www.lbfoster.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 09:f8:39:ef:af:fb:33:e1:b9:c2:c1:7e:11:f9:9a:21 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.lbfoster.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:f8:39:ef:af:fb:33:e1:b9:c2:c1:7e:11:f9:9a:21Serial Number (int): 13251916670322691266452852158450211361
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b1:b5:35:ad:34:43:f3:09:8c:08:8c:8f:c0:b9:52:8a:e4:02:e0:89
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 3f:4f:36:db:b4:cb:2d:8b:2d:66:07:68:d0:9a:27:23:7f:67:19:94
Fingerprint (sha256): a7:86:e5:7d:f1:fe:d2:52:4b:be:2e:45:57:57:79:cf:20:b4:cb:8a:df:ca:a0:a1:8a:bf:a0:a9:33:b9:20:dd
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate www.lbfoster.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lbfoster.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.lbfoster.com
Other certificates including the domain name lbfoster.com
(limited to 100 certificates)
servicedesk1.adaresec.com
tickets.ec-comptech.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
lbfoster.com
leapfrog-ssl-1.gcs-web.com
helpdesk.visitbarbados.org
helpdesk.anfalservices.com.sa
helpdesk.brazos.org
servicedesk.melnor.com
helpdesk.visitbarbados.org
helpdesk.porticopm.com
clfhelpdesk.clf.uk
lbfoster.com
lbfoster.com
servicedesk1.adaresec.com
serviceportal.lbfoster.com
serviceportal.ami.com
helpdesk.porticopm.com
serviceportal.lbfoster.com
helpdesk.brazos.org
servicedesk.chiranogold.com
lbfoster.com
helpdesk.brazos.org
preview.lbfoster.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
servicedesk.chiranogold.com
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
serviceportal.lbfoster.com
servicedesk.owdsales.com
helpdesk.brazos.org
tickets.ec-comptech.com
servicedesk.owdsales.com
leapfrog-ssl-1.gcs-web.com
lbfoster.com
servicedesk.melnor.com
cwsupport.wefreight.com
leapfrog-ssl-1.gcs-web.com
www.lbfoster.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
servicedesk.melnor.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-1.gcs-web.com
tickets.ec-comptech.com
lbfoster.com
lbfoster.com
tickets.ec-comptech.com
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
leapfrog-ssl-1.gcs-web.com
servicedesk.melnor.com
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
lbfoster.com
serviceportal.lbfoster.com
serviceportal.lbfoster.com
serviceportal.ami.com
cwsupport.wefreight.com
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
serviceportal.lbfoster.com
servicedesk.chiranogold.com
www.lbfoster.com
tickets.ec-comptech.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
lbfoster.com
leapfrog-ssl-1.gcs-web.com
helpdesk.visitbarbados.org
helpdesk.anfalservices.com.sa
helpdesk.brazos.org
servicedesk.melnor.com
helpdesk.visitbarbados.org
helpdesk.porticopm.com
clfhelpdesk.clf.uk
lbfoster.com
lbfoster.com
servicedesk1.adaresec.com
serviceportal.lbfoster.com
serviceportal.ami.com
helpdesk.porticopm.com
serviceportal.lbfoster.com
helpdesk.brazos.org
servicedesk.chiranogold.com
lbfoster.com
helpdesk.brazos.org
preview.lbfoster.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
servicedesk.chiranogold.com
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
serviceportal.lbfoster.com
servicedesk.owdsales.com
helpdesk.brazos.org
tickets.ec-comptech.com
servicedesk.owdsales.com
leapfrog-ssl-1.gcs-web.com
lbfoster.com
servicedesk.melnor.com
cwsupport.wefreight.com
leapfrog-ssl-1.gcs-web.com
www.lbfoster.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
servicedesk.melnor.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-1.gcs-web.com
tickets.ec-comptech.com
lbfoster.com
lbfoster.com
tickets.ec-comptech.com
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
leapfrog-ssl-1.gcs-web.com
servicedesk.melnor.com
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
lbfoster.com
serviceportal.lbfoster.com
serviceportal.lbfoster.com
serviceportal.ami.com
cwsupport.wefreight.com
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
serviceportal.lbfoster.com
servicedesk.chiranogold.com
www.lbfoster.com
Certificate
The complete raw certificate details for www.lbfoster.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjzCCBXegAwIBAgIQCfg576/7M+G5wsF+EfmaITANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjExMDAwMDAwWhcNMjQwNjExMjM1OTU5WjAbMRkwFwYDVQQDExB3d3cubGJm b3N0ZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxgzyLjN MfqNmit/4mRNbteoDMgTAis7ifZOI/wxL7In4uiV7+8yC9eMYkcsLOv5mLaQBPRf YQFJS4kwUbUhVuJ/khNb3zKZ1OrN2ZuqOco5RBLRM/wtbNmSZrUR7eSDdO02XTcz GcilP5iySCX/38fndvYJeCHze55pMShx75cScu/mP5ozkd0eeThP2vYUqZChIfTb eKAO5znL0+eandlXFtrHGRObFOfrA/JaSqFyNLLxotlBZNyhngUOeMmzsyjzbvjp /6z9BFI82+SYP+Qz6EdqGoyMGHF877L6cr0pJCxkz8VnHcU2eZZ5gmpHfQyx5Oui VONE1MMIW2Q6qQIDAQABo4IDjDCCA4gwHwYDVR0jBBgwFoAUpbTW6zbE52um38Rk CwEqIAS4ZiMwHQYDVR0OBBYEFLG1Na00Q/MJjAiMj8C5UorkAuCJMBsGA1UdEQQU MBKCEHd3dy5sYmZvc3Rlci5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggr BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCB lDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFs VExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5k aWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNB MS5jcmwwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au ZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2Vy dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQw DAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA7s3QZNXb Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMWYhp/wAABAMARzBFAiEAzcuJ FDlU/62CrV4lCtX1EpFfYNLBEg67Q8fAk9UNN+wCIC43haPYOXwNhDhGxbNm1C2c xu6MtyFdcA8TYEVdNlSEAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY hHMAAAGMWYhqIgAABAMASDBGAiEAq23nkkszcNK9RCvcnUvN4rMWZqyP3XE+Zj2N VGRhAicCIQDDJ1JmGkEyU7/tiysmsKSS8zK8E7dKOnxfp2aGy9G6+gB1ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjFmIaggAAAQDAEYwRAIgfNvC c4ypJDUmxOkPU3vDudFdfbhXtivh2ZnwgbCZYvQCIHh/JyYgXXgWklfHANjmN0ig 9dTwr6Uc3RQ0IAFRz2mDMA0GCSqGSIb3DQEBCwUAA4ICAQCKopoYWh1wyhZtG4Tr Xkuf9urjYtp8j/u78U1kq9gIPaErRSRYpxui3039bzN41dsSyNbwL27YrCYEhDq7 A/89t6n6P3MuF/r5P2gNwaDJXYqmEtTW4GouaNljJYp7jBQo/pn0LzSRwIuR7REa gOauW7u1MHVNBt5aGxVkPRJj9rtOc9vQ1/Ayp4izmE9S6tLq6NeKc2lQh663ke3x 6WFxkGrmIH4mRO4Kdjprt7bLrrkkeYME4GMp6zPPvEI1mr3RhWUXylG+L+qGax8l oZ0ioeVk57xZLVBhAOYyykDvt8DNjS+SAKeIXMKS4iS0+f6LMuiN6azJBuNMWszs iZ6SNH7UFJP1q+F7GgJNBa73Aqtfxox1EBsKKuL7qE6rQNweDRPvjr2l/OvIgoyQ ypszvFMHFvYQNM7DNpdFeI14nXIc2MRKWHL22M1U8XRM4T6sAlhi2nL5PGDfTllJ xpPniRfU4vfglT/Umra7yx7XjT7JlNzE4jcHmodZy+IpxABr7FlN0bcGj4K6Emul sKEzlNwSkW5f+wGzL+nfnpdj22cmXGoQmRAiSc34TMmWG6ZgyrtJc9/y+sqGU9dF B5nN5PC9aZo1NWFz1OwNvr08Jd5ku1tkncDrEguSKRGNBAxi39d8k98tzK3Ma7UY j0urCQlFrnf1JHPNa9XcizaBCQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxgzyLjNMfqNmit/4mRN bteoDMgTAis7ifZOI/wxL7In4uiV7+8yC9eMYkcsLOv5mLaQBPRfYQFJS4kwUbUh VuJ/khNb3zKZ1OrN2ZuqOco5RBLRM/wtbNmSZrUR7eSDdO02XTczGcilP5iySCX/ 38fndvYJeCHze55pMShx75cScu/mP5ozkd0eeThP2vYUqZChIfTbeKAO5znL0+ea ndlXFtrHGRObFOfrA/JaSqFyNLLxotlBZNyhngUOeMmzsyjzbvjp/6z9BFI82+SY P+Qz6EdqGoyMGHF877L6cr0pJCxkz8VnHcU2eZZ5gmpHfQyx5OuiVONE1MMIW2Q6 qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13251916670322691266452852158450211361 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lbfoster.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21093731519158958062064175763162368876962385984228524875667838639000527326015459845769657168924291054595758401123602407479829537329103210359913494586206830859782009968203041111191998023816425135216429131050819595993107780189223802892526983496625962465129744208553816216314790635058186687975224259289765882318452039518394908998262832397349950997826703385789963188045215890070696901376821518413732906730984195597036873887432745254350026711358385773233277738979711411322736228822736225527426811824679336048864392498653358801673009120355265417150951856919547817034292939565624044000880291626254863012435186018461208033961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b1b535ad3443f3098c088c8fc0b9528ae402e089 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbfoster.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 008aa29a185a1d70ca166d1b84eb5e4b9ff6eae362da7c8ffbbbf14d64abd8083da12b452458a71ba2df4dfd6f3378d5db12c8d6f02f6ed8ac2604843abb03ff3db7a9fa3f732e17faf93f680dc1a0c95d8aa612d4d6e06a2e68d963258a7b8c1428fe99f42f3491c08b91ed111a80e6ae5bbbb530754d06de5a1b15643d1263f6bb4e73dbd0d7f032a788b3984f52ead2eae8d78a73695087aeb791edf1e96171906ae6207e2644ee0a763a6bb7b6cbaeb924798304e06329eb33cfbc42359abdd1856517ca51be2fea866b1f25a19d22a1e564e7bc592d506100e632ca40efb7c0cd8d2f9200a7885cc292e224b4f9fe8b32e88de9acc906e34c5accec899e92347ed41493f5abe17b1a024d05aef702ab5fc68c75101b0a2ae2fba84eab40dc1e0d13ef8ebda5fcebc8828c90ca9b33bc530716f61034cec3369745788d789d721cd8c44a5872f6d8cd54f1744ce13eac025862da72f93c60df4e5949c693e78917d4e2f7e0953fd49ab6bbcb1ed78d3ec994dcc4e237079a8759cbe229c4006bec594dd1b7068f82ba126ba5b0a13394dc12916e5ffb01b32fe9df9e9763db67265c6a1099102249cdf84cc9961ba660cabb4973dff2faca8653d7450799cde4f0bd699a35356173d4ec0dbebd3c25de64bb5b649dc0eb120b9229118d040c62dfd77c93df2dccadcc6bb5188f4bab090945ae77f52473cd6bd5dc8b368109