ial.edu.sg

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:52:e5:4b:ae:3b:5d:8f:d2:26:ae:34:3c:cb:ba:f1 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ial.edu.sg

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:52:e5:4b:ae:3b:5d:8f:d2:26:ae:34:3c:cb:ba:f1
Serial Number (int): 7076558989158020197792536270090255089
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 15:aa:d9:fb:b8:74:eb:2c:bd:e5:d3:d7:6d:26:ca:b6:85:55:4b:9e
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 6d:ac:ef:66:93:ba:7a:92:c7:f1:c1:f2:5c:f0:6d:29:ee:51:7e:dc
Fingerprint (sha256): 72:7b:a6:36:4c:5f:8d:ae:c9:37:84:65:9a:60:09:18:91:3e:93:ac:59:49:34:96:db:00:ba:27:7e:0b:05:60

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate ial.edu.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ial.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ial.edu.sg

Other certificates including the domain name ial.edu.sg

(limited to 100 certificates)
www.fmbm.info
learningatwork.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
incapsula.com
learningspace.ial.edu.sg
events.meritkahn.com
portal.ial.edu.sg
learningatwork.ial.edu.sg
events.hamedazimi.me
incapsula.com
events.saludcontech.com
events.hamedazimi.me
events.hamedazimi.me
events.gosmartvalue.com
formularios.martinic.xyz
canvas.ial.edu.sg
portal.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
www.afawaseries-tz.com
incapsula.com
events.saludcontech.com
feedback.ial.edu.sg
incapsula.com
events.marianasworkinggroup.org
myaccount.mealcard.club
ial-tms.ial.edu.sg
community.ial.edu.sg
*.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
learningatwork.ial.edu.sg
canvas.ial.edu.sg
www.ial.edu.sg
learningspace.ial.edu.sg
www.virtis.in
events.hamedazimi.me
events.workplacelearning.ial.edu.sg
incapsula.com
link.livinginthegap.org
eventos.facilitandoamamentacao.com.br
incapsula.com
webmail.suss.edu.sg
incapsula.com
events.workplacelearning.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
www.ial.edu.sg
feedback.ial.edu.sg
learningatwork.ial.edu.sg
files.anu-biz.com
events.hamedazimi.me
uat-ial-tms.ial.edu.sg
incapsula.com
ial.edu.sg
learningspace.ial.edu.sg
community.ial.edu.sg
www.gipcgoa.com
events.meritkahn.com
incapsula.com
learningspace.ial.edu.sg
portal.ial.edu.sg
author.ial.edu.sg
incapsula.com
ial.edu.sg
webmail.suss.edu.sg
feedback.ial.edu.sg
incapsula.com
incapsula.com
events.hamedazimi.me
ial.edu.sg
www.virtis.in
uat.ial.edu.sg
incapsula.com
events.gosmartvalue.com
workplacelearning.ial.edu.sg
incapsula.com
learningatwork.ial.edu.sg
Ezekielp.ial.edu.sg
learningspace.ial.edu.sg
learningatwork.ial.edu.sg
incapsula.com
events.hamedazimi.me
ial.edu.sg
events.informasoft.ca
community.ial.edu.sg
events.marianasworkinggroup.org
events.hamedazimi.me
www.afawaseries-tz.com
ial.edu.sg
mediaspace.ial.edu.sg
webmail.suss.edu.sg
author.ial.edu.sg
incapsula.com
feedback.ial.edu.sg
www.virtis.in
events.hamedazimi.me
uat.ial.edu.sg
learningspace.ial.edu.sg

Certificate

The complete raw certificate details for ial.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHfzCCBWegAwIBAgIQBVLlS647XY/SJq40PMu68TANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjIxMjE0MDAwMDAwWhcNMjMwNjE0MjM1OTU5WjAVMRMwEQYDVQQDEwppYWwuZWR1
LnNnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh8Vylkfw7MokWoX
f+FENU8vnXkW8GD/OkrnPw0/mwl/m9w//XKhNAJhRfyU63tVQB2SiApNMTTJyba7
fetsRsxhs+mNb2OxpRFjQtqXoPm/ZYOroFoc62bWNS72xaByddSvq4z9uTLkEjxB
2p3JlImBLf+QprbN3tm35mnlig+XLsMUxxDW0GRvhrn8wWG0m8u3lo/s2UbXMMaV
0KDn5Xu5D1/Eox4tn/9Qnhx0leYE2e/21Ki0wf2qBKRGQizQt1QNM0eRsuKYJiBs
DytCrILLo4ivPdFE27txv/8yiiwdFt7/19dQtNeqDoA6a3mBh7JMnZui0ZoSnmmO
5wE71QIDAQABo4IDgjCCA34wHwYDVR0jBBgwFoAUpbTW6zbE52um38RkCwEqIAS4
ZiMwHQYDVR0OBBYEFBWq2fu4dOssveXT120myraFVUueMBUGA1UdEQQOMAyCCmlh
bC5lZHUuc2cwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmww
SKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRM
U1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDA+BgNVHSAENzA1MDMGBmeBDAECATAp
MCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsG
AQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
MFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1
c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwCQYDVR0TBAIwADCC
AX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA6D7Q2j71BjUy51covIlryQPTy9ER
a+zraeF3fW0GvW4AAAGFD4spPAAABAMARzBFAiEA3S39o575ATRkkophZZARI70s
/2rI6mQ3t0vTsIok+0ACIH63lT593UjZVxxB/EobTPvlxCKp0Q24cEyvLWu7ueY0
AHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGFD4spwAAABAMA
RzBFAiEA1gdp7q3MJGJKJ0ES4SWY4UQcUX4C6P59xDkog+jiIH0CIFEsH1/l6oFZ
NI2c/xEgmYO3r/H7lW2jv0DdwNDRfpS3AHUAtz77JN+cTbp18jnFulj0bF38Qs96
nzXEnh0JgSXttJkAAAGFD4spdgAABAMARjBEAiB4W9tPxg2ouFBJTQ8r24fTJqkY
waxl6GVdM/rllpi2igIgKLbEf2fkJkD9EOKZCUlJOpSK7y0z+Dk9KLyIbXmpshgw
DQYJKoZIhvcNAQELBQADggIBAHgRvQ5W0Pe6QD/S01Pt41HVAx6S1ZvCJIry6iJo
xVTxlOCoenrLp+PE5eHuKkJEkc+NWmU3OskScZVdKa9Ygim3LZBzNZTm1OJpl391
P5oTc0KDVb+g1pJOSpeCU5cvT3Ly7uepz9Gqku7XmTylokrStVhZkTskXY+C09b2
ghEBXnX9YeVsePQjftT+iEkAGFcc/tRiUADg0D9RcvbYnq2MFSzCHd6vpOt0nCOY
D50QEc8sBV24sOzV/UK9GdXwEbtCeIjSyc9r68SjheKGNuepAiRHRq4kHebBqqbA
W2iRDGj9DYl6SDjbDS/gFX9wFQjQqETYNQtj89trRTEbupa5od/2538ev4BOGhqm
Qlz9ERF9PTvEX8jcYROgAtwD081kOOPsWVC1UlEAjb4cSr3biA+6YdqVx7qmm1OX
1xt2ju3N5BpP7tkDhNH9Lh9G2E67CYz7rpWZvhL2+bFuEYqOWqOV0UZWeG8OcTXP
BGx8+039vCCIoruSD90E4jl3nRipdINK3W+0thJ5GT2xN2Dz5F+4+VbfZH4tBlar
yUQTuYvw5MxLIrTwaIO6Cq5Q+pVWT248lbq0m/HiDqAHGB+0DIbXF1TIvy9dF1Zz
KcR0p9Bw8ebn+ieok01+tYqlCQghQVVBJnnzVFoQ0tPcHekpTX3StDNClalB6Ta4
kTdl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh8Vylkfw7MokWoXf+FE
NU8vnXkW8GD/OkrnPw0/mwl/m9w//XKhNAJhRfyU63tVQB2SiApNMTTJyba7fets
Rsxhs+mNb2OxpRFjQtqXoPm/ZYOroFoc62bWNS72xaByddSvq4z9uTLkEjxB2p3J
lImBLf+QprbN3tm35mnlig+XLsMUxxDW0GRvhrn8wWG0m8u3lo/s2UbXMMaV0KDn
5Xu5D1/Eox4tn/9Qnhx0leYE2e/21Ki0wf2qBKRGQizQt1QNM0eRsuKYJiBsDytC
rILLo4ivPdFE27txv/8yiiwdFt7/19dQtNeqDoA6a3mBh7JMnZui0ZoSnmmO5wE7
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7076558989158020197792536270090255089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ial.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25515466246549025646215014741025252963888534913789090157419051562032115984926125775915381470187782179089056949661140653492051342480650084856998395594679729606673120759861982505744491843258333811185412934813566369999757795949532289186983373926497796126870165688225413644610495163552090623700425501095831216475966449525420450082122450129749353890595486264882270820145548404332842262915252490255227547252834961010710858224913313126230498177759603746715866427118729759573226953780813590655642303363224386793712362138887564719887643355486216777897478888908790001577683020672975237207892456051009651245154358423159054613461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15aad9fbb874eb2cbde5d3d76d26cab685554b9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ial.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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