brockmann.rightpoint.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:66:7a:9b:dd:7c:78:31:f6:24:bc:d8:16:86:e3:c6 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brockmann.rightpoint.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:66:7a:9b:dd:7c:78:31:f6:24:bc:d8:16:86:e3:c6
Serial Number (int): 9836697052948460320955195655314662342
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d1:99:d5:6c:9a:47:79:55:ca:27:61:31:bb:c8:f7:25:88:3c:24:3f
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 5d:77:cb:b5:66:fa:52:ec:ea:23:b6:a1:c2:cb:2f:b2:50:84:c8:c8
Fingerprint (sha256): 98:34:00:2f:37:4e:b2:dd:dc:4d:49:4d:5f:91:26:0f:ad:8a:9b:a4:7e:3d:2d:1b:d5:d5:1e:6f:14:e1:8a:52

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate brockmann.rightpoint.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brockmann.rightpoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brockmann.rightpoint.com

Other certificates including the domain name rightpoint.com

(limited to 100 certificates)
qa-oz.rightpoint.com
scim.rightpoint.com
sni.cloudflaressl.com
employeelink.rightpoint.com
*.rightpoint.com
*.rightpoint.com
sni10e60gl.wpc.edgecastcdn.net
slot-oz.rightpoint.com
talent.rightpoint.com
mail.rightpoint.com
sni.cloudflaressl.com
sni.cloudflaressl.com
employeelink.rightpoint.com
thanks.rightpoint.com
go.rightpoint.com
go.rightpoint.com
*.rightpoint.com
thanks.rightpoint.com
oz.rightpoint.com
proddevhandbook.rightpoint.com
rightpoint.com
sip.rightpoint.com
snid6c3gl.wpc.edgecastcdn.net
sni.cloudflaressl.com
thanks.rightpoint.com
mail.rightpoint.com
*.rightpoint.com
rightpoint.com
meetings.rightpoint.com
rightpoint.com
*.rightpoint.com
talent.rightpoint.com
sip.rightpoint.com
www.rightpoint.com
*.rightpoint.com
sni.cloudflaressl.com
qa-oz.rightpoint.com
arch.rightpoint.com
brockmann.rightpoint.com
sni.cloudflaressl.com
*.rightpoint.com
mail.rightpoint.com
rightpoint.com
snid6c3gl.wpc.edgecastcdn.net
link.rightpoint.com
www.rightpoint.com
sni.cloudflaressl.com
proddevhandbook.rightpoint.com
rightpoint.com
meetings.rightpoint.com
sni.cloudflaressl.com
sni.cloudflaressl.com
rightpoint.com
sl.rightpoint.com
oz.rightpoint.com
brockmann.rightpoint.com
rightpoint.com
*.rightpoint.com
*.rightpoint.com

Certificate

The complete raw certificate details for brockmann.rightpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnDCCBYSgAwIBAgIQB2Z6m918eDH2JLzYFobjxjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjQwMzA1MDAwMDAwWhcNMjQwOTA1MjM1OTU5WjAjMSEwHwYDVQQDExhicm9ja21h
bm4ucmlnaHRwb2ludC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyvjkTtbv7GMdgcjHAgFMJ5sYPo9sJ0ORu2e8pGJkdbQUAni1uL+Fik0xR7g80
FZ4cNvzD/CscUnjJ1GEl7FxuoYcMEoW1nHoIpt2IDX5L8UElcCGOZBS9mNXDal3b
zcFB/EF0g1EWOma2zLNYIXisFITw4Ft/TbKAFXWgCEpSckGoV0WzMXNT+3IBaTNK
ktsHA8Jj6H1/hZMWEmCzvL4gsqygYuUv4OGHLHM/vRIvPAbNCDxqWvBOUlxAbyTi
q11JhL3Ql2aeosDJvtncoXqkdkNF0cn9ybX+3M5ONOqAUEKvaLxBjGnRY0EJGGQa
3yrAZNS+Rkdzrc5NlO0x9OvRAgMBAAGjggORMIIDjTAfBgNVHSMEGDAWgBSltNbr
NsTna6bfxGQLASogBLhmIzAdBgNVHQ4EFgQU0ZnVbJpHeVXKJ2Exu8j3JYg8JD8w
IwYDVR0RBBwwGoIYYnJvY2ttYW5uLnJpZ2h0cG9pbnQuY29tMD4GA1UdIAQ3MDUw
MwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEag
RIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNB
NDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDov
L2NhY2VydHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNI
QTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB/wQCMAAwggF7BgorBgEEAdZ5AgQCBIIB
awSCAWcBZQB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjg1q
gEoAAAQDAEYwRAIgAl4ByUfz4He+asiwjbpeEoGhBwmiZ8zM6NfFJ9zk9HsCIGeX
stV5KBpV8NpClV3TELHUYmPNMYtA0SCdHtPMnis9AHYASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGODWqARwAABAMARzBFAiEA+MHJjKbeAwP+95k6
Eu9N0FO9MgbTQwedmJdYzwyrfGUCIF70HHoioF74LcyRStl7+7cS34gklrHgDDeC
hGgZqPXDAHQAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGODWqA
dAAABAMARTBDAh8/qyt6IA9CyMwwDIy49ddo3kuEkQNrYK8ptiVnrmMTAiA8BDwV
JEowJ4I1VHwpoDEWq3Gb/bJXlTy34GzCd8p+HDANBgkqhkiG9w0BAQsFAAOCAgEA
ioTShiRogP/st826qTk6tfbzjx92ZgbPUZFNYgQi6MeYCbNq+FNGEU9LsZyDpS0X
wn52sKtSGG8r0+xelPq1PFWlj82BUQrHvPVm+XcdPyyqpLbAjUcmVFM5kMTBsGg+
IB/NI0lwuWObKFvaQVfkJOKGxCT1s4q9yD6lWJQ1VmMKOhfScVQc4sCNGSJwA8My
XPSo8EVN5C/LCadjqegHtrbbd5S59Vwj/pv6So1bOq3n2Z9jItn2ufV02Pn+rZ6i
H06/iJjCbC49yhfQ+kbUwMI0eV2FkB2jXORzSuRsI3ykd1QajWyT4TWa6ggNMqIq
4skvpQCy0LwWw7wXlMpoxNMyhGlbmQL2q+PbVJJ9B/DE6ZvP0keo0rNj593/L5wM
jz7qmG0u9mhtuU4rdEUku1q8gZK44y15YMt5B1N0//c6tRzCSwS2xU2gRks4JeeV
gO79u3xIEG/Pf1JmDeGarfmPUkMPA1uo2lnqU3Qcy6fBjqvAx+wrjn+6ll/2l6kF
Q6SIsGK532SWgr0din24TL6R/ODu7YvEaZL6i0aG+iGYbMe2y9YD9tWhqHQfImZj
kYEoq3DniDtKCycJk3uin958ke6Q12TpuCqDbn0oPS+H9NAGNK0QVxCasnW5dNfp
Gsbrkv8UO7lgGaNhQaXaBYxQ0g3C9QTwZecezzTtzKg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr45E7W7+xjHYHIxwIBT
CebGD6PbCdDkbtnvKRiZHW0FAJ4tbi/hYpNMUe4PNBWeHDb8w/wrHFJ4ydRhJexc
bqGHDBKFtZx6CKbdiA1+S/FBJXAhjmQUvZjVw2pd283BQfxBdINRFjpmtsyzWCF4
rBSE8OBbf02ygBV1oAhKUnJBqFdFszFzU/tyAWkzSpLbBwPCY+h9f4WTFhJgs7y+
ILKsoGLlL+DhhyxzP70SLzwGzQg8alrwTlJcQG8k4qtdSYS90JdmnqLAyb7Z3KF6
pHZDRdHJ/cm1/tzOTjTqgFBCr2i8QYxp0WNBCRhkGt8qwGTUvkZHc63OTZTtMfTr
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9836697052948460320955195655314662342
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brockmann.rightpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22564220720119413435772415550025859743627483292274519040587551650551731189745512020942981272292195393238710534419851941873629831997883046143699653830883188191642478900229274833399307732615450787669862621669617233817112324297782681241982846042250259020065785870343708775249245912348500402137207875969198038115413184457576459515319515927946246557696316878652973308392742219255666351112982850975408495391995964509332961571378883177641474898113264225623593736778686770994292572188972337622485977114909864398678403493181530838183296030505070637570035331210561793627586980859360992650124724875537336825033607485411864931281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d199d56c9a477955ca276131bbc8f725883c243f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brockmann.rightpoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							016500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e0d6a804a00000403004630440220025e01c947f3e077be6ac8b08dba5e1281a10709a267cccce8d7c527dce4f47b02206797b2d579281a55f0da42955dd310b1d46263cd318b40d1209d1ed3cc9e2b3d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e0d6a80470000040300473045022100f8c1c98ca6de0303fef7993a12ef4dd053bd3206d343079d989758cf0cab7c6502205ef41c7a22a05ef82dcc914ad97bfbb712df882496b1e00c3782846819a8f5c30074003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e0d6a80740000040300453043021f3fab2b7a200f42c8cc300c8cb8f5d768de4b8491036b60af29b62567ae631302203c043c15244a30278235547c29a03116ab719bfdb257953cb7e06cc277ca7e1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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