*.sonax.de

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:52:ff:af:a7:b4:c9:22:90:3f:f5:e6:98:bb:d7:a1 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sonax.de

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:52:ff:af:a7:b4:c9:22:90:3f:f5:e6:98:bb:d7:a1
Serial Number (int): 9735550244174191269025247409274083233
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 64:68:63:76:af:2a:7e:c2:c2:a4:ff:ad:43:ac:8a:25:17:48:a0:f7
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): f9:7f:4d:57:3e:25:38:7f:12:6d:32:65:3b:84:d7:ab:8a:7f:df:39
Fingerprint (sha256): 93:4a:85:27:a2:e9:9b:5f:63:a0:46:ff:3d:e4:70:3b:c8:14:64:32:f6:14:d9:7a:81:b2:67:bd:24:58:d1:9f

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.sonax.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sonax.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sonax.de
sonax.de

Other certificates including the domain name sonax.de

(limited to 100 certificates)
extranet.sonax.de
qr.sonax.com
admin.sonax.at
*.sonax.de
facebook.sonax.de
mobile.sonax.de
facebook.sonax.de
mobile.sonax.de
facebook.sonax.de
m.profi.sonax.de
mobile.profi.sonax.de
sonax.de
sonax.de
www.sonax.es
mobile.profi.sonax.de
blick.sonax.de
activesync.sonax.de
www.sonax.de
www.sonax.fi
blick.sonax.de
es.sonax.com
extranet.sonax.de
export.sonax.de
profi-mobile.sonax.de
m.profi.sonax.de
www.sonax.fi
m.profi.sonax.de
*.sonax.de
cc-one.sonax.de
www.sonax.de
dtm.sonax.de
extranet.sonax.de
facebook.sonax.de
blick.sonax.de
facebook.sonax.de
*.sonax.de
pflege.sonax.de
export.sonax.de
admin.sonax.at
*.sonax.de
*.sonax.de
mobile.sonax.de
*.sonax.de
admin.sonax.at
export.sonax.de
blick.sonax.de
admin.sonax.by
profi-mobile.sonax.de
pflege.sonax.de
mobile.profi.sonax.de
blick.sonax.de
admin.sonax.at
export.sonax.de
www.sonax.es
export.sonax.de
export.sonax.de
*.sonax.de
admin.sonax.at
pflege.sonax.de
m.profi.sonax.de
*.sonax.de
extranet.sonax.de
www.sonax.fi
blick.sonax.de
admin.sonax.at
mobile.sonax.de
admin.sonax.at
admin.sonax.by
*.sonax.de
extranet.sonax.de
admin.sonax.at
mobile.sonax.de
extranet.sonax.de
pim.sonax.de
profi-mobile.sonax.de
*.sonax.de
*.sonax.de
www.sonax.fi
pflege.sonax.de
pflege.sonax.de
coatings.sonax.de
*.sonax.de
extranet.sonax.de
extranet.sonax.de
facebook.sonax.de
sonax.de
admin.sonax.be
mobile.profi.sonax.de
pflege.sonax.de
profi-mobile.sonax.de
www.sonax.fi
admin.sonax.at
profi-mobile.sonax.de
extranet.sonax.de
admin.sonax.at

Certificate

The complete raw certificate details for *.sonax.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIjDCCBnSgAwIBAgIQB1L/r6e0ySKQP/XmmLvXoTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K1JhcGlkU1NMIEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjIxMjE5MDAwMDAwWhcNMjQwMTE5MjM1OTU5WjAVMRMwEQYDVQQDDAoqLnNvbmF4
LmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs4hhr7INkprwYvqS
woEYNPcxU+oy6tLtbWXZMaTtpNz2nSnw2RG5lZBdjskn7SWJoYa8q+ciIUnIGIjm
Joc3p8c10FBuumbKZnT+h7MCUXGnCJewnViPJo1XnQMl/V8CA9uXAYUjFiTghhRo
LWwNqlXg/r4PLUX3w3pBRVyWjtdEJDVp6vtH0DNpuDqxhS3A4iWwIfwGrOye5AEM
DXcIRkOhn0MAjKRH25rdK0TABM9QPgzfkJ1wSYKrVtVE9Qypuz5pKgDLEsKFaD2H
LDewOhg6KkXjMWjyIeRj55CO8CB+LNvz9JTR/TuS7UtWEyEDL86zOveAu1foyGe1
ev0n5jzd03KLItAHOAUkZry4oBHiZOyJVy4/OPZOaS4/zlo5xmFIu3hA8AnbxuSm
p0i6HWZeYlzH+oLfkPywzwgGepkMDkc5loI4lVu3vmLVWNINH3DbPn4PcnI7IT4h
j7V4QHcam9C59XBrVhqZCNu7/G8kRbzAliHDWEj1M2iZz5ZUCaljDagaoCHbJhSM
pQqUpcOyne8GL6vX8V8P5hBhv7lDa4jEmFw7+5OjIv4P8BOmYpPTJIn2X0fkvbI4
G3CX4EFL5+apSFg3GOoZy+m6NvbN5V8JN3BIi9BEggCvSWz9I1BeCw3o+gSmP42S
ciwk4VVyO9l1rsCEef9nYgnBpssCAwEAAaOCA48wggOLMB8GA1UdIwQYMBaAFPCc
hf2in32PyWi71dSJTR2+05D/MB0GA1UdDgQWBBRkaGN2ryp+wsKk/61DrIolF0ig
9zAfBgNVHREEGDAWggoqLnNvbmF4LmRlgghzb25heC5kZTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQw
SKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9SYXBpZFNTTEdsb2JhbFRM
U1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGln
aWNlcnQuY29tL1JhcGlkU1NMR2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu
Y3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzAB
hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9j
YWNlcnRzLmRpZ2ljZXJ0LmNvbS9SYXBpZFNTTEdsb2JhbFRMU1JTQTQwOTZTSEEy
NTYyMDIyQ0ExLmNydDAJBgNVHRMEAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFs
AWoAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYUpmbE9AAAE
AwBHMEUCIQDKxgk4AAVsSyce6UuniaQcZFAzi1+7IHWNb8bYpAYAEQIgbJIEzkxo
bhSlcVsmPL3MNTbEy6K0ZSjEtms+hOP1lJcAdwBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAYUpmbFQAAAEAwBIMEYCIQCIotUe9bIKMQvV/0LpdZY9
YMhpHqP6SR5vJAuUzII5ggIhAMSyyIeUpEG2KHM7hA9QGgsaLS/cUxzrzhEtwXJO
rSE5AHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGFKZmxXAAA
BAMASDBGAiEA1mcq1Y10qZkPBYEsX6gBAsMXGDbLgGoYxvhQTzJAU/UCIQDC/qd4
zLs660YPLMANz+npQweOedc8efKTuXzP4A8m8DANBgkqhkiG9w0BAQsFAAOCAgEA
msuKpMb1qX2r/SIZd72bRDH4YvTJTq2UsgWAY/TMVEhh+8jmvtfBhmEF99mRZmIy
4Sq08PlOtP6qqrE17LTaaoFCEKfqyLipjHHKG/LwU++jdwYNxI/VV0VVYo6eYna8
euBPyvivHYIHidiGCcBkOidw8Gw8Q0Br6vHKUzOpm0Nip8M3Ax0wBmtTX1y6UVod
4ze9gxjhLhQFYeX5D+wdaDNi7XIPrxi1LUpv0PSbj8o+aNlUx6fPfqfkzWQ3kedz
Cjy8wYR3sVp2Mcv7i9+IE9E1Q0F3guWVF/od6a3hSDMDibVZQNWXRpuqAHVOZoWb
iH9r/k6h7+YPB7TnkgK+5i1fNfZ74rryhhX5Zmn437jEA09c4Y57km0cQc14tFuP
LBHeW+Sjuy3PVwDySdeuoE1MNrrHC2KoFXiI+mf//34s6bzAmtUaTIbX8l0HrBop
1WiyuLeaaCiN1mnLy7AaXSPMfopcPHxfCpBJ04AgpRZCU20XaVCfraOjbZkiUC/W
GuVu0pkvOBPYF3/8CC0jrfQ8/siKA9QIt3rOdz8F3LMWbR9Mson3dwumQ6O8QtqE
qgtReCN50PHUvL5i2c0G/900Qz7blOXCvav6h5SecTq3RJnXVMD36fTJWggdfn55
OkOTXUhqNQsxqpP3EjSeLtx8iCXMhEQo40S2GKMm+HM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9735550244174191269025247409274083233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sonax.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732429680101412215079698916404924053996495953949021141417238958201346461092233334514690102717940123141686544730413775344885840808620526399963598395888645614591753204632555411545813567756355284844320529983876555997087657875811314044337476124063323910764020312468273113252424518217445790429586230777019731236384645541906465916322473651709443374728489495375532510642918505384043870064699584377897624246923840142404040260646221641142321057154539824388148748787980982633907735797438952794302922988684886711464292776717806977156121257897790565036269705487635155797177019692963396867112294115272786881633452235625801922246402179017253375412004175308719425369222074445734790280366096245659075894415586120130754117256656712743254465279871368819428817482577536200392636828272266972059981592302116147939193348740834166439945432148943298113623810171129644358506393161325683218528462008483744162647867043496925543079526279899747976878529841832301147337953399617380544196298027230146399568303570643931071643021783170564371842378685654490698675451650084531594587810598625263927231011213515765206567952243026496402634154421421795571227564825347676213031242630755965384254007431672747271592031471150359866091373062548823901069296279658425532467488459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64686376af2a7ec2c2a4ffad43ac8a251748a0f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonax.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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