cdn.blp.app.nrc.no

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:44:29:b4:56:d8:d4:c1:b3:a2:e1:61:d6:18:58:b0 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdn.blp.app.nrc.no

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:44:29:b4:56:d8:d4:c1:b3:a2:e1:61:d6:18:58:b0
Serial Number (int): 18963113994110036321994087761658271920
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 53:ca:1e:9e:75:02:7c:6e:4c:1a:75:4a:c5:78:ac:bd:8c:24:2c:4a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 70:8c:d9:a5:50:dd:6f:2b:8e:5f:43:9f:e3:50:94:3d:b4:01:8a:fc
Fingerprint (sha256): 3a:75:1f:a0:42:b4:76:c5:aa:1f:70:1d:10:94:42:6d:1b:45:6e:5f:41:e0:88:48:57:fa:d1:06:ce:55:3d:a1

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate cdn.blp.app.nrc.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.blp.app.nrc.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.blp.app.nrc.no

Other certificates including the domain name nrc.no

(limited to 100 certificates)
stories.nrc.no
eay-tar.app.nrc.no
vp.nrc.no
*.nrc.no
prmn.nrc.no
sangamstaff.nrc.no
1passwordscim.nrc.no
changamka.nrc.no
donate.nrc.no
give.nrc.no
help.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
gors.nrc.no
changamka.nrc.no
help.globality.cloud
1passwordscim.nrc.no
help.nrc.no
womenshlp.nrc.no
help.globality.cloud
current.nrc.no
lock.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
admin.blp.app.nrc.no
prmn.nrc.no
help.globality.cloud
flyktninghjelpen.no
gors.nrc.no
donate.nrc.no
sangamstaff.nrc.no
latestgors.nrc.no
help.globality.cloud
video.nrc.no
prmn.nrc.no
1passwordscim.nrc.no
gors.nrc.no
latestgors.nrc.no
help.nrc.no
norcap.nrc.no
help.globality.cloud
help.globality.cloud
*.nrc.no
gorstraining.nrc.no
gors.nrc.no
eaytar.nrc.no
link.scan2mail.nrc.no
skills.nrc.no
gors.nrc.no
gorsdev.nrc.no
hjelp.nrc.no
eay-tar.app.nrc.no
ssl863184.cloudflaressl.com
prmn.nrc.no
1passwordscim.nrc.no
icladuhok.nrc.no
sangamtest.nrc.no
gors.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
hjelp.nrc.no
donate.nrc.no
cash.nrc.no
identityadmin.nrc.no
help.nrc.no
help.globality.cloud
latestgors.nrc.no
current.nrc.no
admin.blp.app.nrc.no
vp.nrc.no
weboffice.nrc.no
norcap.nrc.no
ssl863182.cloudflaressl.com
sangamtest.nrc.no
give.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
link.scan2mail.nrc.no
gors.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
help.globality.cloud
lock.nrc.no
gors.nrc.no
cct.nrc.no
www.flyktninghjelpen.no
hjelp.nrc.no
skills.nrc.no
eaytar.nrc.no
help.globality.cloud
skills.nrc.no
tools.nrc.no
cdn.blp.app.nrc.no
*.nrc.no
norcap.nrc.no
skills.nrc.no
cash.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
*.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
help.nrc.no

Certificate

The complete raw certificate details for cdn.blp.app.nrc.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHkTCCBXmgAwIBAgIQDkQptFbY1MGzouFh1hhYsDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAdMRswGQYDVQQDExJjZG4uYmxw
LmFwcC5ucmMubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d6IW
TsjQDyu3b9FaHk+T10Y5lvL78CWI+AIlhPuYb0nWqQReKqFCTQOzIRA3oVs4iHBZ
QLQB7S9TouZfJJdh9DbxyIy+q52W3gdIYCAL3bg6beeBvxTl/6m8VYxl9nf9NTJy
IDlTjemZXp7honpxO/84CLKPYuQcrYgHDBeoAMinxHjch5y4IUDVZveCe4bVujvP
n7wVkZCyWf8l5ktlg7Cyh2VdkW5zrAL3lqeenBbY661mFtEYDD+In26sNVzw2qoJ
19IBV2j/271KIuF8K9OUCWEj+/87n783mHfvgGkSA1knO5CSR3ZzYsqzt2Oa+flt
49MVks3n01qCMYstAgMBAAGjggOMMIIDiDAfBgNVHSMEGDAWgBSltNbrNsTna6bf
xGQLASogBLhmIzAdBgNVHQ4EFgQUU8oennUCfG5MGnVKxXisvYwkLEowHQYDVR0R
BBYwFIISY2RuLmJscC5hcHAubnJjLm5vMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkw
JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8E
gZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEds
b2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2Ny
bDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw
MjJDQTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGln
aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu
Y3J0MAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjDuZbGgAAAQDAEYwRAIg
GrP7Gk81NnCuWPnEneu5rqUMuAFdE7VqebtkkzoCrsACIBd3SUw2SwfZjDT30riN
MpmfJ08wG7bfK5wOoYe3vzZHAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGMO5lsewAABAMARzBFAiAJdSlqIoRv1wzSxaJO72L3Itb4O98Hn7c3
c2Ns1pfrEgIhAJ6RWeBEwiKF8uIM1rtkTKFkSMhVNtfg8umaksp2p9DAAHUA2ra/
az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMO5lsVQAABAMARjBEAiBc
jZJV2QB75akDHF2c/gxkdwmfZqvLfmA4ltyoiSxXRgIgEPbypWuOlIcWOHzISEFp
FjTc1VBUnnB5d9cOMi0Me1owDQYJKoZIhvcNAQELBQADggIBAI/KRN6+9lVoFd9a
xVQKSqlDr5OqiPNKA5KrsZ1URSuMOiZktKAZU7prQSGTOtHt0Ri3/rVCMOF7i+BS
pIxjup/3TX3JsvsEcUmsRRnT0n5VBmWmtChF18VGnpE2DxxLYBbkskrnXc/EsMqy
f1zjBCAiWSqXBzH1q3coqHHVLMFlutvegxqpIK/mbVvZ8KtMyc14g+XtFqUVY9mI
dS/ye5PvPy6bIhAX9yDgjT/l0ejltmZSVhnyZzr6ndkGdKU7PPKvG4UitM1jd7BN
pRW0vsgDIHrtAVdVNx1/pA6ACxsDB77XKrI+iNoYWhZVZfYGtVmTliSFe6eAdpw+
UOHeWSZDgisjI/x1EJJLk1ghEnNazVdElta2ckb6+WZ5apleqDo211OqboLrmbPy
1P3KRapUz3jfyBTQHXNjPEmxPHrjql0OxHDyPO17uM1CFZD8ThlHNGENh5x8zXZX
0CektmDAnqKtANmVUe1KwpHk5+IwHIEhdEmyV3fGLeVbpah1OY6nvAKPd/Eing4M
YMrafKeNTNIgk2krjri/Q0KxizyX4rdbTMoa+go7IfIicWA1/44IiPjlfsmbJk+D
MsZkiI2bUoFj8xhUBN9Adm6ggOp34bp6ntWbEMOoxauivkBx2AKox/c9aQkalRqX
5myXy/ivYARoMRCbG2mNz1BoQwm4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtneiFk7I0A8rt2/RWh5P
k9dGOZby+/AliPgCJYT7mG9J1qkEXiqhQk0DsyEQN6FbOIhwWUC0Ae0vU6LmXySX
YfQ28ciMvqudlt4HSGAgC924Om3ngb8U5f+pvFWMZfZ3/TUyciA5U43pmV6e4aJ6
cTv/OAiyj2LkHK2IBwwXqADIp8R43IecuCFA1Wb3gnuG1bo7z5+8FZGQsln/JeZL
ZYOwsodlXZFuc6wC95annpwW2OutZhbRGAw/iJ9urDVc8NqqCdfSAVdo/9u9SiLh
fCvTlAlhI/v/O5+/N5h374BpEgNZJzuQkkd2c2LKs7djmvn5bePTFZLN59NagjGL
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18963113994110036321994087761658271920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.blp.app.nrc.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23034364810223011714886519346058355301668447129909458989860615968013830368551998663854464893029642948359576875940830433083221030540418639003599413688815221876734665232241257269757398769302272420077934309002423580775408067820886759235871009597016770303799083256578535220362014896028165798962720285506645331242860803853887399475859128201395920060977917507560065141286555378491630996491465295578927571806016073791862740732254757007445018937706774405725196911212172162817962437625776443269562199753097213155293006058240570721067496921610133772201259900428644158858895015458165815807565956856266310129960109073175204170541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53ca1e9e75027c6e4c1a754ac578acbd8c242c4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.blp.app.nrc.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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