www.trinityconsultants.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 06:bd:e7:a2:a1:cd:45:6b:1a:51:e3:89:03:9e:1a:68 was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.trinityconsultants.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:bd:e7:a2:a1:cd:45:6b:1a:51:e3:89:03:9e:1a:68Serial Number (int): 8961410202628592699148764170728381032
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: c2:91:e6:5f:99:41:b4:3d:55:70:2b:ef:9c:68:97:9c:ac:be:84:f9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 65:b1:4f:e5:2e:f6:73:8d:37:bc:07:6f:88:2b:b8:e7:7b:3c:ce:1d
Fingerprint (sha256): 44:dc:d7:04:dd:c9:15:11:f4:46:ff:8f:58:ec:26:81:d9:2e:de:74:56:61:fa:d8:e5:33:d3:dc:ae:26:04:ed
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate www.trinityconsultants.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.trinityconsultants.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.trinityconsultants.com
Other certificates including the domain name trinityconsultants.com
(limited to 100 certificates)
www.summitmortgagetraining.com
*.trinityconsultants.com
india.polo-development.com
www.summitmortgagetraining.com
*.trinityconsultants.com
*.trinityconsultants.com
go.rescuevocations.org
*.trinityconsultants.com
trinityu.trinityconsultants.com
au.lakeshore.com
www.frailtycertification.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
www.summitmortgagetraining.com
*.trinityconsultants.com
www.trinityconsultants.com
ae.trinityconsultants.com
www.summitmortgagetraining.com
www.eatandlearnnm.com
*.trinityconsultants.com
www.pathwaylearningnetwork.com
www.summitmortgagetraining.com
www.mdronlinelearning.com
www.summitmortgagetraining.com
learn-rto8.com
www.summitmortgagetraining.com
blog.trinityconsultants.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
*.trinityconsultants.com
aimfast.qcefast.com
*.trinityconsultants.com
trainingacademy.anywhere365.io
*.trinityconsultants.com
mayoclinic.ekgguy.com
aimfast.qcefast.com
www.summitmortgagetraining.com
www.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
*.trinityconsultants.com
trinityu.trinityconsultants.com
platformparadigmshift.training
mayoclinic.ekgguy.com
australia.polo-development.com
bridgeyou.barlowcomputers.com
*.trinityconsultants.com
theosseminary.me
education.urbangreencouncil.org
helix21.ahacentre.org
www.summitmortgagetraining.com
www.awelearninghub.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
aimfast.qcefast.com
*.trinityconsultants.com
learning.employindy.org
*.trinityconsultants.com
uspa.polo-development.com
*.trinityconsultants.com
*.trinityconsultants.com
www.summitmortgagetraining.com
blog.trinityconsultants.com
theosseminary.me
ukraine.polo-development.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.trinityconsultants.com
*.trinityconsultants.com
learning.potawatomi.org
*.trinityconsultants.com
*.trinityconsultants.com
lms.singleuseendoscopy.com
www.ekgguy.com
*.trinityconsultants.com
smarterbahamas.com
au.lakeshore.com
*.trinityconsultants.com
*.trinityconsultants.com
www.summitmortgagetraining.com
*.trinityconsultants.com
*.trinityconsultants.com
www.trinityconsultants.com
www.summitmortgagetraining.com
www.pathwaylearningnetwork.com
*.trinityconsultants.com
www.tcacommunity.com
*.trinityconsultants.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
www.pathwaylearningnetwork.com
university.safefleet.net
aimfast.qcefast.com
www.ekgguy.com
www.summitmortgagetraining.com
*.trinityconsultants.com
india.polo-development.com
www.summitmortgagetraining.com
*.trinityconsultants.com
*.trinityconsultants.com
go.rescuevocations.org
*.trinityconsultants.com
trinityu.trinityconsultants.com
au.lakeshore.com
www.frailtycertification.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
www.summitmortgagetraining.com
*.trinityconsultants.com
www.trinityconsultants.com
ae.trinityconsultants.com
www.summitmortgagetraining.com
www.eatandlearnnm.com
*.trinityconsultants.com
www.pathwaylearningnetwork.com
www.summitmortgagetraining.com
www.mdronlinelearning.com
www.summitmortgagetraining.com
learn-rto8.com
www.summitmortgagetraining.com
blog.trinityconsultants.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
*.trinityconsultants.com
aimfast.qcefast.com
*.trinityconsultants.com
trainingacademy.anywhere365.io
*.trinityconsultants.com
mayoclinic.ekgguy.com
aimfast.qcefast.com
www.summitmortgagetraining.com
www.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
*.trinityconsultants.com
trinityu.trinityconsultants.com
platformparadigmshift.training
mayoclinic.ekgguy.com
australia.polo-development.com
bridgeyou.barlowcomputers.com
*.trinityconsultants.com
theosseminary.me
education.urbangreencouncil.org
helix21.ahacentre.org
www.summitmortgagetraining.com
www.awelearninghub.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
aimfast.qcefast.com
*.trinityconsultants.com
learning.employindy.org
*.trinityconsultants.com
uspa.polo-development.com
*.trinityconsultants.com
*.trinityconsultants.com
www.summitmortgagetraining.com
blog.trinityconsultants.com
theosseminary.me
ukraine.polo-development.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.trinityconsultants.com
*.trinityconsultants.com
learning.potawatomi.org
*.trinityconsultants.com
*.trinityconsultants.com
lms.singleuseendoscopy.com
www.ekgguy.com
*.trinityconsultants.com
smarterbahamas.com
au.lakeshore.com
*.trinityconsultants.com
*.trinityconsultants.com
www.summitmortgagetraining.com
*.trinityconsultants.com
*.trinityconsultants.com
www.trinityconsultants.com
www.summitmortgagetraining.com
www.pathwaylearningnetwork.com
*.trinityconsultants.com
www.tcacommunity.com
*.trinityconsultants.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
www.pathwaylearningnetwork.com
university.safefleet.net
aimfast.qcefast.com
www.ekgguy.com
www.summitmortgagetraining.com
Certificate
The complete raw certificate details for www.trinityconsultants.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHojCCBYqgAwIBAgIQBr3noqHNRWsaUeOJA54aaDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjQwMzI0MDAwMDAwWhcNMjQwOTI0MjM1OTU5WjAlMSMwIQYDVQQDExp3d3cudHJp bml0eWNvbnN1bHRhbnRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuZnjJJmif2c9hVPKXrN4Qj5VuSnGff66pfgLKaw23sRWalVsYJhF7oKrQ4 izWRjSHP5TPz6V6yvNLFOO71EJ+NJrAtEnAcUBloH3iOFVt7sxT6MJsbBl9c4zHL IMwCOfoc9ymHMnEkUCI7cWAPZ+iVVtFwgvz7FoiKAz5J9sJMKZEpjldzCAY1fD+h N8G3LutE3BS2Px6A/sxh3Im6ITR78N17RkahTx8BqRJATvGdKhIvq55zqrQOhFG3 YsoXp8kDsbOTzFkkPR0xBgiVeoO5x3tDD9zQYoK8EdQ619qL1zhIOtpRu3ht8vRc fPgzibECxpYmpdshl7pLfelK4+ECAwEAAaOCA5UwggORMB8GA1UdIwQYMBaAFKW0 1us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBTCkeZfmUG0PVVwK++caJecrL6E +TAlBgNVHREEHjAcghp3d3cudHJpbml0eWNvbnN1bHRhbnRzLmNvbTA+BgNVHSAE NzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0 LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2Vy dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmww SKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRM U1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0 dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw OTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIE AgSCAW0EggFpAWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA AY5vy7YLAAAEAwBGMEQCIHssVY3QQLM4nqcTfoo1EWUzccJ1Nz5wKhQKoGQkMPGR AiBQqwDJz7QuCCIOwOpo4dofCuqdWRzFpmqbb/XRL2bNuAB2ANq2v2s/tbYin5vC u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjm/LthkAAAQDAEcwRQIgXQA1oJeDz775 7cJB7A+/0xQP/8S5l4YX1kbwDZSHiOcCIQCITbOx2B0+d246sM85Wp72LWLzwHX8 QGrKWBROjXNOnAB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAAB jm/LtmIAAAQDAEcwRQIgWVzRVnHhtnUf2L+VQ6Tp39Ml5IRK986DGDPA4Zn7vEsC IQCfTDmSKaDUtPocCv7QSpaXlkkjvlrW32fuvxWuzBFArTANBgkqhkiG9w0BAQsF AAOCAgEAX6ndjQ5MBuHoB36exetTq+jhTjQmCKdclAbkZs1n9HKtyo0mKN0/ljJz Uma+aY3o9HTnjqgr7nDXY0kD9+Q3A+Z6n8tIcGcb5r/wWiqiKcRZdp4dzIXoJDKd xWCQGYl3G3IEAFajoD8hYIEicEYYwraA2t3rTWQ/fm8axwZXQyXJe7qTgM6sDXLJ BOTmV9MQ5TuEuXZa/DyfT/tbEclSUO5ZzgiQI1Jv2OijOy5Zbsm5UbwyGC2SWV4Y 53270g2JcPfKorfGaZB3ztIJDYHCFTcxe4uiZ4MdvfaQpEatT8pEenSaCcmyQTyX 7hdUhu8AqgMNmlwXFnEjNYmRZyvRFrJd2zVOeAhKk1lhQX5cHdAcNIpjTaXa1zcn 44ZSeWV6/O6E1kcfyQFeQffP/wblJeUKynIXYDKFr8NAaL6BVXRGMpcOcB/A0TL7 c73dcxHFSKSeYKqknc2dD3DdzzWTa4OPmP//11HNi9UydS0vY4igu7o2BDzzVPzR sFdZaZgJgKpBzaXbOT8WN9dhjxAv1dEbQ9NTkZCHsYke5tXvF9PJyz8siY1HRe1v 96DvYAB3uGrBxmuHLjrdsKQyNeBlbTjLc5wJHiBOo5xzExXizsrff19/JbVkAg91 suBHVhcUwNK06BGXPLCfgLow84k8msLPV8C2BkblmlzWBahmNzk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5meMkmaJ/Zz2FU8pes3 hCPlW5KcZ9/rql+AsprDbexFZqVWxgmEXugqtDiLNZGNIc/lM/PpXrK80sU47vUQ n40msC0ScBxQGWgfeI4VW3uzFPowmxsGX1zjMcsgzAI5+hz3KYcycSRQIjtxYA9n 6JVW0XCC/PsWiIoDPkn2wkwpkSmOV3MIBjV8P6E3wbcu60TcFLY/HoD+zGHciboh NHvw3XtGRqFPHwGpEkBO8Z0qEi+rnnOqtA6EUbdiyhenyQOxs5PMWSQ9HTEGCJV6 g7nHe0MP3NBigrwR1DrX2ovXOEg62lG7eG3y9Fx8+DOJsQLGlial2yGXukt96Urj 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8961410202628592699148764170728381032 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.trinityconsultants.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25702127744944462672561928418971880283532662662043020197966291343466169289907363316540343328474763932108493328572533126556586898195346379015084353695992754782536134697538915909705286477366294420994810056595581210226252317941454549495651690872815965132560495199995595160420385010785831162036242212157748417795690810216271569590401982769622760232317692684513136099699375921070922174797129893817608955106656297914135391445961752136181203473286805056316252457755990390820392617435543089933710278595750672080395934883778701295443406805997688363809588535868355127867554365613419944507285765639097814356016507245981122356193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c291e65f9941b43d55702bef9c68979cacbe84f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinityconsultants.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 005fa9dd8d0e4c06e1e8077e9ec5eb53abe8e14e342608a75c9406e466cd67f472adca8d2628dd3f9632735266be698de8f474e78ea82bee70d7634903f7e43703e67a9fcb4870671be6bff05a2aa229c459769e1dcc85e824329dc560901989771b72040056a3a03f21608122704618c2b680daddeb4d643f7e6f1ac706574325c97bba9380ceac0d72c904e4e657d310e53b84b9765afc3c9f4ffb5b11c95250ee59ce089023526fd8e8a33b2e596ec9b951bc32182d92595e18e77dbbd20d8970f7caa2b7c6699077ced2090d81c21537317b8ba267831dbdf690a446ad4fca447a749a09c9b2413c97ee175486ef00aa030d9a5c17167123358991672bd116b25ddb354e78084a935961417e5c1dd01c348a634da5dad73727e3865279657afcee84d6471fc9015e41f7cfff06e525e50aca7217603285afc34068be8155744632970e701fc0d132fb73bddd7311c548a49e60aaa49dcd9d0f70ddcf35936b838f98ffffd751cd8bd532752d2f6388a0bbba36043cf354fcd1b0575969980980aa41cda5db393f1637d7618f102fd5d11b43d353919087b1891ee6d5ef17d3c9cb3f2c898d4745ed6ff7a0ef600077b86ac1c66b872e3addb0a43235e0656d38cb739c091e204ea39c731315e2cecadf7f5f7f25b564020f75b2e047561714c0d2b4e811973cb09f80ba30f3893c9ac2cf57c0b60646e59a5cd605a8663739