prescriptions-pre.clinicabaviera.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0f:99:c7:bb:9f:44:b2:cf:9b:09:4c:ae:61:11:c9:96 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=prescriptions-pre.clinicabaviera.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:99:c7:bb:9f:44:b2:cf:9b:09:4c:ae:61:11:c9:96Serial Number (int): 20736892420598251498776946766651705750
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f0:62:08:4d:4e:7d:df:e5:50:28:1b:e8:27:08:b2:9f:97:87:ae:69
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): dc:c2:a1:9e:ae:13:c1:f1:a2:23:df:e7:eb:4f:91:70:7a:d3:44:fd
Fingerprint (sha256): 3a:6b:1b:38:25:35:d8:0a:41:f4:ff:e4:ba:99:b7:83:a5:0b:50:81:69:97:12:45:ca:17:2b:79:fd:b4:33:da
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate prescriptions-pre.clinicabaviera.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prescriptions-pre.clinicabaviera.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prescriptions-pre.clinicabaviera.com
Other certificates including the domain name clinicabaviera.com
(limited to 100 certificates)
descubre.clinicabaviera.com
www.clinicabaviera.com
secure0136.hubspot.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
apis.clinicabaviera.com
secure0136.hubspot.com
stage.abilitaxr.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
areapaciente.clinicabaviera.com
*.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
aspdev.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
rdpgateway.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
secure0136.hubspot.com
prescriptions-pre.clinicabaviera.com
secure0136.hubspot.com
*.clinicabaviera.com
www.sterilwize.com
descubre.clinicabaviera.com
cdn.clinicabaviera.com
www.clinicabaviera.com
secure0136.hubspot.com
www.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
www.sellmydog.app
princessworld.co.in
san-5-s51.tlsprovisioning.exacttarget.com
oftalmologia.clinicabaviera.com
www.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
correo.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
cdn.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
secure0136.hubspot.com
cdn.clinicabaviera.com
asp.clinicabaviera.com
www.clinicabaviera.com
mail.care-vision.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
secure0136.hubspot.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
oftalmologia.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
sealsign.clinicabaviera.com
secure0136.hubspot.com
secure0136.hubspot.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
www.clinicabaviera.com
secure0136.hubspot.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
apis.clinicabaviera.com
secure0136.hubspot.com
stage.abilitaxr.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
areapaciente.clinicabaviera.com
*.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
aspdev.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
rdpgateway.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
secure0136.hubspot.com
prescriptions-pre.clinicabaviera.com
secure0136.hubspot.com
*.clinicabaviera.com
www.sterilwize.com
descubre.clinicabaviera.com
cdn.clinicabaviera.com
www.clinicabaviera.com
secure0136.hubspot.com
www.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
refractiva.clinicabaviera.com
www.sellmydog.app
princessworld.co.in
san-5-s51.tlsprovisioning.exacttarget.com
oftalmologia.clinicabaviera.com
www.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
correo.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
cdn.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
descubre.clinicabaviera.com
secure0136.hubspot.com
cdn.clinicabaviera.com
asp.clinicabaviera.com
www.clinicabaviera.com
mail.care-vision.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
secure0136.hubspot.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
descubre.clinicabaviera.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
san-5-s51.tlsprovisioning.exacttarget.com
oftalmologia.clinicabaviera.com
san-5-s51.tlsprovisioning.exacttarget.com
secure0136.hubspot.com
sealsign.clinicabaviera.com
secure0136.hubspot.com
secure0136.hubspot.com
secure0136.hubspot.com
san-5-s51.tlsprovisioning.exacttarget.com
Certificate
The complete raw certificate details for prescriptions-pre.clinicabaviera.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHuDCCBaCgAwIBAgIQD5nHu59Ess+bCUyuYRHJljANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjA4MDAwMDAwWhcNMjQwNjA4MjM1OTU5WjAvMS0wKwYDVQQDEyRwcmVzY3Jp cHRpb25zLXByZS5jbGluaWNhYmF2aWVyYS5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDir0aLgSmTPRteiDnV5uft4MRjQeKujgcHenJmeyAVwpR qlr9nBMiWpM5oBySHfPf4GVMzw0FxqRGYjRLcZAWESPsrlFfB818ldxYBj/8hYRA 7e36T+Mrw9RkLpxMJry9y+E2UXHEhAKA6xFBDoatuytffymiZpXFdudYHLwHJC9H 8H0pxZxw/F1xgqrdOAtd1Hpr8Ier1Z/KS9zLQIpI6C9oMiiT6B4ncJwbpg+WHNPC z7qJZa8QWytJPBBno9v3KdwR2OspBeb7f3V5g0eIoFdq/V2toOxEQklwCLa+4xsw dcegZpZOoVHBlzUdhsPeieS7tdrMA9q5aswipwVNAgMBAAGjggOhMIIDnTAfBgNV HSMEGDAWgBSltNbrNsTna6bfxGQLASogBLhmIzAdBgNVHQ4EFgQU8GIITU593+VQ KBvoJwiyn5eHrmkwLwYDVR0RBCgwJoIkcHJlc2NyaXB0aW9ucy1wcmUuY2xpbmlj YWJhdmllcmEuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGH BggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB /wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABjEjSCbUAAAQDAEgwRgIhAPUhClzrMNnD8agL 7YPXlv5E8WwIbWyES+AZXPwx7nlrAiEAjdKhTEP8ausWyPBk+yOuomS0kd7MxwHs Tp4Bv398WQ8AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYxI 0glVAAAEAwBHMEUCIH9vl71FJMpa5Bip6DQp5QtqGa3fQueavUFTQ5ru7CZbAiEA 7amSTugwTEEDk/RIfngtHwy4vydQIHuJWSf12W4RTuYAdgDatr9rP7W2Ip+bwrtc a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYxI0gksAAAEAwBHMEUCIQC4CmrpEKcbudFC aCOXwpj6VRsDKNRP90f9/M0Rty9ubAIgMeQ5ou9dZOfoOBxSnxFKWoMB1kKUL7tK rsfS/9XdbwkwDQYJKoZIhvcNAQELBQADggIBAMTsqybOII94b3i2UumJ+Q+aVlDb 9y34aqufp/OBOtkxqSR4b61Lci2vQiL3+VIpHBJKGZD1LwmXv/CxliQh3ZapvhDl K/MF8oAgAxGC0GRfNAw+tRmsWk0C8zXi/HMZWCe71zI1HsKrPejr7OHANqoT4nIJ cFbB8m2+/Df+LBseNtJkZ/wbH78NIxLusZXTv/H406vmTCiXaDsVDONxsPW919dF 8sFso0rkbs+dB2xTbATV5n7mFtn+TYasCZ1r1MmMO8bnGHZGtYbwOywqQLosKWlh oveuVLNXUSTOrrMQVu69ntpVlQcYk+JGZPe2358ak1SVPc79yMwz/p6MxFSKRskm d8Ug2Q6dSpIPh0plRz6cU4WADY41lTh2/zzrItRyTJwLCAwHg293RghAoAAwTy82 crn/qbF+Ve1VG0AwSiTgv87nAT5cSJR1U1lO8gQf3me2VqBa5prOLS4th3IKCmb2 qIBDX6mqK9JKIJedJJYH6FulLSbeGATrJ4IFcsyho4O2HDU8cse/5aHoDVda14Is Siu4mjWVcyoatF3FCzz63coQmIW12smf6yyFauGpIqdYeQeGNypFgZRzlwzchTnc jNi60lohDRxJswyqOF7TO7ql+WyQrw3DBlkBK8sjYzEEqXXINnkGjHb8cRKxCeQz KiPwjXIMw33zbQ/D -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4q9Gi4Epkz0bXog51eb n7eDEY0Hiro4HB3pyZnsgFcKUapa/ZwTIlqTOaAckh3z3+BlTM8NBcakRmI0S3GQ FhEj7K5RXwfNfJXcWAY//IWEQO3t+k/jK8PUZC6cTCa8vcvhNlFxxIQCgOsRQQ6G rbsrX38pomaVxXbnWBy8ByQvR/B9KcWccPxdcYKq3TgLXdR6a/CHq9Wfykvcy0CK SOgvaDIok+geJ3CcG6YPlhzTws+6iWWvEFsrSTwQZ6Pb9yncEdjrKQXm+391eYNH iKBXav1draDsREJJcAi2vuMbMHXHoGaWTqFRwZc1HYbD3onku7XazAPauWrMIqcF TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20736892420598251498776946766651705750 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prescriptions-pre.clinicabaviera.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24684884061691971295607500762688473025405186313721891797611154307077646332016058579847333881337774410051841378829130523548769444088469709862081250396609154546275441949651321242596540565946183572084745624525669567405040023316383244933755512936862731757304713019149931543015083367345421028384366430928395354269859558361964685133801128242153754877650417229233679003870876047317256238565331087726519415469999658764271033156599518282058190201451503849183173152735041391195470065362843530744196704228376642461573623879085241215743034566176619303519853288996928702178294199517339956078580184356522926157893184211994586580301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f062084d4e7ddfe550281be82708b29f9787ae69 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescriptions-pre.clinicabaviera.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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