jixieamp.kompas.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:6c:dd:a3:e1:a9:6b:11:76:32:38:af:ce:dc:0d:b9 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jixieamp.kompas.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6c:dd:a3:e1:a9:6b:11:76:32:38:af:ce:dc:0d:b9
Serial Number (int): 3223719448843431262582389086067887545
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1e:38:c3:b7:92:68:6e:d8:24:15:a9:cc:74:bf:0f:8b:ff:c3:b8:21
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 71:77:9c:1e:54:72:7e:1c:69:e7:52:8d:d1:17:ca:12:c2:e7:a7:cc
Fingerprint (sha256): 9a:a7:bd:27:56:a2:c0:88:e3:6b:cd:d1:46:b0:f9:35:60:a9:be:d0:99:b4:fa:d5:01:a3:48:de:37:65:3b:89

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate jixieamp.kompas.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jixieamp.kompas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jixieamp.kompas.com

Other certificates including the domain name kompas.com

(limited to 100 certificates)
api.print.kompas.com
*.kompas.com
mail2.kompas.com
beta286.print.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
webdev.kmn.kompas.com
owa.kompas.com
*.kompas.com
kompas.com
owa.kompas.com
apps.kmn.kompas.com
login.kompas.com
api.print.kompas.com
*.kgmedia.id
fudezz.kompas.com
mail2.kompas.com
beta286.print.kompas.com
apps.kompas.com
fudezz.kompas.com
api.print.kompas.com
kompas.com
apps.kmn.kompas.com
asset.kompas.com
*.kgmedia.id
api.print.kompas.com
fudezz.kompas.com
kompas.com
kompas.com
arc.print.kompas.com
bike.kompas.com
asset.kompas.com
owa.kompas.com
beta286.print.kompas.com
*.staging.kompas.com
fudezz.kompas.com
survey.print.kompas.com
asset.kompas.com
*.kompas.com
login.kompas.com
*.kgmedia.id
kompas.com
apps.kmn.kompas.com
*.kompas.com
jixieamptest.kompas.com
kompas.com
*.kompas.com
mail2.kompas.com
mail2.kompas.com
kompas.com
owa.kompas.com
kompas.com
apps.kmn.kompas.com
kompas.com
ads2.kompas.com
*.kompas.com
*.kgmedia.id
jixieamp.kompas.com
*.kompas.com
owa.kompas.com
bike.kompas.com
print1.kompas.com
api.print.kompas.com
*.kgmedia.id
app.print.kompas.com
sip.kompas.com
bike.kompas.com
*.staging.kompas.com
bike.kompas.com
*.kompas.com
*.kompas.com
bike.kompas.com
kompas.com
kompas.com
login.kompas.com
bike.kompas.com
bike.kompas.com
*.kgmedia.id
*.kompas.com
login.kompas.com
kompas.com
api.print.kompas.com
kompas.com
mail2.kompas.com
*.kgmedia.id
*.kompas.com
*.kompas.com
kompas.com
*.kgmedia.id
kompas.com
kompas.com
kompas.com
*.kompas.com

Certificate

The complete raw certificate details for jixieamp.kompas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHkjCCBXqgAwIBAgIQAmzdo+GpaxF2MjivztwNuTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwNjI2MDAwMDAwWhcNMjMxMjI2MjM1OTU5WjAeMRwwGgYDVQQDExNqaXhpZWFt
cC5rb21wYXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxacv
R9Og3RGZ5Z0s7tjdsUyuSl4Ol0bprukdPL0EmrC2agv/X1NHVz72Imnbl5MNcEm0
qS3s8S8WuDVUvBTJ/D7g0pHDR+sErZWDj4XLG+6cEhIBkzw/JJ5++DDMrMtJNtDI
rMBWgTpnnNjGV9wnBMP7Q3nA8ksaDU/HOSalLmCt4wunP4s4XhOrf4emXFPn9Xso
8VOyqqCVmo8YJNzQ93j5EMlT1r9jHO5f9InmUvXqoImUhyKcSGGP/h2EZzpaH35I
dbvb+am2f8wK6ReZU9ARbeKRrTv4wvifk2wBTbW3fprbhbfi5Jvc0YPoY6rhvMIW
eU5XJ24CgpES7nJNzQIDAQABo4IDjDCCA4gwHwYDVR0jBBgwFoAUpbTW6zbE52um
38RkCwEqIAS4ZiMwHQYDVR0OBBYEFB44w7eSaG7YJBWpzHS/D4v/w7ghMB4GA1Ud
EQQXMBWCE2ppeGllYW1wLmtvbXBhcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJo
dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2
U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDA+BgNV
HSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNB
MS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUA6D7Q
2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGI+GxU5gAABAMARjBEAiAr
xTwhVzJLustUHG4vKhBdsyuktetkd0hgAZJyotdyQgIgcfUgwU7bfFPg9HGDvAXm
dUnup+hCzSPVq/mmxN8rxncAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpX
o1LrUgAAAYj4bFUSAAAEAwBIMEYCIQC+qxEpAd8Xxrw+qaYDf86lnpAQD/+Hdzqw
SRBMUUDzWwIhAK0Iyyl4oBHuJfOY8iEtc5+68hm/YO9w5HTwk3An5XDYAHYAtz77
JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGI+GxVRgAABAMARzBFAiEA
z5p/ttFIPSagtmqdVZACmVcikoDD+LDE1DO73lGM46gCIHGg7HxS6EMcod7JSbwk
CSenXoWHaKxWw8CDLjetPitsMA0GCSqGSIb3DQEBCwUAA4ICAQBPaoYNcgSlljts
zUhmgLAysebsjTdOMmdtmKKcMiFMExl/YRa5QlRYS9mpz6z8bhwb5mApv5OY34tN
b9HDx4EqAnMlEeSCaLwlx8upGr+87Z6nWfcXir364EGwO9Z20hj+U0GV8EAUACmT
ZV1MekxMUFSW0pSdvj0WFSNiKF1Bf9Ukj9p4GAEB0LEfjLqGC3Rkq/UlQmV/IDwE
Dh3pehtb4rCrW6/I5ZvumkJ0Q7ZngXlAVe+ST090oYPS0XJw6nS1ceNmzwt3+e3B
j8gpwOVJ18l1igSznTPygcg3QHhw7lPtHi4H54iGp3EzrlRkoyOzH7cU2j0m2pg1
B67T6NpYUYS3sSzGqrE/UsvbFmMgDc75YcjOopt0OBY/8QQnpRPHOJKGFYwJZOLC
dQLto75pOqPc0wBUkIvymaOKQL/6BuSbaJkBSaGotFW7aSRroi99wcg4BfmxkYBj
vmnc8GqvOECO2xGnTW90w6ycM4iUJXbez72kUtCI8TF9br+GajLyYa8+BZcV23xn
ydI1/75lveC59Jf+Lid0A4CRuxRPL0j0qD/UwbBLAt8H+kPCAvXLs8Eq5PcF8BR4
juD0Gwfu8mwkowrT1pMkfIKQk5UCmYcw7QuvcwlDSryiwUCUcL+08LI1Yz7bGMqz
5uCkbtRkIbGLaU2ptatguPZMBNQIXw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxacvR9Og3RGZ5Z0s7tjd
sUyuSl4Ol0bprukdPL0EmrC2agv/X1NHVz72Imnbl5MNcEm0qS3s8S8WuDVUvBTJ
/D7g0pHDR+sErZWDj4XLG+6cEhIBkzw/JJ5++DDMrMtJNtDIrMBWgTpnnNjGV9wn
BMP7Q3nA8ksaDU/HOSalLmCt4wunP4s4XhOrf4emXFPn9Xso8VOyqqCVmo8YJNzQ
93j5EMlT1r9jHO5f9InmUvXqoImUhyKcSGGP/h2EZzpaH35Idbvb+am2f8wK6ReZ
U9ARbeKRrTv4wvifk2wBTbW3fprbhbfi5Jvc0YPoY6rhvMIWeU5XJ24CgpES7nJN
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3223719448843431262582389086067887545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jixieamp.kompas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24951387921472957913609165717240494864022610248391460495471741463556277858184612407550066648826410721176930179371843390971536512461078585872547574564411208425507251450960566419030744362038965859105991489439518242110753554140932999010652108963337203192698612365288801182523949633766344974380642964173123078956519957857669815693121768396092857902132834795015509158087399548569549668305861977505576079583339449699785072917987882990067773359731839717332918334749625856331839596965053696928003549599645024050799465107326389438516576097401836625665117899064272163737007074057997739361159918634433721914925970578242482097613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e38c3b792686ed82415a9cc74bf0f8bffc3b821
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jixieamp.kompas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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