iZEqt4GSQI4ISwXhTQnvow/X3ZKwa3alIGHGtlErFoopHlBbFGTnuo2RUKL56yO
0qzr/c2DaFzZPQK7autS6ap6bwhmGZLqPl/GfVVamoJK4XOE09zYg3Hxecdbn00z
ICawSZBKu9kNY3Syrx4AXbv6K1h9OjCodBSIikuvC37Fp5B1Jb2yVKsEoHJmDDRg
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20454738378214763602884912225196597351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cei-reporting-api.campuslabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26176654071552684098477592081162378252092637735625751920781696629342507242098872887827922530039090443046761768640766354735370289250992563523258341116530113214160824361548273608893135754765921849210129662284085872286483864117937257573335115443258758875082991576849711829467217525415090189855222255558818473229430493968411006714256339725967874836279234520165877199126115636954977284662260544095263742176939438454452050440280000188479304431536908536226929304956831932203978177532338122833428287689543931470646640688085636601244742162566840637433149300160901234331520487798833066319424884042881763249106311770634221543593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							670b46ecf48a085d3f9e24df8cc2c77879142195
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cei-reporting-api.campuslabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018676d2ff1d00000403004830460221009f1ac5407e76ca686fc10a05da73895b1e7c604b641ffde726339c916227be37022100dc9e334a6301f7e2fcb0d0716d16ff77c059a6a889654181fec654780344c958007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018676d2ff5f00000403004730450221009a9baddcf4abc7f1c37238ab99acb13305af538e66c0ee0ad6a00df2e58423260220068a37067c24b912b2dace08d8068d19774e773db1b0a02f7b487b532b080372007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018676d2ff6f000004030046304402206ec2d0066e3bfb66a73d52bd24c80a97eac3a0e67c3e5dcf5b4d54808a04d069022023b726c26f8bef568caf127b1975f8bd13b0a8cf62c53188d1fd2a60be760386
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006ab4182a4cb894e013065bc92ff4a6cff5e245d97682e56e2cdccc1563bf5287b7743085b0ba0e3ecc88ecabeccff18ea16945c677ac7e809dc3fcad88ce5e5f200b798b2e801a4d1ad6205b91bdd33772645d6101e3ab895f7fbf579de3abdd59809d1dbbba3b7913fac2df16be5522a4619b55e897f27797084524aca017bed4d56fa153dc653e97374e92e81f5311cf4a4822bf47ebb7603a5d65559c1d9ed4b1a94a7d29d77819f3a74302cef05f5cea05789aca657b7777e0a7b8f7d45f00f077db30ef9a0820036ca1cb2be5bd6306d5c78f7f299bd5b08708b21f325f8b30c2af96f66c0d18a6cce6f02a86447235a38160bf6de5fe1dbf4fb98145b0e48034b13959e4ba8c5099ce82ad43e6d5af9762b4e18c0c22c81b5b0f423f4a611ad6badcee335b978673da56dc5901a341a597b11b0bdb7bac42c4c0acaaec12433cd8559807bb5afe289ccaaa5c125e727072fa1fb303b8dac0ec4d08a0107551ee6f40556579e14c9e626bf0f3ccbf8c6204b9f0f1ef3974d899689318a801508629211d0b111df5accfe7e0e170000c34b8c9a138422bf05ae69fae1905b2deb589178e7a56e50885120a7149552d92e239412f0fa0cf2a4bde367301e7b82f37ea6158dab398ec4a9b1857111626393ee21712607225e9bce6d2851e41f2f1f84dd7af80e017f4a4fdc28b0dcae250b064a73db8a6bcc26cd679d38540