*.gtefcu.org

- GTE Federal Credit Union -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:2d:b1:e3:96:bc:c8:84:f5:05:92:c1:3b:48:85:e1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GTE Federal Credit Union

Organization: GTE Federal Credit Union
State / Province: Florida
Locality: Tampa
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2d:b1:e3:96:bc:c8:84:f5:05:92:c1:3b:48:85:e1
Serial Number (int): 8212629351287276017588168619513644513
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 09:65:9a:8d:9b:0c:70:be:44:23:d3:66:fb:88:54:5f:48:be:0e:a8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 92:ea:65:37:68:b7:09:ae:72:71:1d:93:f6:f4:c4:e7:f1:b5:fc:40
Fingerprint (sha256): 95:8e:38:22:92:3c:3d:e8:3e:e0:d0:77:1a:13:1e:f9:27:fc:85:50:91:10:5e:c9:fb:68:28:74:b4:79:9b:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.gtefcu.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gtefcu.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gtefcu.org
gtefcu.org

Other certificates including the domain name gtefcu.org

(limited to 100 certificates)
instantissueccm.ads.gtefcu.org
cuathome.gtefcu.org
*.gtefcu.org
webmail.gtefinancial.org
*.gtefcu.org
www.gtefcu.org
*.gtefcu.org
cuathome.gtefcu.org
m.gtefcu.org
cuathome.gtefcu.org
instantissueemv.gtefcu.org
instantissueemv.gtefcu.org
www.gtefcu.org
*.gtefcu.org
instantissueccm.ads.gtefcu.org
polycr01.gtefinancial.org
webmail.gtefcu.org
*.gtefcu.org
www.gtefcu.org
mortgages.gtefcu.org
*.gtefcu.org
www.gtefcu.org
*.gtefcu.org
cuathome.gtefcu.org
*.gtefcu.org
m.gtefcu.org
*.gtefcu.org
cuathome.gtefcu.org
cuathome.gtefcu.org
m.gtefcu.org
*.gtefcu.org
*.gtefcu.org
polycr01.gtefinancial.org
*.gtefcu.org
*.gtefcu.org
m.gtefcu.org
webmail.gtefinancial.org
*.gtefcu.org
www.gtefcu.org
webmail.gtefinancial.org
webmail.gtefcu.org
webmail.gtefinancial.org
*.gtefcu.org
mortgages.gtefcu.org
mortgages.gtefcu.org
cuathome.gtefcu.org
www.gtefcu.org
www.gtefcu.org
*.gtefcu.org
m.gtefcu.org
mortgages.gtefcu.org
instantissueemv.gtefcu.org
instantissueccm.ads.gtefcu.org
instantissueemv.gtefcu.org
webmail.gtefinancial.org

Certificate

The complete raw certificate details for *.gtefcu.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvDCCBaSgAwIBAgIQBi2x45a8yIT1BZLBO0iF4TANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA2MDcwMDAwMDBa
Fw0yMzA2MDcyMzU5NTlaMGkxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdGbG9yaWRh
MQ4wDAYDVQQHEwVUYW1wYTEhMB8GA1UEChMYR1RFIEZlZGVyYWwgQ3JlZGl0IFVu
aW9uMRUwEwYDVQQDDAwqLmd0ZWZjdS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs6ta9cwh9zw8YfZGAqQOobingtus6wG0LHJaY8ew+3OsQagYx
Zp5ZqsPuzYEnpqypaBEXe6mx9U3hWCchJwuT7neJCHI6qIOgX69UAfSBDMk1FFWh
kT7RXvtmcegO6QSz8AO5XuydLGzcIK3TY+1XHupeQSh/1r1xudwa6r1GaLiFvw21
nUSiOM40L+tRT2d4FZPuKlE8tBjVZwiM3EZ6tmvsw8SVgiIfcZf4s8V2ejj2RM/0
4iCgnBElKOGxIj6/52z5/4AB/HrxvS7jkSOF7JElGYCgWqxiqsVcYNvcy7OBmzHg
2op/c4SVaVGO18uD4b9/Ox2cCGWX8d7m5+rbAgMBAAGjggN4MIIDdDAfBgNVHSME
GDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUCWWajZsMcL5EI9Nm
+4hUX0i+DqgwIwYDVR0RBBwwGoIMKi5ndGVmY3Uub3JnggpndGVmY3Uub3JnMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8G
A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lD
ZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQw
CQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA6D7Q2j71BjUy
51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGBPzWxugAABAMARzBFAiEAw9WNf+PQ
57dJeL7DJaM40cEvYO6O6fcFBDFuiFoCSygCIHXxL8woOjQ5aaaPzFBqXBKoBg9A
SaOauwQjre6+jLl5AHYANc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwA
AAGBPzWx6wAABAMARzBFAiEA//ywiO62VjjtlKLXLbuvsRrRMAAZQ/grL/sZI927
BDYCIGuFHUay4Y6CEAQoAxJ8fDn4cj5r6TI5d61w77WNZVidAHYAtz77JN+cTbp1
8jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGBPzWx9gAABAMARzBFAiEA3GcUKxwm
G55ew1H104hn2tpCfM2J60cSNIUDY4IdSGsCIHItr/o+qOkL+1R/wSe5LK+dJAQG
YOp+9jOi+bnKGzaPMA0GCSqGSIb3DQEBCwUAA4IBAQBmq40ez4/i7JcRnk6iNFBP
gDnRSt9Gd7fe/GELJ62iAYSjJwtsQcyNu0Z2gICDMS3P+DuMp9S27Ksv0eJk7n8t
5AR0aiYHmqWKbrhismxjeYpIru3rtdA/TyF3jRAgV7/cUA7iwzaw/E/jPaYbGzwd
MoikVVIfYVbb8X1NYj5O9jON2c0EMNHzOu8ho1f7DcVBwNV67LdfSkdXJZarPcpE
vNT8GZ/RAc85MNamp+qLtC91+dxdCodzqjPBKOrdiVvba1zf+ytCFvOjoioMqMJ/
ISV2DikcwD3PzKyTjT/LEnlkKiq+7KjHdkRfIO3CAmmqWJIYAGYjn+VXFJKOFnLv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOrWvXMIfc8PGH2RgKkD
qG4p4LbrOsBtCxyWmPHsPtzrEGoGMWaeWarD7s2BJ6asqWgRF3upsfVN4VgnIScL
k+53iQhyOqiDoF+vVAH0gQzJNRRVoZE+0V77ZnHoDukEs/ADuV7snSxs3CCt02Pt
Vx7qXkEof9a9cbncGuq9Rmi4hb8NtZ1EojjONC/rUU9neBWT7ipRPLQY1WcIjNxG
erZr7MPElYIiH3GX+LPFdno49kTP9OIgoJwRJSjhsSI+v+ds+f+AAfx68b0u45Ej
heyRJRmAoFqsYqrFXGDb3MuzgZsx4NqKf3OElWlRjtfLg+G/fzsdnAhll/He5ufq
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8212629351287276017588168619513644513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tampa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTE Federal Credit Union'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gtefcu.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21828791796430531136508289909233960253826516238657535499581314565033576661009548756472163542225571502109316407044120249428759711501180330265742734014537371167210029038849915506218511816493290377646634030588560958250872999310905625614921262689099173373484084390559577542545692601202837193763967336698192558489862252922665506913675153979046685613478390912064047179732245945403940790550090617230985491304645363674772892877907331427072348778436614726035613922650814425944408666034235247457867670218592440123677455787435243426855938413041194247765979275962194089975672437167982495310931264507521499357683585143656277338843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09659a8d9b0c70be4423d366fb88545f48be0ea8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtefcu.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001813f35b1ba0000040300473045022100c3d58d7fe3d0e7b74978bec325a338d1c12f60ee8ee9f70504316e885a024b28022075f12fcc283a343969a68fcc506a5c12a8060f4049a39abb0423adeebe8cb97900760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001813f35b1eb0000040300473045022100fffcb088eeb65638ed94a2d72dbbafb11ad130001943f82b2ffb1923ddbb043602206b851d46b2e18e8210042803127c7c39f8723e6be9323977ad70efb58d65589d007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001813f35b1f60000040300473045022100dc67142b1c261b9e5ec351f5d38867dada427ccd89eb471234850363821d486b0220722daffa3ea8e90bfb547fc127b92caf9d24040660ea7ef633a2f9b9ca1b368f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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