www.trinityconsultants.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:bd:e7:a2:a1:cd:45:6b:1a:51:e3:89:03:9e:1a:68 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.trinityconsultants.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:bd:e7:a2:a1:cd:45:6b:1a:51:e3:89:03:9e:1a:68
Serial Number (int): 8961410202628592699148764170728381032
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c2:91:e6:5f:99:41:b4:3d:55:70:2b:ef:9c:68:97:9c:ac:be:84:f9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 65:b1:4f:e5:2e:f6:73:8d:37:bc:07:6f:88:2b:b8:e7:7b:3c:ce:1d
Fingerprint (sha256): 44:dc:d7:04:dd:c9:15:11:f4:46:ff:8f:58:ec:26:81:d9:2e:de:74:56:61:fa:d8:e5:33:d3:dc:ae:26:04:ed

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.trinityconsultants.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.trinityconsultants.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.trinityconsultants.com

Other certificates including the domain name trinityconsultants.com

(limited to 100 certificates)
www.summitmortgagetraining.com
*.trinityconsultants.com
india.polo-development.com
www.summitmortgagetraining.com
*.trinityconsultants.com
*.trinityconsultants.com
go.rescuevocations.org
*.trinityconsultants.com
trinityu.trinityconsultants.com
au.lakeshore.com
www.frailtycertification.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
www.summitmortgagetraining.com
*.trinityconsultants.com
www.trinityconsultants.com
ae.trinityconsultants.com
www.summitmortgagetraining.com
www.eatandlearnnm.com
*.trinityconsultants.com
www.pathwaylearningnetwork.com
www.summitmortgagetraining.com
www.mdronlinelearning.com
www.summitmortgagetraining.com
learn-rto8.com
www.summitmortgagetraining.com
blog.trinityconsultants.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
*.trinityconsultants.com
aimfast.qcefast.com
*.trinityconsultants.com
trainingacademy.anywhere365.io
*.trinityconsultants.com
mayoclinic.ekgguy.com
aimfast.qcefast.com
www.summitmortgagetraining.com
www.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
*.trinityconsultants.com
trinityu.trinityconsultants.com
platformparadigmshift.training
mayoclinic.ekgguy.com
australia.polo-development.com
bridgeyou.barlowcomputers.com
*.trinityconsultants.com
theosseminary.me
education.urbangreencouncil.org
helix21.ahacentre.org
www.summitmortgagetraining.com
www.awelearninghub.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
aimfast.qcefast.com
*.trinityconsultants.com
learning.employindy.org
*.trinityconsultants.com
uspa.polo-development.com
*.trinityconsultants.com
*.trinityconsultants.com
www.summitmortgagetraining.com
blog.trinityconsultants.com
theosseminary.me
ukraine.polo-development.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.trinityconsultants.com
*.trinityconsultants.com
learning.potawatomi.org
*.trinityconsultants.com
*.trinityconsultants.com
lms.singleuseendoscopy.com
www.ekgguy.com
*.trinityconsultants.com
smarterbahamas.com
au.lakeshore.com
*.trinityconsultants.com
*.trinityconsultants.com
www.summitmortgagetraining.com
*.trinityconsultants.com
*.trinityconsultants.com
www.trinityconsultants.com
www.summitmortgagetraining.com
www.pathwaylearningnetwork.com
*.trinityconsultants.com
www.tcacommunity.com
*.trinityconsultants.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.ekgguy.com
www.pathwaylearningnetwork.com
university.safefleet.net
aimfast.qcefast.com
www.ekgguy.com
www.summitmortgagetraining.com

Certificate

The complete raw certificate details for www.trinityconsultants.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHojCCBYqgAwIBAgIQBr3noqHNRWsaUeOJA54aaDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjQwMzI0MDAwMDAwWhcNMjQwOTI0MjM1OTU5WjAlMSMwIQYDVQQDExp3d3cudHJp
bml0eWNvbnN1bHRhbnRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMuZnjJJmif2c9hVPKXrN4Qj5VuSnGff66pfgLKaw23sRWalVsYJhF7oKrQ4
izWRjSHP5TPz6V6yvNLFOO71EJ+NJrAtEnAcUBloH3iOFVt7sxT6MJsbBl9c4zHL
IMwCOfoc9ymHMnEkUCI7cWAPZ+iVVtFwgvz7FoiKAz5J9sJMKZEpjldzCAY1fD+h
N8G3LutE3BS2Px6A/sxh3Im6ITR78N17RkahTx8BqRJATvGdKhIvq55zqrQOhFG3
YsoXp8kDsbOTzFkkPR0xBgiVeoO5x3tDD9zQYoK8EdQ619qL1zhIOtpRu3ht8vRc
fPgzibECxpYmpdshl7pLfelK4+ECAwEAAaOCA5UwggORMB8GA1UdIwQYMBaAFKW0
1us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBTCkeZfmUG0PVVwK++caJecrL6E
+TAlBgNVHREEHjAcghp3d3cudHJpbml0eWNvbnN1bHRhbnRzLmNvbTA+BgNVHSAE
NzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmww
SKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRM
U1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw
OTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIE
AgSCAW0EggFpAWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA
AY5vy7YLAAAEAwBGMEQCIHssVY3QQLM4nqcTfoo1EWUzccJ1Nz5wKhQKoGQkMPGR
AiBQqwDJz7QuCCIOwOpo4dofCuqdWRzFpmqbb/XRL2bNuAB2ANq2v2s/tbYin5vC
u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjm/LthkAAAQDAEcwRQIgXQA1oJeDz775
7cJB7A+/0xQP/8S5l4YX1kbwDZSHiOcCIQCITbOx2B0+d246sM85Wp72LWLzwHX8
QGrKWBROjXNOnAB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAAB
jm/LtmIAAAQDAEcwRQIgWVzRVnHhtnUf2L+VQ6Tp39Ml5IRK986DGDPA4Zn7vEsC
IQCfTDmSKaDUtPocCv7QSpaXlkkjvlrW32fuvxWuzBFArTANBgkqhkiG9w0BAQsF
AAOCAgEAX6ndjQ5MBuHoB36exetTq+jhTjQmCKdclAbkZs1n9HKtyo0mKN0/ljJz
Uma+aY3o9HTnjqgr7nDXY0kD9+Q3A+Z6n8tIcGcb5r/wWiqiKcRZdp4dzIXoJDKd
xWCQGYl3G3IEAFajoD8hYIEicEYYwraA2t3rTWQ/fm8axwZXQyXJe7qTgM6sDXLJ
BOTmV9MQ5TuEuXZa/DyfT/tbEclSUO5ZzgiQI1Jv2OijOy5Zbsm5UbwyGC2SWV4Y
53270g2JcPfKorfGaZB3ztIJDYHCFTcxe4uiZ4MdvfaQpEatT8pEenSaCcmyQTyX
7hdUhu8AqgMNmlwXFnEjNYmRZyvRFrJd2zVOeAhKk1lhQX5cHdAcNIpjTaXa1zcn
44ZSeWV6/O6E1kcfyQFeQffP/wblJeUKynIXYDKFr8NAaL6BVXRGMpcOcB/A0TL7
c73dcxHFSKSeYKqknc2dD3DdzzWTa4OPmP//11HNi9UydS0vY4igu7o2BDzzVPzR
sFdZaZgJgKpBzaXbOT8WN9dhjxAv1dEbQ9NTkZCHsYke5tXvF9PJyz8siY1HRe1v
96DvYAB3uGrBxmuHLjrdsKQyNeBlbTjLc5wJHiBOo5xzExXizsrff19/JbVkAg91
suBHVhcUwNK06BGXPLCfgLow84k8msLPV8C2BkblmlzWBahmNzk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5meMkmaJ/Zz2FU8pes3
hCPlW5KcZ9/rql+AsprDbexFZqVWxgmEXugqtDiLNZGNIc/lM/PpXrK80sU47vUQ
n40msC0ScBxQGWgfeI4VW3uzFPowmxsGX1zjMcsgzAI5+hz3KYcycSRQIjtxYA9n
6JVW0XCC/PsWiIoDPkn2wkwpkSmOV3MIBjV8P6E3wbcu60TcFLY/HoD+zGHciboh
NHvw3XtGRqFPHwGpEkBO8Z0qEi+rnnOqtA6EUbdiyhenyQOxs5PMWSQ9HTEGCJV6
g7nHe0MP3NBigrwR1DrX2ovXOEg62lG7eG3y9Fx8+DOJsQLGlial2yGXukt96Urj
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8961410202628592699148764170728381032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.trinityconsultants.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25702127744944462672561928418971880283532662662043020197966291343466169289907363316540343328474763932108493328572533126556586898195346379015084353695992754782536134697538915909705286477366294420994810056595581210226252317941454549495651690872815965132560495199995595160420385010785831162036242212157748417795690810216271569590401982769622760232317692684513136099699375921070922174797129893817608955106656297914135391445961752136181203473286805056316252457755990390820392617435543089933710278595750672080395934883778701295443406805997688363809588535868355127867554365613419944507285765639097814356016507245981122356193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c291e65f9941b43d55702bef9c68979cacbe84f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinityconsultants.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e6fcbb60b000004030046304402207b2c558dd040b3389ea7137e8a3511653371c275373e702a140aa0642430f191022050ab00c9cfb42e08220ec0ea68e1da1f0aea9d591cc5a66a9b6ff5d12f66cdb8007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e6fcbb619000004030047304502205d0035a09783cfbef9edc241ec0fbfd3140fffc4b9978617d646f00d948788e7022100884db3b1d81d3e776e3ab0cf395a9ef62d62f3c075fc406aca58144e8d734e9c0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e6fcbb66200000403004730450220595cd15671e1b6751fd8bf9543a4e9dfd325e4844af7ce831833c0e199fbbc4b0221009f4c399229a0d4b4fa1c0afed04a9697964923be5ad6df67eebf15aecc1140ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005fa9dd8d0e4c06e1e8077e9ec5eb53abe8e14e342608a75c9406e466cd67f472adca8d2628dd3f9632735266be698de8f474e78ea82bee70d7634903f7e43703e67a9fcb4870671be6bff05a2aa229c459769e1dcc85e824329dc560901989771b72040056a3a03f21608122704618c2b680daddeb4d643f7e6f1ac706574325c97bba9380ceac0d72c904e4e657d310e53b84b9765afc3c9f4ffb5b11c95250ee59ce089023526fd8e8a33b2e596ec9b951bc32182d92595e18e77dbbd20d8970f7caa2b7c6699077ced2090d81c21537317b8ba267831dbdf690a446ad4fca447a749a09c9b2413c97ee175486ef00aa030d9a5c17167123358991672bd116b25ddb354e78084a935961417e5c1dd01c348a634da5dad73727e3865279657afcee84d6471fc9015e41f7cfff06e525e50aca7217603285afc34068be8155744632970e701fc0d132fb73bddd7311c548a49e60aaa49dcd9d0f70ddcf35936b838f98ffffd751cd8bd532752d2f6388a0bbba36043cf354fcd1b0575969980980aa41cda5db393f1637d7618f102fd5d11b43d353919087b1891ee6d5ef17d3c9cb3f2c898d4745ed6ff7a0ef600077b86ac1c66b872e3addb0a43235e0656d38cb739c091e204ea39c731315e2cecadf7f5f7f25b564020f75b2e047561714c0d2b4e811973cb09f80ba30f3893c9ac2cf57c0b60646e59a5cd605a8663739