www.monumentregroup.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0f:e3:0b:7b:72:5d:b6:e0:59:b3:40:8e:a5:52:e9:ed was issued on by DigiCert, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.monumentregroup.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:e3:0b:7b:72:5d:b6:e0:59:b3:40:8e:a5:52:e9:edSerial Number (int): 21117304210625358218213350002459339245
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a3:24:fe:3f:45:1a:be:c1:eb:e2:20:6d:fc:1f:69:dd:b6:59:53:bd
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 90:85:37:85:e8:55:16:51:f6:6b:d4:ff:b5:94:c0:4b:29:ff:90:8b
Fingerprint (sha256): a5:72:9d:96:62:86:f6:58:f7:77:96:12:8f:c2:8a:b2:7d:ee:68:99:be:b3:cc:9b:48:4a:7a:da:c7:9e:53:d9
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate www.monumentregroup.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.monumentregroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.monumentregroup.com
monumentregroup.com
cosmic.monumentregroup.com
monumentregroup.com
cosmic.monumentregroup.com
Other certificates including the domain name monumentregroup.com
(limited to 100 certificates)
monumentregroup.com
sdp.hja.net
servicedesk.monaghancoco.ie
cosmic.monumentregroup.com
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
monumentregroup.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
monumentregroup.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.ambient.org.uk
servicedesk.durbinglobal.com
helpdesk.greenfood.nl
servicedesk.labbuit.it
monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
monumentregroup.com
sd.kormotech.com
cosmic.monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
help.sch1584.ru
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
itsupport.actibel.be
helpdesk.greenfood.nl
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
helpdesk.vandenbraembussche.be
helpdesk.nauit.lt
support.sysco.uk.com
helpdesk.trinity.croydon.sch.uk
helpdesk.adc.ro
help.idowa.de
servicedesk.cplaromas.com
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.trinity.croydon.sch.uk
monumentregroup.com
helpdesk.aldaholding.com
servicedesk.lumanity.com
servicedesk.monaghancoco.ie
www.monumentregroup.com
helpdesk.alivetravel.com
helpdesk.alivetravel.com
helpdesk.szallas.hu
itdesk.solargis.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
www.monumentregroup.com
support.sysco.uk.com
servicedesk.durbinglobal.com
service.myspock.work
servicedesk.monaghancoco.ie
help.idowa.de
helpdesk.adc.ro
helpdesk.porvairfiltration.com
servicedesk.cplaromas.com
sdpondemand.monumentregroup.com
demo.servicedeskplus.nl
servicedesk.phmg.com
demo.servicedeskplus.nl
servicedesk.endrich.com
itsupport.actibel.be
servicedesk.monaghancoco.ie
servicedesk.moredun.ac.uk
helpdesk.greenfood.nl
sdp.hja.net
servicedesk.monaghancoco.ie
cosmic.monumentregroup.com
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
monumentregroup.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
monumentregroup.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.ambient.org.uk
servicedesk.durbinglobal.com
helpdesk.greenfood.nl
servicedesk.labbuit.it
monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
monumentregroup.com
sd.kormotech.com
cosmic.monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
help.sch1584.ru
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
itsupport.actibel.be
helpdesk.greenfood.nl
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
helpdesk.vandenbraembussche.be
helpdesk.nauit.lt
support.sysco.uk.com
helpdesk.trinity.croydon.sch.uk
helpdesk.adc.ro
help.idowa.de
servicedesk.cplaromas.com
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.trinity.croydon.sch.uk
monumentregroup.com
helpdesk.aldaholding.com
servicedesk.lumanity.com
servicedesk.monaghancoco.ie
www.monumentregroup.com
helpdesk.alivetravel.com
helpdesk.alivetravel.com
helpdesk.szallas.hu
itdesk.solargis.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
www.monumentregroup.com
support.sysco.uk.com
servicedesk.durbinglobal.com
service.myspock.work
servicedesk.monaghancoco.ie
help.idowa.de
helpdesk.adc.ro
helpdesk.porvairfiltration.com
servicedesk.cplaromas.com
sdpondemand.monumentregroup.com
demo.servicedeskplus.nl
servicedesk.phmg.com
demo.servicedeskplus.nl
servicedesk.endrich.com
itsupport.actibel.be
servicedesk.monaghancoco.ie
servicedesk.moredun.ac.uk
helpdesk.greenfood.nl
Certificate
The complete raw certificate details for www.monumentregroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHyzCCBbOgAwIBAgIQD+MLe3JdtuBZs0COpVLp7TANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwMjI0MDAwMDAwWhcNMjQwMjIzMjM1OTU5WjAiMSAwHgYDVQQDExd3d3cubW9u dW1lbnRyZWdyb3VwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANQpxtqnbN/UYVkeurtOL7uldiDcn6dnJq8g7Fq7hFOTULxA7cfrpPWVKnnPjstK 7cq+FA4Pl5BtMFm0OlFMlsjMzf4IPFP4L8ZtWI1XkeIbQRAw8/9TosKhHY/0BNh/ 6uDHkZW7uczZAvZVGAVqP5uIbfUwa3Ok8kxCDJZG/zLbTTUNLC8dgHgVvH/OWxxZ mVMDC5o+yJwHVcM65A72smoiCjf/SsUCTvVbrbVa7t4G8DOb8J8qtpVXRd3c9jMV C5RUuHj5KdPcDbwJZQA97dTwnWYyXWt1bMD6cEFZz08UnoOIwIy9gzJNBZTzSWiU 4pf5xRvVzlax+pH7b9pEAGcCAwEAAaOCA8EwggO9MB8GA1UdIwQYMBaAFKW01us2 xOdrpt/EZAsBKiAEuGYjMB0GA1UdDgQWBBSjJP4/RRq+weviIG38H2ndtllTvTBT BgNVHREETDBKghd3d3cubW9udW1lbnRyZWdyb3VwLmNvbYITbW9udW1lbnRyZWdy b3VwLmNvbYIaY29zbWljLm1vbnVtZW50cmVncm91cC5jb20wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGU MEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxU TFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRp Z2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0Ex LmNybDA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcw AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8v Y2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hB MjU2MjAyMkNBMS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIB agFoAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGg1U59AAA BAMARzBFAiA37TWxXymZ/LzUchTqTSsu5ZHqdkul8Nm3cYcrr4R8yQIhAP+mFVH6 bBjhLIzXWhoEJ5Nq1rfsEzvw0dEhkZ2edVktAHYASLDja9qmRzQP5WoC+p0w6xxS ActW3SyB2bu/qznYhHMAAAGGg1U6NAAABAMARzBFAiEAo9/5d0BS7tPe/ttMnNX2 2zs33VQ4d2nA7bp0Vs5tTUACIB+FMRWHjEWdEr89SPVw2CAUCvYbfwbIa4krOKp8 sImuAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGGg1U6JgAA BAMARzBFAiAGk3FYRxFMk4JOMHbhAWL8H+A8fCn/90wdBp5zYJsKtwIhAIAUOgFa UjTz08X++ifDRBA/YsqxbFU6E5bxJCkuxIp0MA0GCSqGSIb3DQEBCwUAA4ICAQCQ iRU+TEv4KF2BqF0giAxeu17Gutb1HZSZmyiiXW+mdpWnnewEVj3ns9ZbekSVvjO1 1q8Xv5jiImbmPMA9hSUXIWw2K45PJNnAaRApITSGeONQxQYSumGAlLgNzfhKi/v0 f8g3FePYbefw07QiJojMa/5WLFKW2R/7Yk/6zD/fjhKW+O3QY4FZqaVshpZkbLzy Rhd811pgdeCRPJoSwAeggoPY1w6mlDlHxPkeylY+uEu1z0k/d5Ni0Zi0BiLO5dKJ UfFkBHqb3qWhEj4ldYmNIb3r7EfF43Zk5H2BCd3jCadgFg1J8Ktlf8WAQY5GDEX2 r/b7VQ+vW7XXysQu6LS9d28BWv+9HHAQxuzxWn3twpKfPXzez9y+uVYDLfexA8p8 8SLpV2U3WAOvH0ZCtbS1MElnwHWIDkvHyAT6gwwlU9I/+nlDfLmgCJ6ptgyiljCV JWjlAMII/MnpYZj1Ht/Afaia6HxRGObX5/fgQrcxZEtgzIBYbKw1+EJQbWSC/ZTn Gl+u8PpybasMs9PE64ddyr8XSWC9SRXZVCrbRT9Cz2QiSNZTyOEOFVv5vk+ahZ/j HM8km9dS/Xp9EDCwMCQLwyGCB/cYwgijyjsY7BvQ/iai093ih7IGwW0hnrNwSF0Q xJzPGejR7MMVMFXugiCh9KtRfetUSnXa4pJ8IfKx0w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CnG2qds39RhWR66u04v u6V2INyfp2cmryDsWruEU5NQvEDtx+uk9ZUqec+Oy0rtyr4UDg+XkG0wWbQ6UUyW yMzN/gg8U/gvxm1YjVeR4htBEDDz/1OiwqEdj/QE2H/q4MeRlbu5zNkC9lUYBWo/ m4ht9TBrc6TyTEIMlkb/MttNNQ0sLx2AeBW8f85bHFmZUwMLmj7InAdVwzrkDvay aiIKN/9KxQJO9VuttVru3gbwM5vwnyq2lVdF3dz2MxULlFS4ePkp09wNvAllAD3t 1PCdZjJda3VswPpwQVnPTxSeg4jAjL2DMk0FlPNJaJTil/nFG9XOVrH6kftv2kQA ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21117304210625358218213350002459339245 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.monumentregroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26783121547818092301528328593092952173568241082801201820121428549716127650557638481507895245715017968671885195908372176554262336665965024476655140906572834182961419830765183230666882292880034039003483475992888719984758634964688897873921712593116292624764571833991412352920528629348489576174200641806188758077161644987326452628863482840886510630794221404773425184008655337513159047922802763048158238415096340055872834002046707399124917640180222635221762738576072282952489702758354267238088545042391111384107352200760718593705654136695445178726913834816100682930549891931493362472173613152724777726295437471413671559271 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a324fe3f451abec1ebe2206dfc1f69ddb65953bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monumentregroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monumentregroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmic.monumentregroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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