Devhrpassport.dfid.gov.uk
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 01:cf:81:7e:7d:05:a3:d2:13:db:b1:79:2a:59:4c:a8 was issued on by DigiCert, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=Devhrpassport.dfid.gov.uk
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:cf:81:7e:7d:05:a3:d2:13:db:b1:79:2a:59:4c:a8Serial Number (int): 2406659897781417532550948190609296552
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 2d:00:5d:d8:6d:d3:a2:25:8b:f7:3d:3a:5a:f9:c6:cf:df:7c:00:7d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 91:31:67:41:bf:c5:4f:15:88:16:ca:e0:c2:0b:74:71:cc:75:15:eb
Fingerprint (sha256): 61:0e:77:b3:31:dc:2a:37:cb:8e:6a:28:98:24:af:9c:ad:7d:ba:eb:64:0d:40:73:c7:7b:1a:26:bc:ed:35:1e
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate Devhrpassport.dfid.gov.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for Devhrpassport.dfid.gov.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
Devhrpassport.dfid.gov.uk
www.Devhrpassport.dfid.gov.uk
www.Devhrpassport.dfid.gov.uk
Other certificates including the domain name dfid.gov.uk
(limited to 100 certificates)
www.gov.uk
dfidexchange.dfid.gov.uk
intouch6.dfid.gov.uk
dfid.gov.uk
intouch3.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
skypeexternal.dfid.gov.uk
dfidexchange.dfid.gov.uk
projects.dfid.gov.uk
*.dfid.gov.uk
intouch.dfid.gov.uk
supplierportal.dfid.gov.uk
Skypeexternal.dfid.gov.uk
aipbeta.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
HRPassport.dfid.gov.uk
www.dfid.gov.uk
devtracker.dfid.gov.uk
www.gov.uk
www.gov.uk
intouch.dfid.gov.uk
adfs3.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
intouch5.dfid.gov.uk
projects.dfid.gov.uk
devtracker.dfid.gov.uk
intouch3.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
Devhrpassport.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker.dfid.gov.uk
Devhrpassport.dfid.gov.uk
insight.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
supplierportal.dfid.gov.uk
devtracker.dfid.gov.uk
adfs3.dfid.gov.uk
devtracker.dfid.gov.uk
vault.dfid.gov.uk
intouch6.dfid.gov.uk
adfs3.dfid.gov.uk
insight.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Access.dfid.gov.uk
Index.dfid.gov.uk
DfidCmg.Dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
www.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
skypeexternal.dfid.gov.uk
azpphrpassport.dfid.gov.uk
supplierportal.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
www.gov.uk
azpphrpassport.dfid.gov.uk
dfidexchange.dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
intouch5.dfid.gov.uk
cscuk.dfid.gov.uk
www.gov.uk
adfstoken.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Devhrpassport.dfid.gov.uk
*.dfid.gov.uk
vault.dfid.gov.uk
access.dfid.gov.uk
dfidexchange.dfid.gov.uk
devtracker.dfid.gov.uk
supplierportal.dfid.gov.uk
dfidexchange.dfid.gov.uk
dfidexchange.dfid.gov.uk
access.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
Index.dfid.gov.uk
azpphrpassport.dfid.gov.uk
adfs.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch6.dfid.gov.uk
dfid.gov.uk
intouch3.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
skypeexternal.dfid.gov.uk
dfidexchange.dfid.gov.uk
projects.dfid.gov.uk
*.dfid.gov.uk
intouch.dfid.gov.uk
supplierportal.dfid.gov.uk
Skypeexternal.dfid.gov.uk
aipbeta.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
HRPassport.dfid.gov.uk
www.dfid.gov.uk
devtracker.dfid.gov.uk
www.gov.uk
www.gov.uk
intouch.dfid.gov.uk
adfs3.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
intouch5.dfid.gov.uk
projects.dfid.gov.uk
devtracker.dfid.gov.uk
intouch3.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
Devhrpassport.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker.dfid.gov.uk
Devhrpassport.dfid.gov.uk
insight.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
supplierportal.dfid.gov.uk
devtracker.dfid.gov.uk
adfs3.dfid.gov.uk
devtracker.dfid.gov.uk
vault.dfid.gov.uk
intouch6.dfid.gov.uk
adfs3.dfid.gov.uk
insight.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Access.dfid.gov.uk
Index.dfid.gov.uk
DfidCmg.Dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
www.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
skypeexternal.dfid.gov.uk
azpphrpassport.dfid.gov.uk
supplierportal.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
www.gov.uk
azpphrpassport.dfid.gov.uk
dfidexchange.dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
intouch5.dfid.gov.uk
cscuk.dfid.gov.uk
www.gov.uk
adfstoken.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Devhrpassport.dfid.gov.uk
*.dfid.gov.uk
vault.dfid.gov.uk
access.dfid.gov.uk
dfidexchange.dfid.gov.uk
devtracker.dfid.gov.uk
supplierportal.dfid.gov.uk
dfidexchange.dfid.gov.uk
dfidexchange.dfid.gov.uk
access.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
Index.dfid.gov.uk
azpphrpassport.dfid.gov.uk
adfs.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker-ci.dfid.gov.uk
Certificate
The complete raw certificate details for Devhrpassport.dfid.gov.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHUDCCBTigAwIBAgIQAc+Bfn0Fo9IT27F5KllMqDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjIwNjI4MDAwMDAwWhcNMjMwNjA0MjM1OTU5WjAkMSIwIAYDVQQDExlEZXZocnBh c3Nwb3J0LmRmaWQuZ292LnVrMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEA5P5Usm3K8F6kfjzTGjdCEA7l1yA/UMnbFGqs+uVMRY3JaYayVh3bDT7+6R51 5RsRX6WgtqtFeglM5Ber1q7DQakaW5uqBf+vI4qb1XbjV+dAAhktz6rfmtcAI1kO wPj4wYbgQ3OS/l77M5Nyr2aqu5FrCd+uxgz7owoe7sF6JmNdcwVQGF5WBJWaemjL wXPoCAcyM0evN0j7yeethN3b6I5mHbZPDTyjMsNMyGtIEAzLkdQ1WEmjPZXkTbN2 Z1fds2R7scYcor37/YYaJsBK1pRFTPkyFSa8ZWsdjisAVpb9QcWwkmDXA898sXcy 4dVyATcp+3MvQNwJpTxkfI8TnWMB/ddDJMkUQe9o7GtEe/4FuAMeZBq7o89Rggwl QEn3Fu7oRJe8AScrDizG0d/HYOxiMV1CUBesqLZMaleEz6pxBTPbf3arRKHJcadW Jt5lfkxV0wc1tqlYEcZD22dGPs163ZKxVUuLWQVEdQqAsJM4ymhzHmwxvL8ccyu/ E1RzS/lPmFtdPesW2UYME1G9w0dm4Y2nehvHRRX06XYoQ7EVsaDECEh7tWYdUEoI 2EkZ2/QZRtZu75KidB7o19HIor6DQMdpeYS7AWkvAZCy5u4sVoLKakpMOxi7ZXC+ tarqrQJJ+k2S0YF3UsBdcvP5eix3sZDj6VfZaIIlzicVjpkCAwEAAaOCAkQwggJA MB8GA1UdIwQYMBaAFKW01us2xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBQtAF3Y bdOiJYv3PTpa+cbP33wAfTBDBgNVHREEPDA6ghlEZXZocnBhc3Nwb3J0LmRmaWQu Z292LnVrgh13d3cuRGV2aHJwYXNzcG9ydC5kZmlkLmdvdi51azAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcw gZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2Jh bFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQu ZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJD QTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZT SEEyNTYyMDIyQ0ExLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4ICAQCA8s9qXI0KVHMg2snTMhRy34iXUyUUFrtgmxm/ cJXLmntqUKh7X4SPtioc89qRsG9a97jxg/ti1kXkaWR6CoS8wZvOWIGORFdNIMwb PF6J8i/Rdx+pSGviOPnjsHyEDctgN+0a7obLGpQwSnIsoIJa1UlVOjmCXfmgS0XA kFacqjtEIzDKcF9S3f/UDwiAOaQmZk192Xf0s5FihS5E0zimq8Y8zxDfozNdbUNR JeVJgwKuHP6QdDG+gXj5KJQGmMPi6iwvFtdf4spqgl6xuSREEVSZkNCbhqH9w992 O0OyeqTM0uWFWpNNGcmBhYZ+IidCahybrwxPqH9F08WE0tldHwM6jzGZZFa3owQe +w0LU7vPGdlYFo/j846XZtRhLKycEjt5fbSvsrnCpvR7j9CVP+YSeJk35GFeLP/l QjrTUX+GOSvX9mTYHH8m5MXcTzQSqBrLiwxc7Foa0KtiO/cWxAvBcWf0SoAEvaN3 yax1TjBbde5+VP0Npt0M8nYt/Ix84Ad9k6P+dKLHEsttcZLAKtHDMYc6fyqPvUO1 hc9wJHx1vx8fSoHk7piE5/QqfHspn4Ut9zy+GuST5/S/SFaydQFiRLXMNXUWxmLY NFc6HiGHnGAn+yyYlwjXIRttn7fTHYZBjAeCezuve/ReS7Xy1uBTsEVLxdip+C5Z 3XKeMw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5P5Usm3K8F6kfjzTGjdC EA7l1yA/UMnbFGqs+uVMRY3JaYayVh3bDT7+6R515RsRX6WgtqtFeglM5Ber1q7D QakaW5uqBf+vI4qb1XbjV+dAAhktz6rfmtcAI1kOwPj4wYbgQ3OS/l77M5Nyr2aq u5FrCd+uxgz7owoe7sF6JmNdcwVQGF5WBJWaemjLwXPoCAcyM0evN0j7yeethN3b 6I5mHbZPDTyjMsNMyGtIEAzLkdQ1WEmjPZXkTbN2Z1fds2R7scYcor37/YYaJsBK 1pRFTPkyFSa8ZWsdjisAVpb9QcWwkmDXA898sXcy4dVyATcp+3MvQNwJpTxkfI8T nWMB/ddDJMkUQe9o7GtEe/4FuAMeZBq7o89RggwlQEn3Fu7oRJe8AScrDizG0d/H YOxiMV1CUBesqLZMaleEz6pxBTPbf3arRKHJcadWJt5lfkxV0wc1tqlYEcZD22dG Ps163ZKxVUuLWQVEdQqAsJM4ymhzHmwxvL8ccyu/E1RzS/lPmFtdPesW2UYME1G9 w0dm4Y2nehvHRRX06XYoQ7EVsaDECEh7tWYdUEoI2EkZ2/QZRtZu75KidB7o19HI or6DQMdpeYS7AWkvAZCy5u4sVoLKakpMOxi7ZXC+tarqrQJJ+k2S0YF3UsBdcvP5 eix3sZDj6VfZaIIlzicVjpkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2406659897781417532550948190609296552 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Devhrpassport.dfid.gov.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934211891781092841549049892381603089510716229956462761918682303292215884604897931071466121381963302693758921086874923720685125963233857586358249375476957194113154794075553648509332061287788446853162971428155008796677672100572498273363772001876445412022115751085606990873240055650983456923125005944554480260482083741069972674873075430507106428881198627794007451633376904949415380583202673300225254112473330543057884209650434408959980414550016358318238586787278983574381725085878898459814014874590906658936544348654471709114981627994520764677345983873520091434358223223508121879086319220041849689515576873043620898652078175734288903392963338844894526201749039589681682666002411701418830766285932072659993513055025717236494549569960981526582829192233616974324174227106472957837703335100977478547521496014939156624659512907288758023689523233130060833393582317720176443841131428490295043676977532920650135234142326252075072915703114366242311600091263332195671868659173058217098125082718558380044328182172491237647825126125503765649677793378068799037477333542201328772436572580695593074069414879718967717683274319154796683315366239129960016706079475970911414472984882035613958619691142517515609299898758913706833800593221472903839882776217 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d005dd86dd3a2258bf73d3a5af9c6cfdf7c007d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Devhrpassport.dfid.gov.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Devhrpassport.dfid.gov.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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