api-portal.softwareone.cloud
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0c:bd:68:70:69:32:5b:98:71:f5:d0:a1:54:5c:f8:42 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=api-portal.softwareone.cloud
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:bd:68:70:69:32:5b:98:71:f5:d0:a1:54:5c:f8:42Serial Number (int): 16934198332391859137656552423950186562
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 35:90:90:fa:47:2f:d2:28:b8:00:d1:81:76:58:dc:3e:c8:28:fd:ef
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 2d:64:03:4b:2a:df:88:1b:86:be:15:0f:e9:f4:72:9b:6e:5b:63:b2
Fingerprint (sha256): 75:b0:f0:44:14:a2:d3:70:5f:5b:91:89:c0:15:28:7b:16:5f:31:68:10:b8:b0:cb:7f:08:b2:67:1c:5d:0f:5a
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate api-portal.softwareone.cloud
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api-portal.softwareone.cloud
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-portal.softwareone.cloud
Other certificates including the domain name softwareone.cloud
(limited to 100 certificates)
monitoring.millennia.cloud
status.chaosgroup.com
monitoring.millennia.cloud
status.configcat.com
monitoring.millennia.cloud
monitoring.millennia.cloud
itsm-api.sap.softwareone.cloud
status.chaosgroup.com
update.softwareone.cloud
status.opa.ba
status.chaosgroup.com
porinimon.porini.it
monitoring.millennia.cloud
monitoring.millennia.cloud
*.di.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
porinimon.porini.it
monitor.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
api-portal.softwareone.cloud
status.chaosgroup.com
*.softwareone.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
*.softwareone.cloud
status.chaosgroup.com
monitoring.millennia.cloud
monitoring.millennia.cloud
testsite247.dynu.net
rmm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
demo.webmon24x7.eu
monitoring.millennia.cloud
dashboard.flipkick.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
*.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
statuspage.siteflow.app
api.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
monitoring.millennia.cloud
isitup.vit4u.co.uk
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
status.chaosgroup.com
monitoring.millennia.cloud
status.configcat.com
monitoring.millennia.cloud
monitoring.millennia.cloud
itsm-api.sap.softwareone.cloud
status.chaosgroup.com
update.softwareone.cloud
status.opa.ba
status.chaosgroup.com
porinimon.porini.it
monitoring.millennia.cloud
monitoring.millennia.cloud
*.di.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
porinimon.porini.it
monitor.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
api-portal.softwareone.cloud
status.chaosgroup.com
*.softwareone.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
*.softwareone.cloud
status.chaosgroup.com
monitoring.millennia.cloud
monitoring.millennia.cloud
testsite247.dynu.net
rmm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
demo.webmon24x7.eu
monitoring.millennia.cloud
dashboard.flipkick.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
*.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
statuspage.siteflow.app
api.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
monitoring.millennia.cloud
isitup.vit4u.co.uk
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
Certificate
The complete raw certificate details for api-portal.softwareone.cloud in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHpjCCBY6gAwIBAgIQDL1ocGkyW5hx9dChVFz4QjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjA2MDAwMDAwWhcNMjQwNjA2MjM1OTU5WjAnMSUwIwYDVQQDExxhcGktcG9y dGFsLnNvZnR3YXJlb25lLmNsb3VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvkvpXB5JIL8mC7STp9t2cbkJqmJAdQxp3a+x4CPCXXjmEkqPy3vQ+MHp r7PN+H5T23hshPC1fq4z4gRwE0kc4jknMnczKPyfKSs4yqx+2CGvC7huJSPG6mxv k0jiDe6H90WaUKQirK6fAhO/ICr1SNeTwOvfDJkweo+jE5NuYZv3XuRMYhlVYiX2 D5R6XpwaDqI7EMaSUhMpj1D4hleMPcHpaBJRNL7a6BCaAcX0AXJqoPde6UFezdfE s6r3z3bhdcB2SjHNsyzl5uTroIzurw2I5SfT6LD1YvD1Tb550IHY9mgo4Ut60h0P jeClUILwfxjv8GOxygjpaGpcw8Pd6QIDAQABo4IDlzCCA5MwHwYDVR0jBBgwFoAU pbTW6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFDWQkPpHL9IouADRgXZY3D7I KP3vMCcGA1UdEQQgMB6CHGFwaS1wb3J0YWwuc29mdHdhcmVvbmUuY2xvdWQwPgYD VR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGln aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu Y3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9i YWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAC hkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNS U0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB 1nkCBAIEggFtBIIBaQFnAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf tZsAAAGMPTb08wAABAMARjBEAiBre1K6qxWeZJiGoOFU17BArQfUp0v0VF142U5P OxMKcQIgTBx1b6iFDXzNyZQlYnbAI85LdC+pVe7SV9UfDjwFDi4AdgBIsONr2qZH NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYw9NvTIAAAEAwBHMEUCIHcPEe/5 IAznO5c8KUYrB5UlVZl7ltGONz1nNUKGKqVXAiEA+52/oPsvsJsOzqaNEL/sxeTF ekHuV1kk7evvV6aMYvgAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7 qwAAAYw9NvSeAAAEAwBHMEUCIFYCPRI7t/nI62fDo9Vb0YZfFu/9hChhebFUV4vI RUXzAiEA2RrHyn0HrYA5NvctQq5tdysNwSMrtZ6/YagaxlXVbe8wDQYJKoZIhvcN AQELBQADggIBAAAdYg/NKfXKolgPf0geTPbAUapW33v7lsle57+Ouhu28akijZon M/Aerx+iQtrgEIUJLk0OKEcLMCgn0AaHfqicCRhJBBrOVJPtY8u8psxwNcUCka94 7pbYf4rCKfh6bRNdztwGTha0Gfy7WIfAgR1bIgNMxv70k2ettb/wjpU4t0akNJ/k Z/jmAtkzpcFXwZpVKLbR2B7J0S5IxNqiucstYvozQN6qC3dXGt1f3hKY5Q8GfHq6 9RCP907Cq9n2r9hbbtcOlrbqdV18IWcajavnf1HSrTy+0e1bT6v3KMmgTUJEXgFq gpjXvSipw98s2cpTiKVbRAZXLL0pv3buDm+mnYgUbzHioyGmVfaU6if7BVadt5sf xyI5wS1mi7SLmkXvnFr0CY0EJ+iB+dqRatLNk7AvWwZYXfpP1fWqMYUqlpScCs5H 9tCslwhW/TQHNgvB8qqpm+GheM06k4L1d5j24yQ9sFFQ9khZ/FZjV5va5vqIdeed Tsvv/0vpQK03pO42dprcOkiYeZHZKCycgIYFaiOZ8vj6P8Oy8V4zbcx1tR81TTP+ VM/BzwK3gi/PBolN5bmxgOaYN58wnipGXONYK4CiA917lq4jGlD1XwcKLSkK/gNg EifEIOUxCCUo6GZrU+YIWlVaqvmTsLxiW7pwrcbOiBSxKuLEho83+kNM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkvpXB5JIL8mC7STp9t2 cbkJqmJAdQxp3a+x4CPCXXjmEkqPy3vQ+MHpr7PN+H5T23hshPC1fq4z4gRwE0kc 4jknMnczKPyfKSs4yqx+2CGvC7huJSPG6mxvk0jiDe6H90WaUKQirK6fAhO/ICr1 SNeTwOvfDJkweo+jE5NuYZv3XuRMYhlVYiX2D5R6XpwaDqI7EMaSUhMpj1D4hleM PcHpaBJRNL7a6BCaAcX0AXJqoPde6UFezdfEs6r3z3bhdcB2SjHNsyzl5uTroIzu rw2I5SfT6LD1YvD1Tb550IHY9mgo4Ut60h0PjeClUILwfxjv8GOxygjpaGpcw8Pd 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16934198332391859137656552423950186562 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-portal.softwareone.cloud' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24022711329867572210981555207707290187106496801314817582922520651105787364862282517096415803762412099841725913208659237274335569357525283305604067462933608962356335240567811434293775241575385829694443103578463645927701554883504645500686690708920473177324360900828812137704570211706620777008681479164072767935458794402736896697047587901429341693100170551316984054589608002052883852159665987988326521621143933624305241589859162266467563304439935942896264452467032342654667831560866833989278604444029321828397533205738600925490812972536810575843810576941250409202448805387317076406839139963442478647641588005113528835561 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 359090fa472fd228b800d1817658dc3ec828fdef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-portal.softwareone.cloud' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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