steadymed.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:75:f9:f6:cb:13:da:c2:7f:84:ba:00:75:f3:f3:e2 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=steadymed.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:75:f9:f6:cb:13:da:c2:7f:84:ba:00:75:f3:f3:e2
Serial Number (int): 1941796601202238128460502446825010146
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 36:80:42:0f:5d:8a:f4:57:ed:69:69:00:1e:19:dc:5e:9c:f4:e0:40
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 4c:17:33:df:a3:ae:cf:5e:29:ff:5e:42:86:4f:e3:bc:c8:04:56:3e
Fingerprint (sha256): 6e:2b:fa:93:03:82:66:5a:ef:ff:3b:43:cf:46:bb:d3:41:08:3f:da:74:7e:09:e7:b8:0d:bf:74:3b:85:81:5b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate steadymed.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for steadymed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

steadymed.com

Other certificates including the domain name steadymed.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
leapfrog-ssl-5.gcs-web.com
imperva.com
imperva.com
imperva.com
imperva.com
steadymed.com
imperva.com
leapfrog-ssl-5.gcs-web.com
imperva.com
oauth2.kyl191.net
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
leapfrog-ssl-5.gcs-web.com
imperva.com
steadymed.com
competelearn.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-5.gcs-web.com
imperva.com
steadymed.com
imperva.com
www.steadymed.com
www.steadymed.com
www.steadymed.com
imperva.com
steadymed.com
imperva.com
steadymed.com
leapfrog-ssl-5.gcs-web.com
steadymed.com
imperva.com
imperva.com
contable.smartbots.cl
hqegl.club
retrack.antonkusnadi.com
imperva.com
imperva.com
www.blushup.com
imperva.com
competelearn.com
www.aroundom.com
imperva.com
steadymed.com
www.steadymed.com
imperva.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-5.gcs-web.com
imperva.com
imperva.com
contable.smartbots.cl
kiosk-staging.arthcloud.com
ir.steadymed.com
leapfrog-ssl-5.gcs-web.com
imperva.com
imperva.com
helloitschang.com
imperva.com
www.blushup.com
www.hablarcoreano.com
imperva.com
www.millijoin.com
imperva.com
imperva.com
imperva.com
ensaio.coral.jovensnh.com.br
steadymed.com
imperva.com
steadymed.com
www.steadymed.com
leapfrog-ssl-5.gcs-web.com
www.misdevocionales.icu
www.steadymed.com
imperva.com

Certificate

The complete raw certificate details for steadymed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHiTCCBXGgAwIBAgIQAXX59ssT2sJ/hLoAdfPz4jANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjQwNjExMDAwMDAwWhcNMjQxMjExMjM1OTU5WjAYMRYwFAYDVQQDEw1zdGVhZHlt
ZWQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mz21Uyxtj/D
SPSlWNmEhd2a24xgSte6GGmuvynu7+AvtM/LTsucac9N7LucyGnhKQ5DBkvQ/Zgy
lAvWLq87IpsplI014za/pM5s1n5vP60CdpXQ97JR8odEv0n/hI785reGQrEugDPR
/pRKsg8Fa1HlFO07YWUHCYJKbjTm4LLqKyifv81BWTOOUFl80UoNmlp7zycfVLDm
KARWVDJFifIjC9+Iibq6IoQPlx2DdJsDwYIwY1s0kydb1uqf708n3i++i/71gDCu
w6sULZMlOiwvCURcUee1eIW9u6r0WqJ+TXBRTgCko1th+62rgDGLdeRBuPFtQXLk
dAYgXsnXzQIDAQABo4IDiTCCA4UwHwYDVR0jBBgwFoAUpbTW6zbE52um38RkCwEq
IAS4ZiMwHQYDVR0OBBYEFDaAQg9divRX7WlpAB4Z3F6c9OBAMBgGA1UdEQQRMA+C
DXN0ZWFkeW1lZC5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcC
ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEag
RIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNB
NDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2Vy
dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmww
gYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl
cnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
R2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0T
AQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAdv+IPwq2+5VRwmHM
9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGQB6eAMgAABAMARzBFAiAkTgkPMfWr+UKg
RlBXhqhaa36dNZAYMReT8zpfTPllFwIhAI6es8wZu4OvxJT1VIg5pGUEfq6B5dYk
XoIDrt59xwLlAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGQ
B6eAKAAABAMARzBFAiAgDkDi2n8dMZvH2+mBPf2ahlSVX3mpY2IO/cPqJDAiSQIh
ANJaxrLeD7eXeWbYWUqXWP+luxA8iOgVua5eG6012mYnAHYA2ra/az+1tiKfm8K7
XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGQB6eAAgAABAMARzBFAiEAr3IovB50IEAC
7SU2eQPQ3TnDp6Qt/TFkRodlNU5KzYYCIG7HP+VXhr8OpsiGFkiDo2d7qPOtsHZ8
i+WZqykkuY9pMA0GCSqGSIb3DQEBCwUAA4ICAQDKplHDT0wyl2fakFVkkCK7B4p7
imOGK+HcvVSDRtFtE4HIGRJGwpZdmOYtbyl3bdtRZoNflAZu08rf5Qn9a0R2SkVD
Z52WygBwU+kB7UVRDO9oy1thgedK46m4z5R6Dsu6e+PWd0WZgPrBAJHuilR3Z00E
YXcHlzLqVpRqKmYWC9+3/Tv5o9PBu/2grBOHEHcZ+MundCS/CTo1jvyAgV2ezUlz
VELJVD4kLz0z67b6lOICicGc5JPytkjVgJw6GE8ENByhz2ZYo+wAbTBmedvBk+xc
QgcrcX3IDylpCXmxYtRF/qpemN0m8b+/kRfZTTZ/yhLYBCA6HOZJ3Hji2WDIxsT7
Kfj0Yhu9ZzBZMMtavtHjrMakpmAsdyYlqp5oKrWExP1MUKpsptot5rL7MNYQdaG5
ERENjhyc9BJ1OpeKkPN4UEWhsCHNREXBdzS59FY7RhvTWeGT1QR25/ENXQC9tn7/
2TRzopBUoB4Fz0nZeDhmkmv9jszMN91LD1thmA/56KgYe/IeF9ecacpRnffS3e59
RgmHremn5iLtcWqR5bQ7oW4BCAsragtdDpYXmRu9sGOyno1DF+Mn+H+UR840FywK
9qAA/MAkfvtG+kiu2CEKx8NkmjogY0TnQNYcr+hUkmi6rJpPriIGual+EFAVV+aH
kZ/s3su2bLtGm8SwQA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mz21Uyxtj/DSPSlWNmE
hd2a24xgSte6GGmuvynu7+AvtM/LTsucac9N7LucyGnhKQ5DBkvQ/ZgylAvWLq87
IpsplI014za/pM5s1n5vP60CdpXQ97JR8odEv0n/hI785reGQrEugDPR/pRKsg8F
a1HlFO07YWUHCYJKbjTm4LLqKyifv81BWTOOUFl80UoNmlp7zycfVLDmKARWVDJF
ifIjC9+Iibq6IoQPlx2DdJsDwYIwY1s0kydb1uqf708n3i++i/71gDCuw6sULZMl
OiwvCURcUee1eIW9u6r0WqJ+TXBRTgCko1th+62rgDGLdeRBuPFtQXLkdAYgXsnX
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1941796601202238128460502446825010146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'steadymed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26358639043101257076264526918071852108789941702665774162307710868974678441305876934948006410874277054807256153974930296841307253855016534807142157027747015096337991517889893216094874241075478107279071492327334016326423355820403796491248550993379433681917628320885975662594776199445001302027848799321591785767124376452645801911172387178129065107565298388564631349063209643339009602764758132803006286300401462286067287375285080449715450513311578628011609975423223048426164122824503828499165616007427177218765815372984471270010797850322843463086875234153293790125882265881610663347581675910931347508674535730466934872013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3680420f5d8af457ed6969001e19dc5e9cf4e040
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steadymed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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