netnation.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0f:27:c5:a5:1c:03:c1:31:41:d1:1d:ac:d2:b5:29:b7 was issued on by DigiCert, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=netnation.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:27:c5:a5:1c:03:c1:31:41:d1:1d:ac:d2:b5:29:b7Serial Number (int): 20144928230265449981579779580116674999
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2e:93:fb:3c:de:0b:26:0f:f8:95:a2:ec:8e:7b:1e:10:e2:e4:d9:0c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 33:55:f3:f8:62:ec:d4:7d:5e:a8:8b:e0:ad:5a:8d:5b:36:c5:f8:1e
Fingerprint (sha256): 5e:9d:d9:93:4d:3b:f6:54:bd:91:45:8a:75:54:2e:a2:b5:d6:05:c7:96:6b:54:0a:97:cb:bb:15:75:64:44:ef
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate netnation.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for netnation.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
netnation.com
www.netnation.com
www.netnation.com
Other certificates including the domain name netnation.com
(limited to 100 certificates)
sitecontrol.netnation.com
spritessl.netnation.com
sitecontrol.netnation.com
api.netnation.com
freeway.netnation.com
0x.ca
webmail.netnation.com
webmail.netnation.com
webmail.netnation.com
webmail.netnation.com
padlock.netnation.com
secure1.sc.netnation.com
cart.netnation.com
*.netnation.com
api.netnation.com
0x.ca
api.netnation.com
sitecontrol.netnation.com
sitemail.netnation.com
cart.netnation.com
api.netnation.com
acctmgr.netnation.com
order.netnation.com
order.netnation.com
api.netnation.com
api.netnation.com
0x.ca
bladesssl.netnation.com
domains.netnation.com
acctmgr.netnation.com
webmail.netnation.com
safe.netnation.com
acctmgr.netnation.com
cart.netnation.com
sitecontrol.netnation.com
api.netnation.com
acctmgr.netnation.com
domains.netnation.com
freeway.netnation.com
webmail.netnation.com
stronghold.netnation.com
netnation.com
sitecontrol.netnation.com
cart.netnation.com
manage.netnation.com
cart.netnation.com
springerssl.netnation.com
0x.ca
lock.netnation.com
marblessl.netnation.com
cart.netnation.com
cart.netnation.com
domains.netnation.com
webmail.netnation.com
0x.ca
webmail.netnation.com
manage.netnation.com
ssl.netnation.com
netnation.com
0x.ca
acctmgr.netnation.com
acctmgr.netnation.com
sitemail.netnation.com
0x.ca
order.netnation.com
webmail.netnation.com
freeway.netnation.com
freeway.netnation.com
apt.netnation.com
*.netnation.com
sitecontrol.netnation.com
sitecontrol.netnation.com
order.netnation.com
api.netnation.com
0x.ca
api.netnation.com
0x.ca
sitecontrol.netnation.com
am.netnation.com
cart.netnation.com
urchin400.netnation.com
order.netnation.com
webmail.netnation.com
0x.ca
sitemail.netnation.com
staging.netnation.com
acctmgr.netnation.com
0x.ca
sitecontrol.netnation.com
spritessl.netnation.com
sitecontrol.netnation.com
api.netnation.com
freeway.netnation.com
0x.ca
webmail.netnation.com
webmail.netnation.com
webmail.netnation.com
webmail.netnation.com
padlock.netnation.com
secure1.sc.netnation.com
cart.netnation.com
*.netnation.com
api.netnation.com
0x.ca
api.netnation.com
sitecontrol.netnation.com
sitemail.netnation.com
cart.netnation.com
api.netnation.com
acctmgr.netnation.com
order.netnation.com
order.netnation.com
api.netnation.com
api.netnation.com
0x.ca
bladesssl.netnation.com
domains.netnation.com
acctmgr.netnation.com
webmail.netnation.com
safe.netnation.com
acctmgr.netnation.com
cart.netnation.com
sitecontrol.netnation.com
api.netnation.com
acctmgr.netnation.com
domains.netnation.com
freeway.netnation.com
webmail.netnation.com
stronghold.netnation.com
netnation.com
sitecontrol.netnation.com
cart.netnation.com
manage.netnation.com
cart.netnation.com
springerssl.netnation.com
0x.ca
lock.netnation.com
marblessl.netnation.com
cart.netnation.com
cart.netnation.com
domains.netnation.com
webmail.netnation.com
0x.ca
webmail.netnation.com
manage.netnation.com
ssl.netnation.com
netnation.com
0x.ca
acctmgr.netnation.com
acctmgr.netnation.com
sitemail.netnation.com
0x.ca
order.netnation.com
webmail.netnation.com
freeway.netnation.com
freeway.netnation.com
apt.netnation.com
*.netnation.com
sitecontrol.netnation.com
sitecontrol.netnation.com
order.netnation.com
api.netnation.com
0x.ca
api.netnation.com
0x.ca
sitecontrol.netnation.com
am.netnation.com
cart.netnation.com
urchin400.netnation.com
order.netnation.com
webmail.netnation.com
0x.ca
sitemail.netnation.com
staging.netnation.com
acctmgr.netnation.com
0x.ca
sitecontrol.netnation.com
Certificate
The complete raw certificate details for netnation.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmDCCBYCgAwIBAgIQDyfFpRwDwTFB0R2s0rUptzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjIwODIyMDAwMDAwWhcNMjMwOTAyMjM1OTU5WjAYMRYwFAYDVQQDEw1uZXRuYXRp b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRSGP24JAECc xloLvkawSB+4j/+zdtxMqX3U7QV+QcaON45evxHdi4utMVHJgB9knA7LtROz8Hdz lKByqVjdD48mQJdmt1UFjCeLHQeg4v/Ffp/iQf3nkNJ51VwZWgTkAnrddch/BaJ4 Wd7szGJ4LzONH4B01CeLeA1VY/rTmTGcwxi5wTyUT29TjYIZs9e0rzHYLbsF4z/d GK0WSrv7cEXpsHQLMFJke7QTOamH3HHbz7K1eRfThRlOz1RC9u3LcPui7uFPbVvs YGLBDtxbN0hkp4Vyok7JOO0LB8hAVIMpNLvdzC5FAvX2uxfCJQGrTjQcEfXgAe2T l5EdGZZcjQIDAQABo4IDmDCCA5QwHwYDVR0jBBgwFoAUpbTW6zbE52um38RkCwEq IAS4ZiMwHQYDVR0OBBYEFC6T+zzeCyYP+JWi7I57HhDi5NkMMCsGA1UdEQQkMCKC DW5ldG5hdGlvbi5jb22CEXd3dy5uZXRuYXRpb24uY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBI oEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExT UlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdp Y2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5j cmwwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3 dy5kaWdpY2VydC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGG GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2Nh Y2VydHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1 NjIwMjJDQTEuY3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB ZwB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgsdpfAkAAAQD AEcwRQIgbmX3MnoczHzu6TR3dG5Ka5XE/hvETQcC3RE+aDuuKN8CIQCk7+BHQTvk 9uljVOrHFj/i5sGviSgq8RnX7eu1FwsFhwB1ADXPGRu/sWxXvw+tTG1Cy7u2JyAm Ueo/4SrvqAPDO9ZMAAABgsdpfEYAAAQDAEYwRAIgLePsVV6vXI/ANKsJDKBhrI4T t2M9vx3JZyn4QBw8nBkCIH/3T7sOvLECQQdk55K8TIWNze09LiG+dFdIsUNyeV1i AHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGCx2l8QAAABAMA RzBFAiAn/lIAFKLYX4uzCd2U/nNJAp7PmfpEbOPa5dqR9gBzVwIhAOkeLHtKbklO o9drMQVc7N3WJNKF6qdMY470V9xrC+9lMA0GCSqGSIb3DQEBCwUAA4ICAQBUtQwB OlKiu31ABapWgpsy+9Yytqyvil3prCTJLy5nKUafptWAybVmL5pGAf7B2Ermw/tN XuXbOjXSnkA5DR420zsOkdluO4DipgxQnP7iNKjUJtfXGgztvc4VbbQHq4Gv22K3 EILEBpqK2q/epfVbdwjmAssrLQ3MvCXVwlyCJhUYgXU4Abnrh4Pk36NQIMPWlwGa U6kEXWQ4bmT9zXRQ+PHF3GA5hKNR7jENsDyS8jggLa1HyEHlLo3NBRi7TDwg4A0z orioaLCzUb7YjpRPu0xsE4HPCrasPbD/E/1WyiuDMzlWxhtvmwaE4fP3vqzoYqZ0 0n3SnBbWb3CZz3GY4M2RrMUiRGf4swpkOg4/Kx68RWRZdFlgMQGCTZAWOspN2xQW FszO/iDmelc9DHqOXwnjLdZpMut35hC4G2RA+0FI3NexmA8MrX+BW3g/OEHBxr1Q dnokel12HGcAqI+uotzwovoXMZeSud06+ppeKUUwgrcag3wTj/NtBL7ReDzLwxbG 7t5qTJzV6uSBqH3LRHh7P6WRv1w1yklUWjcEo3tj0QFWs+IEp55GdHjdxkH2UnpZ fj9sVQ7NKuV2MMyplACFpPmcLPCc8bPTtjFS9Qc9LOAGupNP8Nifo2Lnb/FyPe8O xuI9xDX2woAax5+BnzIAweN/2RY1MI/NNKd/qw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRSGP24JAECcxloLvkaw SB+4j/+zdtxMqX3U7QV+QcaON45evxHdi4utMVHJgB9knA7LtROz8HdzlKByqVjd D48mQJdmt1UFjCeLHQeg4v/Ffp/iQf3nkNJ51VwZWgTkAnrddch/BaJ4Wd7szGJ4 LzONH4B01CeLeA1VY/rTmTGcwxi5wTyUT29TjYIZs9e0rzHYLbsF4z/dGK0WSrv7 cEXpsHQLMFJke7QTOamH3HHbz7K1eRfThRlOz1RC9u3LcPui7uFPbVvsYGLBDtxb N0hkp4Vyok7JOO0LB8hAVIMpNLvdzC5FAvX2uxfCJQGrTjQcEfXgAe2Tl5EdGZZc jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20144928230265449981579779580116674999 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netnation.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21849347720625701238678386256689921441967773070699151306040590125007260816026289476475976141461846868620468404542798247309224514430060178435025673127643616861953438549142646653909960303744420826474340618558691848598759773273447584152414086068566361591484267193165494912437722778101101426910004110340200213067452913799055888365609190752090773466714936870755055949442304649589388098496955545385851150224251650713801665976058249474792388758184542023276688156618093147148130728240664167753540405056584553157158548017001842031025223795970939312771442800103765050790087249542896395013009615202385660946875904532717453597837 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2e93fb3cde0b260ff895a2ec8e7b1e10e2e4d90c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netnation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netnation.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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