southperth.wa.gov.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:56:81:db:43:e4:8e:b4:43:a1:d5:55:3f:f4:0b:fa was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=southperth.wa.gov.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:56:81:db:43:e4:8e:b4:43:a1:d5:55:3f:f4:0b:fa
Serial Number (int): 12412223294716504367792675056023505914
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8b:3a:86:e9:6b:21:cb:bb:3a:8d:ac:11:e1:a6:f4:75:12:23:31:c9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 08:33:b2:3d:ed:7c:9e:c8:78:29:8d:35:62:6c:86:35:b0:be:6a:03
Fingerprint (sha256): 3c:6d:06:1a:84:3f:35:da:45:a1:9d:f0:97:71:ba:af:e8:03:d0:f1:3d:8a:2b:f9:69:e8:ea:08:7b:7b:5b:e6

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate southperth.wa.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southperth.wa.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

southperth.wa.gov.au

Other certificates including the domain name southperth.wa.gov.au

(limited to 100 certificates)
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
www.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
library.southperth.wa.gov.au
awpe.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
m.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au

Certificate

The complete raw certificate details for southperth.wa.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHlzCCBX+gAwIBAgIQCVaB20PkjrRDodVVP/QL+jANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMTA3MDAwMDAwWhcNMjQwNTA3MjM1OTU5WjAfMR0wGwYDVQQDExRzb3V0aHBl
cnRoLndhLmdvdi5hdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL++
ihWPxXPjRVlbnhrTTEtgkyFlx2VpzdrGNzcw8P1JUuFBHy0fU1h7JrlmUt2gEYtW
fAO3qgneCl0unZpScSFClIqxQObCy/XJJ2F4BwRtnWm+Ir07CQUBa9xyJGSGSYge
h3auH/7iOKwm0ZhwEe9ifhZrIEnLshWS2wD2lnM5FO0T5RhU1nN2BYZhC4D8j3xM
9+jT+zeEnKrH1P4bLMuc/MohrdlKBKdelu1V6hSX6hoMd4wIWAYScguXv6wMQpqG
/O5ayFYISAvCuB0uqeCv4bMEgx2P58J3f1SREbSR280W/MWhA9RWSjLKv5eVmBkS
57oy02P+vBgoTkWSabkCAwEAAaOCA5AwggOMMB8GA1UdIwQYMBaAFKW01us2xOdr
pt/EZAsBKiAEuGYjMB0GA1UdDgQWBBSLOobpayHLuzqNrBHhpvR1EiMxyTAfBgNV
HREEGDAWghRzb3V0aHBlcnRoLndhLmdvdi5hdTA+BgNVHSAENzA1MDMGBmeBDAEC
ATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYD
VR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1
c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6
Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy
NTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy
Q0ExLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgA
dgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYuna1McAAAEAwBH
MEUCID63Ce1VzeEeiF3C8j7X6BDuR+Ji1pC2Ca3mTsQypQu7AiEAtiuFgpGUTl3S
RI+wa5shItpWn+wl98ubP9un1Ay1nbYAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bd
LIHZu7+rOdiEcwAAAYuna1NBAAAEAwBHMEUCIDhDCcAhaCn3Qyd9bhyQgl1Yfd4W
nzw5nqAKbp5y9dPCAiEAortDfR/DBOYTnbL84LJGB1JG3uGTwEkTwl960+PIHzEA
dgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYuna1NwAAAEAwBH
MEUCIFE57Ypnpg/5nPqmYBKY7luMmfR2C+gcXwOzjVbX1rnXAiEAk/96hVmoTYlc
uCvZFH7UqpEq2/l8w93SbeNvhytnc0MwDQYJKoZIhvcNAQELBQADggIBAE52AhS9
9BVvuXhK7VKv23LOOggRnHZGjfcPV/noeizB+2PFUua94yb3Z52CDFj9iI30b7ej
pv7wmY0gPCpEBUJXr7C5q8SoNBCA8LPDw/9ZV4FyVI1+KrHbmA8ZYii2ZR7PEhl/
jV8fiy5e3qHHVnOOqem9AYWx5pnZxnUQSRAj0hbzLzt/Ja/PfC8hgl/iJIK6gzy4
gWo6T+/GGjpK8v7VbQMEGHK3AduY/8rRraAXEW9MUSCXkFXnxzCka/Hk/kcKVOkg
vd9LuJiaeridoKbzJPNhRjoR1llQKnkC64F4TM4F+Th9FiTY3l7LYMeId/RRUWWz
Qhk6ztvZEdX/IOWaSBux4jI41kng/2E8ebOtUn7z2yaIeF+bc/niN+VmHcS/Y2D4
vVMOhh/Ah3OqLNgcPzwUrGyvKG1/OaEUptaYFyBca2fAvv0u1VHyaC5E4S8K/e8b
TueqGbtUD9hSm4EAJ+EXWaZVvttlTZ9d1Kp9H1p5vmfPgydzcptT2o0fWS8Wi4wd
qnSzD6SbvPriJePN83AjKNHnGGk3h3V688g4Cgm8O24xpxEjqx3XL4plRwgEdHKK
7cPxiNb7qZPXd6bvLqwceJ5V/IyOF7gN4hxEFy7CezTSXjLlGWKzyyjj2dI0AJGV
IFxj4LyKp3xaBA/5IIZeykYaIJ+xgpelj2PN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv76KFY/Fc+NFWVueGtNM
S2CTIWXHZWnN2sY3NzDw/UlS4UEfLR9TWHsmuWZS3aARi1Z8A7eqCd4KXS6dmlJx
IUKUirFA5sLL9cknYXgHBG2dab4ivTsJBQFr3HIkZIZJiB6Hdq4f/uI4rCbRmHAR
72J+FmsgScuyFZLbAPaWczkU7RPlGFTWc3YFhmELgPyPfEz36NP7N4ScqsfU/hss
y5z8yiGt2UoEp16W7VXqFJfqGgx3jAhYBhJyC5e/rAxCmob87lrIVghIC8K4HS6p
4K/hswSDHY/nwnd/VJERtJHbzRb8xaED1FZKMsq/l5WYGRLnujLTY/68GChORZJp
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12412223294716504367792675056023505914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southperth.wa.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24205474724348173980411296910746036710921141985501899414098316266050088737295351539825158231927997240331107584791049212775786880279243842197600846218203417836076439457833070608969688940545418424533123918945375888040176211635447153413883861749724328606583982430761062429355000230491992590015745655611199488667548968064560593403745389938050065347278829685391733182571342724397370512800579100062186085670055506260281162782129022014778952905090382600437690030396480115355750378278561979980937610020497903986925423001534121720054930930838350038133139393246264135847859677542469335013252520461397921858902121616298617235897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b3a86e96b21cbbb3a8dac11e1a6f475122331c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southperth.wa.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004e760214bdf4156fb9784aed52afdb72ce3a08119c76468df70f57f9e87a2cc1fb63c552e6bde326f7679d820c58fd888df46fb7a3a6fef0998d203c2a44054257afb0b9abc4a8341080f0b3c3c3ff59578172548d7e2ab1db980f196228b6651ecf12197f8d5f1f8b2e5edea1c756738ea9e9bd0185b1e699d9c67510491023d216f32f3b7f25afcf7c2f21825fe22482ba833cb8816a3a4fefc61a3a4af2fed56d03041872b701db98ffcad1ada017116f4c5120979055e7c730a46bf1e4fe470a54e920bddf4bb8989a7ab89da0a6f324f361463a11d659502a7902eb81784cce05f9387d1624d8de5ecb60c78877f4515165b342193acedbd911d5ff20e59a481bb1e23238d649e0ff613c79b3ad527ef3db2688785f9b73f9e237e5661dc4bf6360f8bd530e861fc08773aa2cd81c3f3c14ac6caf286d7f39a114a6d69817205c6b67c0befd2ed551f2682e44e12f0afdef1b4ee7aa19bb540fd8529b810027e11759a655bedb654d9f5dd4aa7d1f5a79be67cf832773729b53da8d1f592f168b8c1daa74b30fa49bbcfae225e3cdf3702328d1e718693787757af3c8380a09bc3b6e31a71123ab1dd72f8a6547080474728aedc3f188d6fba993d777a6ef2eac1c789e55fc8c8e17b80de21c44172ec27b34d25e32e51962b3cb28e3d9d234009195205c63e0bc8aa77c5a040ff920865eca461a209fb18297a58f63cd