naft.com.sa
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0c:df:9f:c5:e1:a5:01:75:cc:21:c6:20:1a:38:96:e2 was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=naft.com.sa
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:df:9f:c5:e1:a5:01:75:cc:21:c6:20:1a:38:96:e2Serial Number (int): 17111858729780859827063748415607838434
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 61:83:b3:a7:50:ad:64:2d:7c:5d:f1:ae:e3:5e:b8:4f:67:16:dd:4c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 6f:3d:c3:95:50:62:9f:d9:51:59:d3:ce:02:04:c5:7a:16:16:86:44
Fingerprint (sha256): 51:b8:83:5d:96:6f:96:c0:eb:62:ca:ee:47:40:77:e1:d5:9e:45:57:2e:9d:26:0d:71:e5:a1:97:9c:21:93:f8
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate naft.com.sa
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for naft.com.sa
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
naft.com.sa
Other certificates including the domain name naft.com.sa
(limited to 100 certificates)
soporte.m-studio.one
helpdesk.media-technica.com
support.lpros.biz
support.jumbish.co
helpdesk.royalamericanhospitality.com
support.jumbish.co
cpanel.naft.com.sa
mail.naft.com.sa
support.cymetricx.com
support.snapcastweather.com
helpdesk.royalamericanhospitality.com
tktdesk.qtesting.online
support.lmp360mediagroup.com
helpdesk.fibraforte.it
support.xeroxuae.cloud
support.jumbish.co
ticket.savvyhawk.net
support.snapcastweather.com
support.intellitechsystems.co.za
help.rmgautofinance.org
support.intellitechsystems.co.za
support.maxopolyworldnews.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
suporte.sanus.tech
support.firstresponse.solutions
helpdesk.media-technica.com
naft.com.sa
support.jumbish.co
support.cloudpso.com
tsmsupport.lenovocloudsoftware.com
soporte.avp-ec.com
support.jumbish.co
support.vembu.com
assistenza.ecologica.it
support.yoizen.com
help2.jdeckman.com
support.periodik.co
support.intellitechsystems.co.za
support.lpros.biz
support.intellitechsystems.co.za
support.jumbish.co
it.ronati.com
naft.com.sa
support.tilopay.com
support.intellitechsystems.co.za
soportesistemas.uaa.com.ar
support.threepedals.com
support.intellitechsystems.co.za
support.caprarotechnologies.com
support.intellitechsystems.co.za
support.sreeveniv.com
survey.naft.com.sa
support.firstresponse.solutions
support.jumbish.co
mail.naft.com.sa
support.tilopay.com
support.swarmrewards.io
mail.naft.com.sa
suporte.pizzattolog.com.br
support.intellitechsystems.co.za
websupport.cosmickmedia.com
support.intellitechsystems.co.za
support.ehakkexpress.com
tsmsupport.lenovocloudsoftware.com
suporte.pizzattolog.com.br
support.evareg.com
cpanel.naft.com.sa
support.threepedals.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
tsmsupport.lenovocloudsoftware.com
support.cymetricx.com
support.ehakkexpress.com
soporte.tecnocomprascr.com
support.firstresponse.solutions
naft.com.sa
support.vembu.com
helpdesk.fibraforte.it
help.odce.arizona.edu
binance.dlocal.com
support.intellitechsystems.co.za
helpdesk.ga-integraciones.com
help.slice.lol
naft.com.sa
support.jumbish.co
staff-kb.profilegorilla.com
soportesistemas.uaa.com.ar
support.ibaia-immobilier.com
cpanel.naft.com.sa
ticket.savvyhawk.net
support.intellitechsystems.co.za
staff-kb.profilegorilla.com
tsmsupport.lenovocloudsoftware.com
support.sreeveniv.com
knowledge.telware.com
support.lpros.biz
survey.naft.com.sa
support.vembu.com
fuv.citek.vn
helpdesk.media-technica.com
support.lpros.biz
support.jumbish.co
helpdesk.royalamericanhospitality.com
support.jumbish.co
cpanel.naft.com.sa
mail.naft.com.sa
support.cymetricx.com
support.snapcastweather.com
helpdesk.royalamericanhospitality.com
tktdesk.qtesting.online
support.lmp360mediagroup.com
helpdesk.fibraforte.it
support.xeroxuae.cloud
support.jumbish.co
ticket.savvyhawk.net
support.snapcastweather.com
support.intellitechsystems.co.za
help.rmgautofinance.org
support.intellitechsystems.co.za
support.maxopolyworldnews.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
suporte.sanus.tech
support.firstresponse.solutions
helpdesk.media-technica.com
naft.com.sa
support.jumbish.co
support.cloudpso.com
tsmsupport.lenovocloudsoftware.com
soporte.avp-ec.com
support.jumbish.co
support.vembu.com
assistenza.ecologica.it
support.yoizen.com
help2.jdeckman.com
support.periodik.co
support.intellitechsystems.co.za
support.lpros.biz
support.intellitechsystems.co.za
support.jumbish.co
it.ronati.com
naft.com.sa
support.tilopay.com
support.intellitechsystems.co.za
soportesistemas.uaa.com.ar
support.threepedals.com
support.intellitechsystems.co.za
support.caprarotechnologies.com
support.intellitechsystems.co.za
support.sreeveniv.com
survey.naft.com.sa
support.firstresponse.solutions
support.jumbish.co
mail.naft.com.sa
support.tilopay.com
support.swarmrewards.io
mail.naft.com.sa
suporte.pizzattolog.com.br
support.intellitechsystems.co.za
websupport.cosmickmedia.com
support.intellitechsystems.co.za
support.ehakkexpress.com
tsmsupport.lenovocloudsoftware.com
suporte.pizzattolog.com.br
support.evareg.com
cpanel.naft.com.sa
support.threepedals.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
tsmsupport.lenovocloudsoftware.com
support.cymetricx.com
support.ehakkexpress.com
soporte.tecnocomprascr.com
support.firstresponse.solutions
naft.com.sa
support.vembu.com
helpdesk.fibraforte.it
help.odce.arizona.edu
binance.dlocal.com
support.intellitechsystems.co.za
helpdesk.ga-integraciones.com
help.slice.lol
naft.com.sa
support.jumbish.co
staff-kb.profilegorilla.com
soportesistemas.uaa.com.ar
support.ibaia-immobilier.com
cpanel.naft.com.sa
ticket.savvyhawk.net
support.intellitechsystems.co.za
staff-kb.profilegorilla.com
tsmsupport.lenovocloudsoftware.com
support.sreeveniv.com
knowledge.telware.com
support.lpros.biz
survey.naft.com.sa
support.vembu.com
fuv.citek.vn
Certificate
The complete raw certificate details for naft.com.sa in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhTCCBW2gAwIBAgIQDN+fxeGlAXXMIcYgGjiW4jANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjI1MDAwMDAwWhcNMjQwNjI1MjM1OTU5WjAWMRQwEgYDVQQDEwtuYWZ0LmNv bS5zYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcGKcwvMVczFMJ5 zcgZSNje16XXs1SYAAWXguk8idWtzK85yhIzBwnAuGc3ZhK2tdRBMJH5eLR3Xdwu yMk+aY/rnBW7U8h/UJeILH4yrJkGYkzFjshTMG1+BR8SBbhI2MEv2gz/8Hts77FQ OOY6n2FXHGchOpPgYK7bgLm+aFZW7rts+NB00Ss033a18YjkkNyd00wPBR0CVSNh kdUZlv5i99DdaNpGRiIo17OANciS2h8rxJsmfrYaIlLjGsMoPvZ1xg7BAVgTAKni p2czLHstHnKOMG3LKDF2HJ01kzVeO+wdkVzhu8c5TTx/oL2jfsLhjplBAE4njSZq ccwusikCAwEAAaOCA4cwggODMB8GA1UdIwQYMBaAFKW01us2xOdrpt/EZAsBKiAE uGYjMB0GA1UdDgQWBBRhg7OnUK1kLXxd8a7jXrhPZxbdTDAWBgNVHREEDzANggtu YWZ0LmNvbS5zYTA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhto dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2 U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDCBhwYI KwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9U cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNVHRMBAf8E AjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYyedKmsAAAEAwBHMEUCICPXrRIZM8TD1YJKJuA+ S4CJYBASX+PDb2M+BjHzZGcrAiEA9XbRbMcH5VKg4T9EqAwQlgPVgHmzgcYI9BfR Sm6nMLcAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYyedKmM AAAEAwBHMEUCIFvXoRwrorA12aZiCoAqD5f1pG8t39pJUv7E8z31gCAVAiEAtiGf zfU7D/FGugSQDu2sMGub3tMRhdqZqt3q9al30DsAdgDatr9rP7W2Ip+bwrtca+hw kXFsu1GEhTS9pD0wSNf7qwAAAYyedKl+AAAEAwBHMEUCIAwBHMfg/xhT3WKXNnx4 cVzQGCIjwxAFZpaDvEI4zcurAiEAgR8ElTByRq0mshrbk/zy3RS6xQOgple5KxZ0 i38xuHswDQYJKoZIhvcNAQELBQADggIBABRb2zzmEiv0EUAW6jV4W83yX+NbvjlR YkZFlkXA5d/KgjoQoOpFeKKxnrDL9r/Yu1bn8ZYFqjEUv9XIjteON6cXvrSxI4Me aqBFstEbprtYioYYnhBlGBe2BH0YuUBiHLcH8TXdv9pMyIv5FFcL+Zn27wmQdlgp ofbYoqA6/E92cbre5YKtiFC+aMjVUMk9Qy+eFsh9BNflEq4W1CTd3En+bjcfPYFQ rMDLcO25uNMD4YVVWCRdq2pMVnYJded1skQZIYYYDHLVQN5iIpZNzlC8y5gTBMpf x+qGXxSzatYpqFTxdt845QQ78JLnbO/t9x3mUIh6XtPo2WVn5HcUntd4MjauDBAK slQrkrarNf5mg/+bVwHVHJy/TP+Vk/JqjmVZ6CQ5ALidWPmEKQgJmQhzHtf3YigZ VwA5z3eBi2k9FC8bwpk15tjuB6wY/vrEXM5xBgYA10sK1rujzWSt8QvncJpin4pU EUj0iaTtLpKmI0aMOrfmoj11+apckP8BQJIqsUsf8W1vSjolEjyALhQ6YaRZ/Lw2 GOpwDG3CjDb3OuIY4M0bw8IKDACDYV0ZU2MZMfwF+zgvMasoN2GlYP/OHUH5S6JW ZTe/mBjVqpqqcEf++HCBpoNMpYlEJUyu0x4/LrMM5HURpGxXtD3X92DUbC4tLcks WuUAGAqHuNOB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwYpzC8xVzMUwnnNyBlI 2N7XpdezVJgABZeC6TyJ1a3MrznKEjMHCcC4ZzdmEra11EEwkfl4tHdd3C7IyT5p j+ucFbtTyH9Ql4gsfjKsmQZiTMWOyFMwbX4FHxIFuEjYwS/aDP/we2zvsVA45jqf YVccZyE6k+BgrtuAub5oVlbuu2z40HTRKzTfdrXxiOSQ3J3TTA8FHQJVI2GR1RmW /mL30N1o2kZGIijXs4A1yJLaHyvEmyZ+thoiUuMawyg+9nXGDsEBWBMAqeKnZzMs ey0eco4wbcsoMXYcnTWTNV477B2RXOG7xzlNPH+gvaN+wuGOmUEATieNJmpxzC6y KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17111858729780859827063748415607838434 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naft.com.sa' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23104649031414238353126750859096740331039791665095652281081690838464693802077021505757304775147631968506351223668788758307667436160320950329419806939029232129669762507698626467962966465701155626388857815553928137416423519220879325989026660581855417156778383629868124871451589159145107613508473571804503058543139146421623887781254041718773409221460488014635974988378806772140405609341594139219012708539118348687305778198917076811041357418647850738862022572938162539784711638936390311506472111704600913942892458362198111976106563409592736971814855546819700126210505610446222598057672184024131397832150671120761164313129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6183b3a750ad642d7c5df1aee35eb84f6716dd4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naft.com.sa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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