cdn.blp.app.nrc.no
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0e:44:29:b4:56:d8:d4:c1:b3:a2:e1:61:d6:18:58:b0 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cdn.blp.app.nrc.no
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:44:29:b4:56:d8:d4:c1:b3:a2:e1:61:d6:18:58:b0Serial Number (int): 18963113994110036321994087761658271920
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 53:ca:1e:9e:75:02:7c:6e:4c:1a:75:4a:c5:78:ac:bd:8c:24:2c:4a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 70:8c:d9:a5:50:dd:6f:2b:8e:5f:43:9f:e3:50:94:3d:b4:01:8a:fc
Fingerprint (sha256): 3a:75:1f:a0:42:b4:76:c5:aa:1f:70:1d:10:94:42:6d:1b:45:6e:5f:41:e0:88:48:57:fa:d1:06:ce:55:3d:a1
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate cdn.blp.app.nrc.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.blp.app.nrc.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.blp.app.nrc.no
Other certificates including the domain name nrc.no
(limited to 100 certificates)
stories.nrc.no
eay-tar.app.nrc.no
vp.nrc.no
*.nrc.no
prmn.nrc.no
sangamstaff.nrc.no
1passwordscim.nrc.no
changamka.nrc.no
donate.nrc.no
give.nrc.no
help.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
gors.nrc.no
changamka.nrc.no
help.globality.cloud
1passwordscim.nrc.no
help.nrc.no
womenshlp.nrc.no
help.globality.cloud
current.nrc.no
lock.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
admin.blp.app.nrc.no
prmn.nrc.no
help.globality.cloud
flyktninghjelpen.no
gors.nrc.no
donate.nrc.no
sangamstaff.nrc.no
latestgors.nrc.no
help.globality.cloud
video.nrc.no
prmn.nrc.no
1passwordscim.nrc.no
gors.nrc.no
latestgors.nrc.no
help.nrc.no
norcap.nrc.no
help.globality.cloud
help.globality.cloud
*.nrc.no
gorstraining.nrc.no
gors.nrc.no
eaytar.nrc.no
link.scan2mail.nrc.no
skills.nrc.no
gors.nrc.no
gorsdev.nrc.no
hjelp.nrc.no
eay-tar.app.nrc.no
ssl863184.cloudflaressl.com
prmn.nrc.no
1passwordscim.nrc.no
icladuhok.nrc.no
sangamtest.nrc.no
gors.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
hjelp.nrc.no
donate.nrc.no
cash.nrc.no
identityadmin.nrc.no
help.nrc.no
help.globality.cloud
latestgors.nrc.no
current.nrc.no
admin.blp.app.nrc.no
vp.nrc.no
weboffice.nrc.no
norcap.nrc.no
ssl863182.cloudflaressl.com
sangamtest.nrc.no
give.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
link.scan2mail.nrc.no
gors.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
help.globality.cloud
lock.nrc.no
gors.nrc.no
cct.nrc.no
www.flyktninghjelpen.no
hjelp.nrc.no
skills.nrc.no
eaytar.nrc.no
help.globality.cloud
skills.nrc.no
tools.nrc.no
cdn.blp.app.nrc.no
*.nrc.no
norcap.nrc.no
skills.nrc.no
cash.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
*.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
help.nrc.no
eay-tar.app.nrc.no
vp.nrc.no
*.nrc.no
prmn.nrc.no
sangamstaff.nrc.no
1passwordscim.nrc.no
changamka.nrc.no
donate.nrc.no
give.nrc.no
help.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
gors.nrc.no
changamka.nrc.no
help.globality.cloud
1passwordscim.nrc.no
help.nrc.no
womenshlp.nrc.no
help.globality.cloud
current.nrc.no
lock.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
admin.blp.app.nrc.no
prmn.nrc.no
help.globality.cloud
flyktninghjelpen.no
gors.nrc.no
donate.nrc.no
sangamstaff.nrc.no
latestgors.nrc.no
help.globality.cloud
video.nrc.no
prmn.nrc.no
1passwordscim.nrc.no
gors.nrc.no
latestgors.nrc.no
help.nrc.no
norcap.nrc.no
help.globality.cloud
help.globality.cloud
*.nrc.no
gorstraining.nrc.no
gors.nrc.no
eaytar.nrc.no
link.scan2mail.nrc.no
skills.nrc.no
gors.nrc.no
gorsdev.nrc.no
hjelp.nrc.no
eay-tar.app.nrc.no
ssl863184.cloudflaressl.com
prmn.nrc.no
1passwordscim.nrc.no
icladuhok.nrc.no
sangamtest.nrc.no
gors.nrc.no
changamka.nrc.no
1passwordscim.nrc.no
hjelp.nrc.no
donate.nrc.no
cash.nrc.no
identityadmin.nrc.no
help.nrc.no
help.globality.cloud
latestgors.nrc.no
current.nrc.no
admin.blp.app.nrc.no
vp.nrc.no
weboffice.nrc.no
norcap.nrc.no
ssl863182.cloudflaressl.com
sangamtest.nrc.no
give.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
link.scan2mail.nrc.no
gors.nrc.no
san-14-s51.tlsprovisioning.exacttarget.com
help.globality.cloud
lock.nrc.no
gors.nrc.no
cct.nrc.no
www.flyktninghjelpen.no
hjelp.nrc.no
skills.nrc.no
eaytar.nrc.no
help.globality.cloud
skills.nrc.no
tools.nrc.no
cdn.blp.app.nrc.no
*.nrc.no
norcap.nrc.no
skills.nrc.no
cash.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
*.nrc.no
gors.nrc.no
ssl863184.cloudflaressl.com
help.nrc.no
Certificate
The complete raw certificate details for cdn.blp.app.nrc.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHkTCCBXmgAwIBAgIQDkQptFbY1MGzouFh1hhYsDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAdMRswGQYDVQQDExJjZG4uYmxw LmFwcC5ucmMubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d6IW TsjQDyu3b9FaHk+T10Y5lvL78CWI+AIlhPuYb0nWqQReKqFCTQOzIRA3oVs4iHBZ QLQB7S9TouZfJJdh9DbxyIy+q52W3gdIYCAL3bg6beeBvxTl/6m8VYxl9nf9NTJy IDlTjemZXp7honpxO/84CLKPYuQcrYgHDBeoAMinxHjch5y4IUDVZveCe4bVujvP n7wVkZCyWf8l5ktlg7Cyh2VdkW5zrAL3lqeenBbY661mFtEYDD+In26sNVzw2qoJ 19IBV2j/271KIuF8K9OUCWEj+/87n783mHfvgGkSA1knO5CSR3ZzYsqzt2Oa+flt 49MVks3n01qCMYstAgMBAAGjggOMMIIDiDAfBgNVHSMEGDAWgBSltNbrNsTna6bf xGQLASogBLhmIzAdBgNVHQ4EFgQUU8oennUCfG5MGnVKxXisvYwkLEowHQYDVR0R BBYwFIISY2RuLmJscC5hcHAubnJjLm5vMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkw JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8E gZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEds b2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2Ny bDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw MjJDQTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu Y3J0MAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AO7N 0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjDuZbGgAAAQDAEYwRAIg GrP7Gk81NnCuWPnEneu5rqUMuAFdE7VqebtkkzoCrsACIBd3SUw2SwfZjDT30riN MpmfJ08wG7bfK5wOoYe3vzZHAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGMO5lsewAABAMARzBFAiAJdSlqIoRv1wzSxaJO72L3Itb4O98Hn7c3 c2Ns1pfrEgIhAJ6RWeBEwiKF8uIM1rtkTKFkSMhVNtfg8umaksp2p9DAAHUA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMO5lsVQAABAMARjBEAiBc jZJV2QB75akDHF2c/gxkdwmfZqvLfmA4ltyoiSxXRgIgEPbypWuOlIcWOHzISEFp FjTc1VBUnnB5d9cOMi0Me1owDQYJKoZIhvcNAQELBQADggIBAI/KRN6+9lVoFd9a xVQKSqlDr5OqiPNKA5KrsZ1URSuMOiZktKAZU7prQSGTOtHt0Ri3/rVCMOF7i+BS pIxjup/3TX3JsvsEcUmsRRnT0n5VBmWmtChF18VGnpE2DxxLYBbkskrnXc/EsMqy f1zjBCAiWSqXBzH1q3coqHHVLMFlutvegxqpIK/mbVvZ8KtMyc14g+XtFqUVY9mI dS/ye5PvPy6bIhAX9yDgjT/l0ejltmZSVhnyZzr6ndkGdKU7PPKvG4UitM1jd7BN pRW0vsgDIHrtAVdVNx1/pA6ACxsDB77XKrI+iNoYWhZVZfYGtVmTliSFe6eAdpw+ UOHeWSZDgisjI/x1EJJLk1ghEnNazVdElta2ckb6+WZ5apleqDo211OqboLrmbPy 1P3KRapUz3jfyBTQHXNjPEmxPHrjql0OxHDyPO17uM1CFZD8ThlHNGENh5x8zXZX 0CektmDAnqKtANmVUe1KwpHk5+IwHIEhdEmyV3fGLeVbpah1OY6nvAKPd/Eing4M YMrafKeNTNIgk2krjri/Q0KxizyX4rdbTMoa+go7IfIicWA1/44IiPjlfsmbJk+D MsZkiI2bUoFj8xhUBN9Adm6ggOp34bp6ntWbEMOoxauivkBx2AKox/c9aQkalRqX 5myXy/ivYARoMRCbG2mNz1BoQwm4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtneiFk7I0A8rt2/RWh5P k9dGOZby+/AliPgCJYT7mG9J1qkEXiqhQk0DsyEQN6FbOIhwWUC0Ae0vU6LmXySX YfQ28ciMvqudlt4HSGAgC924Om3ngb8U5f+pvFWMZfZ3/TUyciA5U43pmV6e4aJ6 cTv/OAiyj2LkHK2IBwwXqADIp8R43IecuCFA1Wb3gnuG1bo7z5+8FZGQsln/JeZL ZYOwsodlXZFuc6wC95annpwW2OutZhbRGAw/iJ9urDVc8NqqCdfSAVdo/9u9SiLh fCvTlAlhI/v/O5+/N5h374BpEgNZJzuQkkd2c2LKs7djmvn5bePTFZLN59NagjGL LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18963113994110036321994087761658271920 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.blp.app.nrc.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23034364810223011714886519346058355301668447129909458989860615968013830368551998663854464893029642948359576875940830433083221030540418639003599413688815221876734665232241257269757398769302272420077934309002423580775408067820886759235871009597016770303799083256578535220362014896028165798962720285506645331242860803853887399475859128201395920060977917507560065141286555378491630996491465295578927571806016073791862740732254757007445018937706774405725196911212172162817962437625776443269562199753097213155293006058240570721067496921610133772201259900428644158858895015458165815807565956856266310129960109073175204170541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 53ca1e9e75027c6e4c1a754ac578acbd8c242c4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.blp.app.nrc.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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