DFIDCmg.dfid.gov.uk
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 05:85:c5:69:60:7d:9f:77:bb:14:20:22:75:0d:03:70 was issued on by DigiCert, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=DFIDCmg.dfid.gov.uk
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:85:c5:69:60:7d:9f:77:bb:14:20:22:75:0d:03:70Serial Number (int): 7340719444621124551157267450240500592
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 99:3c:20:bf:26:93:90:47:a1:db:a5:d9:65:72:4a:be:27:99:96:52
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): d5:49:b2:a2:a4:82:29:be:38:a9:98:4b:2c:1d:cb:b9:5c:f1:f0:b4
Fingerprint (sha256): 52:c2:ec:66:c5:57:17:df:d4:ad:8a:76:1d:62:66:3d:b0:3f:a1:7c:9b:45:9a:f6:41:1e:11:e2:8f:8e:d9:b7
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate DFIDCmg.dfid.gov.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for DFIDCmg.dfid.gov.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
DFIDCmg.dfid.gov.uk
www.DFIDCmg.dfid.gov.uk
www.DFIDCmg.dfid.gov.uk
Other certificates including the domain name dfid.gov.uk
(limited to 100 certificates)
www.gov.uk
dfidexchange.dfid.gov.uk
intouch6.dfid.gov.uk
dfid.gov.uk
intouch3.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
skypeexternal.dfid.gov.uk
dfidexchange.dfid.gov.uk
projects.dfid.gov.uk
*.dfid.gov.uk
intouch.dfid.gov.uk
supplierportal.dfid.gov.uk
Skypeexternal.dfid.gov.uk
aipbeta.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
HRPassport.dfid.gov.uk
www.dfid.gov.uk
devtracker.dfid.gov.uk
www.gov.uk
www.gov.uk
intouch.dfid.gov.uk
adfs3.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
intouch5.dfid.gov.uk
projects.dfid.gov.uk
devtracker.dfid.gov.uk
intouch3.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
Devhrpassport.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker.dfid.gov.uk
Devhrpassport.dfid.gov.uk
insight.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
supplierportal.dfid.gov.uk
devtracker.dfid.gov.uk
adfs3.dfid.gov.uk
devtracker.dfid.gov.uk
vault.dfid.gov.uk
intouch6.dfid.gov.uk
adfs3.dfid.gov.uk
insight.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Access.dfid.gov.uk
Index.dfid.gov.uk
DfidCmg.Dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
www.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
skypeexternal.dfid.gov.uk
azpphrpassport.dfid.gov.uk
supplierportal.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
www.gov.uk
azpphrpassport.dfid.gov.uk
dfidexchange.dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
intouch5.dfid.gov.uk
cscuk.dfid.gov.uk
www.gov.uk
adfstoken.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Devhrpassport.dfid.gov.uk
*.dfid.gov.uk
vault.dfid.gov.uk
access.dfid.gov.uk
dfidexchange.dfid.gov.uk
devtracker.dfid.gov.uk
supplierportal.dfid.gov.uk
dfidexchange.dfid.gov.uk
dfidexchange.dfid.gov.uk
access.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
Index.dfid.gov.uk
azpphrpassport.dfid.gov.uk
adfs.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch6.dfid.gov.uk
dfid.gov.uk
intouch3.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
skypeexternal.dfid.gov.uk
dfidexchange.dfid.gov.uk
projects.dfid.gov.uk
*.dfid.gov.uk
intouch.dfid.gov.uk
supplierportal.dfid.gov.uk
Skypeexternal.dfid.gov.uk
aipbeta.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
HRPassport.dfid.gov.uk
www.dfid.gov.uk
devtracker.dfid.gov.uk
www.gov.uk
www.gov.uk
intouch.dfid.gov.uk
adfs3.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
intouch5.dfid.gov.uk
projects.dfid.gov.uk
devtracker.dfid.gov.uk
intouch3.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
Devhrpassport.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker.dfid.gov.uk
Devhrpassport.dfid.gov.uk
insight.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
supplierportal.dfid.gov.uk
devtracker.dfid.gov.uk
adfs3.dfid.gov.uk
devtracker.dfid.gov.uk
vault.dfid.gov.uk
intouch6.dfid.gov.uk
adfs3.dfid.gov.uk
insight.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Access.dfid.gov.uk
Index.dfid.gov.uk
DfidCmg.Dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
www.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
skypeexternal.dfid.gov.uk
azpphrpassport.dfid.gov.uk
supplierportal.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
www.gov.uk
azpphrpassport.dfid.gov.uk
dfidexchange.dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
intouch5.dfid.gov.uk
cscuk.dfid.gov.uk
www.gov.uk
adfstoken.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Devhrpassport.dfid.gov.uk
*.dfid.gov.uk
vault.dfid.gov.uk
access.dfid.gov.uk
dfidexchange.dfid.gov.uk
devtracker.dfid.gov.uk
supplierportal.dfid.gov.uk
dfidexchange.dfid.gov.uk
dfidexchange.dfid.gov.uk
access.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
Index.dfid.gov.uk
azpphrpassport.dfid.gov.uk
adfs.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker-ci.dfid.gov.uk
Certificate
The complete raw certificate details for DFIDCmg.dfid.gov.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIqDCCBpCgAwIBAgIQBYXFaWB9n3e7FCAidQ0DcDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjIwNjI5MDAwMDAwWhcNMjMwNjA0MjM1OTU5WjAeMRwwGgYDVQQDExNERklEQ21n LmRmaWQuZ292LnVrMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnCKs cpwkx27O81uM4HBXDIlh7UNFYHRELLRVSIfGmGyZ8RycLXlwPJ7C2ajDqbE58EtA Oplaj8SSOtvh5cqLHunttfwFKEhx9sHUPTwwvHi5aq/4FIpym//CwvUWWctLNsSw AyuUeOIQfYYTQi1qNrU+49rXClbxqOQhKWK52wB0yiiQa3iJVm0azw7wYdvVrh/E SMm6hZ+5bVh+RmAMCKxKYb4EZAKSixihxK+sFF/VxViAmSIZ2q9NOhJ4PnTOe3He ZN+k42VvnFy8ZxT1kvvsp1tZLF8eetbs/5BeJEmMZZeetHuhYUkHSU/KPzxSpbNG zd+WuKi1RExr839S9xc214rOX1ZzQqAOKbfcUNl88hbkur7qd1HtGbsIuNW98KPR WxNff5QScxRHXyJkcX24h65SztcIN8gp6mxw4z2RqmeG7xr6jSHtOWuXIvWLm9Q9 tIhMe+ufmvQowFO2xdfA952xuSmBE25A9Y996ouDWj0j6JcjV4H3pXHsj81CfMFP KpqJxunNqdAyWs5OMu7r3qyu6AOt6KcJB2n/lVsksccEIZ2630Vg7dk2RZzq3LQH 4jZk70DZ0biDeYAw8EOqj97RpaIcXBfp6jzBxT+yccO0JN/sxuk6K9uZ4KJeKccH ub5xK7EJ5/q6ubXYSJrMQjH6pUhD2KlYsPAlb+UCAwEAAaOCA6IwggOeMB8GA1Ud IwQYMBaAFKW01us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBSZPCC/JpOQR6Hb pdllckq+J5mWUjA3BgNVHREEMDAughNERklEQ21nLmRmaWQuZ292LnVrghd3d3cu REZJRENtZy5kZmlkLmdvdi51azAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9j cmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYy MDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1Ry dXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3MDUw MwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29t L0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k aWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0 LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAJ BgNVHRMEAjAAMIIBewYKKwYBBAHWeQIEAgSCAWsEggFnAWUAdQCt9776fP8QyIud PZwePhhqtGcpXc+xDCTKhYY069yCigAAAYGvZmtfAAAEAwBGMEQCIAyvhxXoafKL kbdv2HWW5HrdqLZf8d51jwf8DOA56q31AiBNnU4YUiHbxQE7b6HgIY9O9wL4Y1Fq PJrPT0MJlMPHFAB1ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAAB ga9mazwAAAQDAEYwRAIgZCkz5SKxe6K4rfDr21G2vvrvhCa4mXL5t1+vaxJybp0C IAlHaaO1uGUIYdES66QMpmKR+g6Da8OFdIKvGhf09WVtAHUAs3N3B+GEUPhjhtYF qdwRCUp5LbFnDAuH3PADDnk2pZoAAAGBr2ZrbgAABAMARjBEAiAyKD5fgV9q5dX2 a7hN+zPPg4v83YeX1fp4eCBjKEmsfQIgXgZasf54lbHTWIvOAq3Iy5uNAQs2ZrWJ G0fXuQMstBQwDQYJKoZIhvcNAQELBQADggIBAFQR1JQulAM+liQqHBAtX+HfIx6+ 6rjGZ7wG97aFXb9TjdiN16PR5KbUeAlNKKgeYptpDsNHhR3Rv+Q14lEUiQ29MGbT TEFyNs71LeppDNbE6ti4TKAWz4Yvu3Hc6BRSGycgiQ2ImEDDRo8k5O90+fRu1P+L WYi9mnK9PZ3S41405H4Z3TNjnPZiUsu3F6VenJk4LOGTxUPFWjscFJxFzRau59ZF Pq7qZH4imIiqgYWzrxyhnwP6AOl8M3fXkPK39lLnKUmFwBpwJYAlSBftqr8hUpsd u1iUtn6rb6P21BJsN2VVUba7ZkHxxM3xeLIxAApZtcFfnnkmESZhBobn+2LX3MFM O/LDyxTuVWyQPkufIVlzi2yBoQqQxZA7ZlWItWYxEjEtJNqMJAdfm3JMUZpubfAu xR9VuxFtgegEXNTckCgMZhw+LaQVWjSLlVnB7mYhWNxvwUfNuX0NncaQfEo0BNAE 0qC+RTrCUFyyAFjH5yBGhaDhTWg+X9QyF2JGlRWg0dLeEX4hu3crd3K6wOrvPD+f FTJRbdBXwkFDSFHkVG7x16ZxiBiS90secmJdWrkoTg3y4BlxLaPMU47uVRWGhvog XQmzZtBHABsO+dYmdD6XJl+P8qV7GpD0holHa4gBPoUlg6oRmK9XGrlH39tkWUE0 ffkdakz/K6CrQPjq -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnCKscpwkx27O81uM4HBX DIlh7UNFYHRELLRVSIfGmGyZ8RycLXlwPJ7C2ajDqbE58EtAOplaj8SSOtvh5cqL HunttfwFKEhx9sHUPTwwvHi5aq/4FIpym//CwvUWWctLNsSwAyuUeOIQfYYTQi1q NrU+49rXClbxqOQhKWK52wB0yiiQa3iJVm0azw7wYdvVrh/ESMm6hZ+5bVh+RmAM CKxKYb4EZAKSixihxK+sFF/VxViAmSIZ2q9NOhJ4PnTOe3HeZN+k42VvnFy8ZxT1 kvvsp1tZLF8eetbs/5BeJEmMZZeetHuhYUkHSU/KPzxSpbNGzd+WuKi1RExr839S 9xc214rOX1ZzQqAOKbfcUNl88hbkur7qd1HtGbsIuNW98KPRWxNff5QScxRHXyJk cX24h65SztcIN8gp6mxw4z2RqmeG7xr6jSHtOWuXIvWLm9Q9tIhMe+ufmvQowFO2 xdfA952xuSmBE25A9Y996ouDWj0j6JcjV4H3pXHsj81CfMFPKpqJxunNqdAyWs5O Mu7r3qyu6AOt6KcJB2n/lVsksccEIZ2630Vg7dk2RZzq3LQH4jZk70DZ0biDeYAw 8EOqj97RpaIcXBfp6jzBxT+yccO0JN/sxuk6K9uZ4KJeKccHub5xK7EJ5/q6ubXY SJrMQjH6pUhD2KlYsPAlb+UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7340719444621124551157267450240500592 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFIDCmg.dfid.gov.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636977037281798010373132317905080367129672457154974121304940005939770691603172905424635397248447929799815454902978690570800772214394287381492299823530982292069847358682469816934329571884349003898466968683564735508905712967368207346169197724575271130349862419773489920708360262437162107003652764611125170801792751678621592119411117826898183300628636645079690818226763751543746818892494489719668321050063012656310221150440606524756893100467595238125966431742365547200121671243611831346884958769960987553295995633958083074351140984063353764910917019819412868519648917924316767231205039768251139947127524668215382196620713312385604853363585739709341023552621241660757131806786454960390727977704473855441658561211562066043650806265062321242409415635037254860724702965784646028416270482841802623838125722734658799811442931720198319361489445428706686460048609711872450234398275133922134859796529300133657637900251739540632357068090617656840277954105413066611734674834028134860122888294532701942551672216578002612061850173396914634813416042055971464562895528530246037882291799437360851060290556024615160661740801231041381243625239427045525875068641660738345945838080452891290209148052996592190821037309403327155428987508108384416710741290981 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 993c20bf26939047a1dba5d965724abe27999652 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DFIDCmg.dfid.gov.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.DFIDCmg.dfid.gov.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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