jixieamp.kompas.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 02:6c:dd:a3:e1:a9:6b:11:76:32:38:af:ce:dc:0d:b9 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=jixieamp.kompas.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:6c:dd:a3:e1:a9:6b:11:76:32:38:af:ce:dc:0d:b9Serial Number (int): 3223719448843431262582389086067887545
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 1e:38:c3:b7:92:68:6e:d8:24:15:a9:cc:74:bf:0f:8b:ff:c3:b8:21
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 71:77:9c:1e:54:72:7e:1c:69:e7:52:8d:d1:17:ca:12:c2:e7:a7:cc
Fingerprint (sha256): 9a:a7:bd:27:56:a2:c0:88:e3:6b:cd:d1:46:b0:f9:35:60:a9:be:d0:99:b4:fa:d5:01:a3:48:de:37:65:3b:89
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate jixieamp.kompas.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jixieamp.kompas.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jixieamp.kompas.com
Other certificates including the domain name kompas.com
(limited to 100 certificates)
api.print.kompas.com
*.kompas.com
mail2.kompas.com
beta286.print.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
webdev.kmn.kompas.com
owa.kompas.com
*.kompas.com
kompas.com
owa.kompas.com
apps.kmn.kompas.com
login.kompas.com
api.print.kompas.com
*.kgmedia.id
fudezz.kompas.com
mail2.kompas.com
beta286.print.kompas.com
apps.kompas.com
fudezz.kompas.com
api.print.kompas.com
kompas.com
apps.kmn.kompas.com
asset.kompas.com
*.kgmedia.id
api.print.kompas.com
fudezz.kompas.com
kompas.com
kompas.com
arc.print.kompas.com
bike.kompas.com
asset.kompas.com
owa.kompas.com
beta286.print.kompas.com
*.staging.kompas.com
fudezz.kompas.com
survey.print.kompas.com
asset.kompas.com
*.kompas.com
login.kompas.com
*.kgmedia.id
kompas.com
apps.kmn.kompas.com
*.kompas.com
jixieamptest.kompas.com
kompas.com
*.kompas.com
mail2.kompas.com
mail2.kompas.com
kompas.com
owa.kompas.com
kompas.com
apps.kmn.kompas.com
kompas.com
ads2.kompas.com
*.kompas.com
*.kgmedia.id
jixieamp.kompas.com
*.kompas.com
owa.kompas.com
bike.kompas.com
print1.kompas.com
api.print.kompas.com
*.kgmedia.id
app.print.kompas.com
sip.kompas.com
bike.kompas.com
*.staging.kompas.com
bike.kompas.com
*.kompas.com
*.kompas.com
bike.kompas.com
kompas.com
kompas.com
login.kompas.com
bike.kompas.com
bike.kompas.com
*.kgmedia.id
*.kompas.com
login.kompas.com
kompas.com
api.print.kompas.com
kompas.com
mail2.kompas.com
*.kgmedia.id
*.kompas.com
*.kompas.com
kompas.com
*.kgmedia.id
kompas.com
kompas.com
kompas.com
*.kompas.com
*.kompas.com
mail2.kompas.com
beta286.print.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
kompas.com
*.kompas.com
webdev.kmn.kompas.com
owa.kompas.com
*.kompas.com
kompas.com
owa.kompas.com
apps.kmn.kompas.com
login.kompas.com
api.print.kompas.com
*.kgmedia.id
fudezz.kompas.com
mail2.kompas.com
beta286.print.kompas.com
apps.kompas.com
fudezz.kompas.com
api.print.kompas.com
kompas.com
apps.kmn.kompas.com
asset.kompas.com
*.kgmedia.id
api.print.kompas.com
fudezz.kompas.com
kompas.com
kompas.com
arc.print.kompas.com
bike.kompas.com
asset.kompas.com
owa.kompas.com
beta286.print.kompas.com
*.staging.kompas.com
fudezz.kompas.com
survey.print.kompas.com
asset.kompas.com
*.kompas.com
login.kompas.com
*.kgmedia.id
kompas.com
apps.kmn.kompas.com
*.kompas.com
jixieamptest.kompas.com
kompas.com
*.kompas.com
mail2.kompas.com
mail2.kompas.com
kompas.com
owa.kompas.com
kompas.com
apps.kmn.kompas.com
kompas.com
ads2.kompas.com
*.kompas.com
*.kgmedia.id
jixieamp.kompas.com
*.kompas.com
owa.kompas.com
bike.kompas.com
print1.kompas.com
api.print.kompas.com
*.kgmedia.id
app.print.kompas.com
sip.kompas.com
bike.kompas.com
*.staging.kompas.com
bike.kompas.com
*.kompas.com
*.kompas.com
bike.kompas.com
kompas.com
kompas.com
login.kompas.com
bike.kompas.com
bike.kompas.com
*.kgmedia.id
*.kompas.com
login.kompas.com
kompas.com
api.print.kompas.com
kompas.com
mail2.kompas.com
*.kgmedia.id
*.kompas.com
*.kompas.com
kompas.com
*.kgmedia.id
kompas.com
kompas.com
kompas.com
*.kompas.com
Certificate
The complete raw certificate details for jixieamp.kompas.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHkjCCBXqgAwIBAgIQAmzdo+GpaxF2MjivztwNuTANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwNjI2MDAwMDAwWhcNMjMxMjI2MjM1OTU5WjAeMRwwGgYDVQQDExNqaXhpZWFt cC5rb21wYXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxacv R9Og3RGZ5Z0s7tjdsUyuSl4Ol0bprukdPL0EmrC2agv/X1NHVz72Imnbl5MNcEm0 qS3s8S8WuDVUvBTJ/D7g0pHDR+sErZWDj4XLG+6cEhIBkzw/JJ5++DDMrMtJNtDI rMBWgTpnnNjGV9wnBMP7Q3nA8ksaDU/HOSalLmCt4wunP4s4XhOrf4emXFPn9Xso 8VOyqqCVmo8YJNzQ93j5EMlT1r9jHO5f9InmUvXqoImUhyKcSGGP/h2EZzpaH35I dbvb+am2f8wK6ReZU9ARbeKRrTv4wvifk2wBTbW3fprbhbfi5Jvc0YPoY6rhvMIW eU5XJ24CgpES7nJNzQIDAQABo4IDjDCCA4gwHwYDVR0jBBgwFoAUpbTW6zbE52um 38RkCwEqIAS4ZiMwHQYDVR0OBBYEFB44w7eSaG7YJBWpzHS/D4v/w7ghMB4GA1Ud EQQXMBWCE2ppeGllYW1wLmtvbXBhcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2 U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDA+BgNV HSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5k aWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNB MS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUA6D7Q 2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGI+GxU5gAABAMARjBEAiAr xTwhVzJLustUHG4vKhBdsyuktetkd0hgAZJyotdyQgIgcfUgwU7bfFPg9HGDvAXm dUnup+hCzSPVq/mmxN8rxncAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpX o1LrUgAAAYj4bFUSAAAEAwBIMEYCIQC+qxEpAd8Xxrw+qaYDf86lnpAQD/+Hdzqw SRBMUUDzWwIhAK0Iyyl4oBHuJfOY8iEtc5+68hm/YO9w5HTwk3An5XDYAHYAtz77 JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGI+GxVRgAABAMARzBFAiEA z5p/ttFIPSagtmqdVZACmVcikoDD+LDE1DO73lGM46gCIHGg7HxS6EMcod7JSbwk CSenXoWHaKxWw8CDLjetPitsMA0GCSqGSIb3DQEBCwUAA4ICAQBPaoYNcgSlljts zUhmgLAysebsjTdOMmdtmKKcMiFMExl/YRa5QlRYS9mpz6z8bhwb5mApv5OY34tN b9HDx4EqAnMlEeSCaLwlx8upGr+87Z6nWfcXir364EGwO9Z20hj+U0GV8EAUACmT ZV1MekxMUFSW0pSdvj0WFSNiKF1Bf9Ukj9p4GAEB0LEfjLqGC3Rkq/UlQmV/IDwE Dh3pehtb4rCrW6/I5ZvumkJ0Q7ZngXlAVe+ST090oYPS0XJw6nS1ceNmzwt3+e3B j8gpwOVJ18l1igSznTPygcg3QHhw7lPtHi4H54iGp3EzrlRkoyOzH7cU2j0m2pg1 B67T6NpYUYS3sSzGqrE/UsvbFmMgDc75YcjOopt0OBY/8QQnpRPHOJKGFYwJZOLC dQLto75pOqPc0wBUkIvymaOKQL/6BuSbaJkBSaGotFW7aSRroi99wcg4BfmxkYBj vmnc8GqvOECO2xGnTW90w6ycM4iUJXbez72kUtCI8TF9br+GajLyYa8+BZcV23xn ydI1/75lveC59Jf+Lid0A4CRuxRPL0j0qD/UwbBLAt8H+kPCAvXLs8Eq5PcF8BR4 juD0Gwfu8mwkowrT1pMkfIKQk5UCmYcw7QuvcwlDSryiwUCUcL+08LI1Yz7bGMqz 5uCkbtRkIbGLaU2ptatguPZMBNQIXw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxacvR9Og3RGZ5Z0s7tjd sUyuSl4Ol0bprukdPL0EmrC2agv/X1NHVz72Imnbl5MNcEm0qS3s8S8WuDVUvBTJ /D7g0pHDR+sErZWDj4XLG+6cEhIBkzw/JJ5++DDMrMtJNtDIrMBWgTpnnNjGV9wn BMP7Q3nA8ksaDU/HOSalLmCt4wunP4s4XhOrf4emXFPn9Xso8VOyqqCVmo8YJNzQ 93j5EMlT1r9jHO5f9InmUvXqoImUhyKcSGGP/h2EZzpaH35Idbvb+am2f8wK6ReZ U9ARbeKRrTv4wvifk2wBTbW3fprbhbfi5Jvc0YPoY6rhvMIWeU5XJ24CgpES7nJN zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3223719448843431262582389086067887545 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jixieamp.kompas.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24951387921472957913609165717240494864022610248391460495471741463556277858184612407550066648826410721176930179371843390971536512461078585872547574564411208425507251450960566419030744362038965859105991489439518242110753554140932999010652108963337203192698612365288801182523949633766344974380642964173123078956519957857669815693121768396092857902132834795015509158087399548569549668305861977505576079583339449699785072917987882990067773359731839717332918334749625856331839596965053696928003549599645024050799465107326389438516576097401836625665117899064272163737007074057997739361159918634433721914925970578242482097613 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1e38c3b792686ed82415a9cc74bf0f8bffc3b821 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jixieamp.kompas.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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