galbraithgroup.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:b3:77:3f:80:5b:e8:64:eb:7e:fb:ea:a5:5d:27:63 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=galbraithgroup.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:b3:77:3f:80:5b:e8:64:eb:7e:fb:ea:a5:5d:27:63
Serial Number (int): 14224119733369156779363558173414598499
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:41:2c:13:77:36:b9:70:62:2a:32:99:65:4e:99:0c:56:d0:a4:92
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): d3:f5:00:35:a3:2f:19:3a:bc:36:ee:64:ca:db:e6:43:40:6d:1b:d5
Fingerprint (sha256): 37:45:3a:81:b2:e9:8b:aa:fd:f1:09:aa:16:fd:8c:73:5f:06:29:ee:d0:6d:ae:10:a6:e7:93:d0:cf:a5:4a:6e

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate galbraithgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for galbraithgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

galbraithgroup.com

Other certificates including the domain name galbraithgroup.com

(limited to 100 certificates)
suport.staff.utcluj.app
helpdesk.centurionukrs.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
ithelpdesk.uteco.com
sd.sch1584.su
*.galbraithgroup.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
dsi.alivetravel.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
galbraithgroup.com
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
support-services.gruener-punkt.de
helpdesk.derbigum.com
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
suport.staff.utcluj.app
dataroom.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
*.galbraithgroup.com
servicedesk.envisionpharma.com
publications.galbraithgroup.com
servicemanager.loacker.com
sd.sch1584.su
itservicedesk.eu.anritsu.com
servicedesk.cheaperwaste.co.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
helpdesk.derbigum.com
servicedesk.solidsolutions.co.uk
servicedesk.trencon.co.za
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
techteam.awayresorts.co.uk
servicedesk.trencon.co.za
servicedesk.solidsolutions.co.uk
www.galbraithgroup.com
galbraithgroup.com
servicedesk.quorumdev.com
galbraithgroup.com
www.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
dsi.alivetravel.com
support.gjesdal.kommune.no
support.gjesdal.kommune.no
servicedesk.solidsolutions.co.uk
itservicedesk.apc-overnight.com
helpdesk.galbraithgroup.com
*.galbraithgroup.com
servicedesk.abbotsholme.co.uk
support.ecctis.com
servicedesk.trencon.co.za
helpdesk.derbigum.com
servicedesk.envisionpharma.com
support.languagelink.ru
support.ecctis.com
galbraithgroup.com
*.galbraithgroup.com
helpdesk.zultys.com
helpdesk.zultys.com
support.gjesdal.kommune.no
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
suport.staff.utcluj.app
servicedesk.abbotsholme.co.uk
servicedesk.cheaperwaste.co.uk
itservicedesk.eu.anritsu.com

Certificate

The complete raw certificate details for galbraithgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjzCCBXegAwIBAgIQCrN3P4Bb6GTrfvvqpV0nYzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwNDI0MDAwMDAwWhcNMjMxMDIxMjM1OTU5WjAdMRswGQYDVQQDExJnYWxicmFp
dGhncm91cC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nnr8
u1JvO8AdScLqSfwSj+Dk+TDDM8j4ObIiFGYaImW2KgY88DcThsUDf5Q9lQE5DbsG
Lc+GGjcaQhKldxdS57MiD0NEJfogC8mlSUyfX91cKXRRXpNio3suIkjSgHFkpNJ9
myiIwlMUosayhym+HU6ZVSj4KyMy48SYuGXf6q3EZZX1wmdBnnwNp++oA9boOlIV
izsUZwn80Ycl9GNFB8BLHglPhw/f+vxADSvB1J03MX7QanOJF9ndoI+1wu/58OIK
K51+ESjHdv2yPkKqp/z4DWcs9scReyX/rp8d/ie8kHkQC9objYfmG0d8rwd0lYsC
y0DTSwAzcpsTvbctAgMBAAGjggOKMIIDhjAfBgNVHSMEGDAWgBSltNbrNsTna6bf
xGQLASogBLhmIzAdBgNVHQ4EFgQUVUEsE3c2uXBiKjKZZU6ZDFbQpJIwHQYDVR0R
BBYwFIISZ2FsYnJhaXRoZ3JvdXAuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNI
QTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
R2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwPgYDVR0g
BDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy
dC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGln
aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu
Y3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AOg+0No+
9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABh7QnM40AAAQDAEcwRQIhALwl
Nx/ouODBM1s1+T2QsJJsb3KdRehkD7azYkt096YcAiBSOiqFswBUeSwYZvsVgCIG
t4bmXYt/DzQ+iX7uBXnqhwB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55
NqWaAAABh7QnM9oAAAQDAEcwRQIgZib4zPoPujEhrKkcko3FAtiRrbIX7iaeMD9I
Azi/QcwCIQCkOMoxMAyx0cJ0l5uLAZzT6ypBi7QBhZ9V3U4GnLC62wB1AHoyjFTY
ty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABh7QnM80AAAQDAEYwRAIgJUtO
uzJHN6QF39KzM4RldZ751oxc8TkriwxYMYyvVhUCICWJ47CoKnmtvkfT0TeHBJne
XVI+cZwg0k9XJxT3awFqMA0GCSqGSIb3DQEBCwUAA4ICAQCmKRVXkl816XSuWg16
9IWiThnWPwKKrrPYUaqvsmfh7m1nH6cH40kn08sIc4VEA8T2sSkMz+FE0b935zew
lEuUcOBfrUwOJsyoxj7SkqTN59qAO3R4lHZwmRDL0bG0LWHu3IdoIM7fZNlw4B7J
0Mia6ZGz7aslh/0NCq2xdt+LX+AutX4tS26EGfWT9twy6sJ8BK41AZ3T7w1KF4Lf
NbdxtWhcbB5ezXNto3o94F2XLLTRNHsbK3k2ytXPXkE+So6gWzAXKefNj/swRFG2
fWvVT7cRRZA+qo//nY5H4GfXQeCxQ9PH4vDEJcoDnobfqjg10+Fev9Fc3ICA4PCr
+JPKY5emjyTQJqbYS+XeYEgkdY7VIwMzzFysgK0QHNf0E0/DwyF3SKf7aFdbjBqq
zLz1pgQopoPpx61I8pdoew3wwhRZlN0CtSUGEKZYBvXCvfw0fz8SnSsuWP+rHqVG
VyvuSokdhevCj54025i8Dgz+m9Um6iru3o0TbWgQYadHYOH+7JSmry3ojDF7F6/g
dALP93XdNRu/ohVPjV1UvqCp0A34xZnWQhvQmLl1n6dzFMRXLobTulLZdTRJDVL0
hBpCTjKSXjsnfBmNgu6pirt2KrW3PiwbXcJnlvXytRG+mKk/joCprSLvjCQHV0Ri
1JVmnSwdEWWAFZqqNcVTNJmDDQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp56/LtSbzvAHUnC6kn8
Eo/g5PkwwzPI+DmyIhRmGiJltioGPPA3E4bFA3+UPZUBOQ27Bi3Phho3GkISpXcX
UuezIg9DRCX6IAvJpUlMn1/dXCl0UV6TYqN7LiJI0oBxZKTSfZsoiMJTFKLGsocp
vh1OmVUo+CsjMuPEmLhl3+qtxGWV9cJnQZ58DafvqAPW6DpSFYs7FGcJ/NGHJfRj
RQfASx4JT4cP3/r8QA0rwdSdNzF+0GpziRfZ3aCPtcLv+fDiCiudfhEox3b9sj5C
qqf8+A1nLPbHEXsl/66fHf4nvJB5EAvaG42H5htHfK8HdJWLAstA00sAM3KbE723
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14224119733369156779363558173414598499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galbraithgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24063427550776667471830951600094613806973661732705682307579851069414835322493478781553174268656550151546839135444810740993771060675124761228928104932025041701938014790258417903913048588629449599216980117846484788211311228555746442215747094811844043046867741658629896855730117028110372858944757717534491332990611188227748763936354075381918217933300806461002651331208392243496335399308780747732167838311835980654475091079435902667197850945889593560404357487228981156999315109758847674225650993578001615236757372143343342155891368366087429279736402911248963119590778700247452216393914191849657104834040415711175601141549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55412c137736b970622a3299654e990c56d0a492
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galbraithgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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