uhccommunityplan.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 07:8a:2a:cf:69:98:83:b9:cb:3e:7d:60:04:f0:e8:9b was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=uhccommunityplan.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:8a:2a:cf:69:98:83:b9:cb:3e:7d:60:04:f0:e8:9bSerial Number (int): 10022001231085515959064391863602571419
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: d0:aa:27:b7:f8:a6:6a:57:a8:eb:51:ae:51:f8:60:79:cb:69:04:75
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 40:d6:50:47:f6:78:ab:fc:2a:77:84:b3:08:fd:1c:ef:5c:12:15:8a
Fingerprint (sha256): 3c:26:3c:b2:47:79:91:11:99:4e:81:a2:8f:56:a3:c0:10:42:02:69:09:2f:42:15:40:9e:62:7b:84:98:7e:e5
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate uhccommunityplan.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for uhccommunityplan.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
uhccommunityplan.com
Other certificates including the domain name uhccommunityplan.com
(limited to 100 certificates)
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps.optum.com
uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
cloud.news.uhccommunityplan.com
sps-stage.optum.com
microsites-prod-externalprodv2.aemprod.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
info.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
uhccommunityplan.uhc.com
info.uhccommunityplan.com
sps-test.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
sps.optum.com
es.uhccommunityplan.com
microsites-prod-externalprodv5.aemprod.optum.com
uhccommunityplan.uhc.com
es.uhccommunityplan.com
sps.optum.com
caid.uhccommunityplan.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
www.uhccommunityplan.com
sps-test.optum.com
sps-stage.optum.com
info.uhccommunityplan.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
click.news.uhccommunityplan.com
microsites-prod-externalprodv3.aemprod.optum.com
uhccommunityplan.com
sps-test.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
akamai-san51.exacttarget.com
sps-stage.optum.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-test.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
sps-dev.optum.com
uhccommunityplan.uhc.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-dev.optum.com
sps-dev.optum.com
akamai-san51.exacttarget.com
sps.optum.com
www.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
pages.news.uhccommunityplan.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps.optum.com
uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
cloud.news.uhccommunityplan.com
sps-stage.optum.com
microsites-prod-externalprodv2.aemprod.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
info.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
uhccommunityplan.uhc.com
info.uhccommunityplan.com
sps-test.optum.com
caid.uhccommunityplan.com
sps-stage.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps.optum.com
sps-stage.optum.com
sps.optum.com
es.uhccommunityplan.com
microsites-prod-externalprodv5.aemprod.optum.com
uhccommunityplan.uhc.com
es.uhccommunityplan.com
sps.optum.com
caid.uhccommunityplan.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
www.uhccommunityplan.com
sps-test.optum.com
sps-stage.optum.com
info.uhccommunityplan.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-stage.optum.com
sps-stage.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
click.news.uhccommunityplan.com
microsites-prod-externalprodv3.aemprod.optum.com
uhccommunityplan.com
sps-test.optum.com
www.uhccommunityplan.com
sps-stage.optum.com
akamai-san51.exacttarget.com
sps-stage.optum.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
sps-test.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
sps-dev.optum.com
uhccommunityplan.uhc.com
www.uhccommunityplan.com
www.uhccommunityplan.com
sps-dev.optum.com
sps-dev.optum.com
akamai-san51.exacttarget.com
sps.optum.com
www.uhccommunityplan.com
sps.optum.com
www.uhccommunityplan.com
caid.uhccommunityplan.com
sps.optum.com
sps.optum.com
dsnp.uhccommunityplan.com
sps.optum.com
sps-stage.optum.com
sps-stage.optum.com
caid.uhccommunityplan.com
pages.news.uhccommunityplan.com
akamai-san51.exacttarget.com
www.uhccommunityplan.com
Certificate
The complete raw certificate details for uhccommunityplan.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmTCCBYGgAwIBAgIQB4oqz2mYg7nLPn1gBPDomzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjQwNDAyMDAwMDAwWhcNMjQxMDAyMjM1OTU5WjAfMR0wGwYDVQQDExR1aGNjb21t dW5pdHlwbGFuLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKSA HoUx1/vH7HoLdkT/kbzjWsqulEimvmCi/nSMi0zSSF4xaNpbraqmfaR5Uk/SRtZz xomSHkI7OIs8sGHCx4xHPGaV+A9sMfKC4vCyecsPuLZQLaxROzj4HMNpLaePycDo A+ekE1hYjImTXZ+xAls9TM9fDCqGVjWGf2E2Lej2WHYS+gsLMECljeq0zrqAzzGN wjwDLvOALEyu9HHPkcOj4Fq4ubixjVgmEjyv6p31AQoFSNjxg/jgKJWvfK2Y9Hbi 1dVTLobCXCPlc2ej38NTr2msirLrlvB7lDiG6yIsqHRSuLTBjtL/ejFz+Qu3UQ3q j8IAbfP5BEYa2HQ4zx0CAwEAAaOCA5IwggOOMB8GA1UdIwQYMBaAFKW01us2xOdr pt/EZAsBKiAEuGYjMB0GA1UdDgQWBBTQqie3+KZqV6jrUa5R+GB5y2kEdTAfBgNV HREEGDAWghR1aGNjb21tdW5pdHlwbGFuLmNvbTA+BgNVHSAENzA1MDMGBmeBDAEC ATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYD VR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1 c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6 Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy NTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy Q0ExLmNydDAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoA dgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY6dqZGgAAAEAwBH MEUCIQCJ4g/3ZxA1IHDuktGLhPQRgrH89fbVrpa1PTZlZ6cgTgIgd8Ra5b03Fpr2 Z6PIP+xFeGa24DTgTscHbiuQwAnXaXAAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GE hTS9pD0wSNf7qwAAAY6dqZHOAAAEAwBIMEYCIQC+jelt9Q+sIBcvjEVRg6sRKQ3A fPhH5XXtP8Gl3OhGpQIhAMpME3CCO2tv9BOkbsh6NEVbzJ/OYdJYxTXS8tYDhQKO AHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGOnamSAgAABAMA SDBGAiEAnu94r5/yT+VmSQrSXltGnkO/IINDv5SRdatrzOLYFhkCIQDp2Ven/RYO 94ZtxMvFI32ifuOwJMr/Ibb8wVT3pwIg7jANBgkqhkiG9w0BAQsFAAOCAgEAhFP6 pZA3Jam7cEIoGswgTRvi5n7GX4h+R06n9fYEEIi57AwhGDrPp4jv6S/gQMuDOYfH ciYii4JD7AYIsyBn5q1eYs4nu6GI244lnOEjpG5WUvyA0aW3j5+iYlBqH19YFUjx W52gint9HaGio6WrDGj9fRvLdx9mtciv9e38qrLF38wIWBXsjY7tH22SJ0TnrUVG 7CgFP1cOmRtSlpnkxGPDvDGFg+iIu06weZfmKNYmKfCaVwNO8tTJ/caI7s1EA99f hy4xNcGi4LXpJ4K2KHzrd2E120R1t6LCyB2ML6bn1l9ISADGoILTFtVS4jQjugdb kU15CUBo3rp9jFvVlJpAlCY0R+6Io7YM//uFRV51g4C/0x6ARtT0fInntDjW5OuS jFnidvIRPYNBc+4KuwIaKHkOVERD0cGdrCEq6JaDL91K79EumRikYBOgm9SRLxRl PuFPgu6/G2BFTEUSsZ4aMsS+7Ee4YjVNsrceO9bHsVObWC860HLi7SY0UkStrAEM /j7ICLtQBUut8AuCcwY0+YZhILqHdliikvGBY99HLkqZMTQBaxCOCw8IqxdpSTQt raUg8Sv02YrcYX/ed6o4Kmw9j9sxkK121WsBU+Hs940eMfTtQbKFnraMhKYm1mw+ GAGPWlapTOm3Nz0RAOQuyFap9XFvpJfHupNE5z4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIAehTHX+8fsegt2RP+R vONayq6USKa+YKL+dIyLTNJIXjFo2lutqqZ9pHlST9JG1nPGiZIeQjs4izywYcLH jEc8ZpX4D2wx8oLi8LJ5yw+4tlAtrFE7OPgcw2ktp4/JwOgD56QTWFiMiZNdn7EC Wz1Mz18MKoZWNYZ/YTYt6PZYdhL6CwswQKWN6rTOuoDPMY3CPAMu84AsTK70cc+R w6PgWri5uLGNWCYSPK/qnfUBCgVI2PGD+OAola98rZj0duLV1VMuhsJcI+VzZ6Pf w1OvaayKsuuW8HuUOIbrIiyodFK4tMGO0v96MXP5C7dRDeqPwgBt8/kERhrYdDjP HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10022001231085515959064391863602571419 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uhccommunityplan.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20766259956435448942236255697591411578885813822511361287020153946819504651161737017584405607887671986028523310253273013101183509649963108589298805546836786415458046720473003734586501239042447850055215089607159503372737952184984227080190211282749796101214499601863648812621254066737397664709507447175823906887919160361957355302394751330081695691556605408345684898690794487921079867667274057160828990123933159680126620486884740755580516401134172689977376341208244231405131995891331351193428023866252123896585680781241875561173542472319131688388062727158273536433252403712868902737132268412097150293260114252879204241181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d0aa27b7f8a66a57a8eb51ae51f86079cb690475 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhccommunityplan.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e9da991a0000004030047304502210089e20ff76710352070ee92d18b84f41182b1fcf5f6d5ae96b53d366567a7204e022077c45ae5bd37169af667a3c83fec457866b6e034e04ec7076e2b90c009d76970007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e9da991ce0000040300483046022100be8de96df50fac20172f8c455183ab11290dc07cf847e575ed3fc1a5dce846a5022100ca4c1370823b6b6ff413a46ec87a34455bcc9fce61d258c535d2f2d60385028e0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e9da9920200000403004830460221009eef78af9ff24fe566490ad25e5b469e43bf208343bf949175ab6bcce2d81619022100e9d957a7fd160ef7866dc4cbc5237da27ee3b024caff21b6fcc154f7a70220ee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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