www.fmls.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 09:57:fa:72:38:a5:c0:10:06:29:e8:31:54:a7:e5:b6 was issued on by DigiCert, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.fmls.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:57:fa:72:38:a5:c0:10:06:29:e8:31:54:a7:e5:b6Serial Number (int): 12419861440699752703745384350489241014
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c9:b7:e8:a0:2f:9f:bb:f6:2e:03:c6:48:52:a5:c8:89:cf:3c:97:15
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): b5:20:29:61:69:fb:bc:92:df:14:a0:32:8b:77:44:b0:fb:a5:db:6d
Fingerprint (sha256): aa:83:6d:75:58:b8:41:f5:51:ae:0f:ca:04:ee:8c:63:28:78:67:3a:60:f8:0c:38:d6:f3:8e:74:4c:c8:a3:43
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate www.fmls.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.fmls.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.fmls.com
fmls.com
fmls.com
Other certificates including the domain name fmls.com
(limited to 100 certificates)
mimecast.fmls.com
sip41.ct950.com
login.fmls.com
support.fmls.com
legacy.fmls.com
sip71.ct950.com
email.fmls.com
legacy.fmls.com
preview.fmls.com
email.fmls.com
support.fmls.com
azsts.fmls.com
support.fmls.com
helpdesk.star-ti.com
nevpn.fmls.com
sip71.ct950.com
content.fmls.com
login.fmls.com
email.fmls.com
sip71.ct950.com
www.fmls.com
www.fmls.com
email.fmls.com
sip71.ct950.com
login.fmls.com
svn-edge1.fmls.com
email.fmls.com
sip71.ct950.com
www.fmls.com
sip71.ct950.com
marketplace.fmls.com
content.fmls.com
support.eprfireworks.com
login.fmls.com
email.fmls.com
sip71.ct950.com
login-dev.fmls.com
www.fmls.com
hqvpn.fmls.com
sip41.ct950.com
email.fmls.com
facilities.fmls.com
sip71.ct950.com
marketplace.fmls.com
sip71.ct950.com
sip71.ct950.com
sip71.ct950.com
sip71.ct950.com
login.fmls.com
support.fmls.com
www.fmls.com
sip71.ct950.com
sip41.ct950.com
bswnbr.webbfontaine.com
www.fmls.com
www.fmls.com
azsts.fmls.com
sip71.ct950.com
support.fmls.com
www.fmls.com
access.fmls.com
sip71.ct950.com
email.fmls.com
login-dev.fmls.com
support.tampabaypaddle.company
autodiscover.fmls.com
www.fmls.com
www.fmls.com
sip71.ct950.com
support.fmls.com
support.tinyalbert.ai
nevpn.fmls.com
sip71.ct950.com
email.fmls.com
login.fmls.com
sip71.ct950.com
www.fmls.com
sip71.ct950.com
preview.fmls.com
app-training-dev.fmls.com
www.fmls.com
sip71.ct950.com
access.fmls.com
login.fmls.com
sip71.ct950.com
access.fmls.com
sip71.ct950.com
nevpn.fmls.com
sip71.ct950.com
sip71.ct950.com
autodiscover.fmls.com
sip41.ct950.com
access.fmls.com
sip41.ct950.com
sip41.ct950.com
sip41.ct950.com
support.fmls.com
email.fmls.com
az110-sql-noc.fmls.com
sip71.ct950.com
sip41.ct950.com
login.fmls.com
support.fmls.com
legacy.fmls.com
sip71.ct950.com
email.fmls.com
legacy.fmls.com
preview.fmls.com
email.fmls.com
support.fmls.com
azsts.fmls.com
support.fmls.com
helpdesk.star-ti.com
nevpn.fmls.com
sip71.ct950.com
content.fmls.com
login.fmls.com
email.fmls.com
sip71.ct950.com
www.fmls.com
www.fmls.com
email.fmls.com
sip71.ct950.com
login.fmls.com
svn-edge1.fmls.com
email.fmls.com
sip71.ct950.com
www.fmls.com
sip71.ct950.com
marketplace.fmls.com
content.fmls.com
support.eprfireworks.com
login.fmls.com
email.fmls.com
sip71.ct950.com
login-dev.fmls.com
www.fmls.com
hqvpn.fmls.com
sip41.ct950.com
email.fmls.com
facilities.fmls.com
sip71.ct950.com
marketplace.fmls.com
sip71.ct950.com
sip71.ct950.com
sip71.ct950.com
sip71.ct950.com
login.fmls.com
support.fmls.com
www.fmls.com
sip71.ct950.com
sip41.ct950.com
bswnbr.webbfontaine.com
www.fmls.com
www.fmls.com
azsts.fmls.com
sip71.ct950.com
support.fmls.com
www.fmls.com
access.fmls.com
sip71.ct950.com
email.fmls.com
login-dev.fmls.com
support.tampabaypaddle.company
autodiscover.fmls.com
www.fmls.com
www.fmls.com
sip71.ct950.com
support.fmls.com
support.tinyalbert.ai
nevpn.fmls.com
sip71.ct950.com
email.fmls.com
login.fmls.com
sip71.ct950.com
www.fmls.com
sip71.ct950.com
preview.fmls.com
app-training-dev.fmls.com
www.fmls.com
sip71.ct950.com
access.fmls.com
login.fmls.com
sip71.ct950.com
access.fmls.com
sip71.ct950.com
nevpn.fmls.com
sip71.ct950.com
sip71.ct950.com
autodiscover.fmls.com
sip41.ct950.com
access.fmls.com
sip41.ct950.com
sip41.ct950.com
sip41.ct950.com
support.fmls.com
email.fmls.com
az110-sql-noc.fmls.com
sip71.ct950.com
Certificate
The complete raw certificate details for www.fmls.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHjTCCBXWgAwIBAgIQCVf6cjilwBAGKegxVKfltjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjIwODI2MDAwMDAwWhcNMjMwOTI2MjM1OTU5WjAXMRUwEwYDVQQDEwx3d3cuZm1s cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiEpfz304xhNW r3t9Ec76oA2ixx0BnhtmDDJaA5llX+sQ+/dyO3xiFpH2fLYjKL/itFXlrSSLvesp 5Zu1WmWeHBqSTieElW4U7LWoM3PCfA/zUkFS1uBf3nHfyX0sP1Hr9jEZw3VBIQCW 98M4IqxnlijXvNojVAvgQAaT5jW6rHcIN+yizYzyNziueImW+JenVx8IIW3XbynD fimqRY9qje+htfRwq1q49t/r8HXB4QbIZKPbP2oxYIyD0aRLVUD9BkkPXmJWEocV FNDeONvnV8iUPFO00Zd0vaFHFUspnh8go+xzLLzi6EV0NiUW17aSMG9KEUdvn1Dx TwbldJGNAgMBAAGjggOOMIIDijAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASog BLhmIzAdBgNVHQ4EFgQUybfooC+fu/YuA8ZIUqXIic88lxUwIQYDVR0RBBowGIIM d3d3LmZtbHMuY29tgghmbWxzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy NTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3 MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz cC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2lj ZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNy dDAJBgNVHRMEAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDoPtDaPvUG NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYLYPrMpAAAEAwBHMEUCIHNx0qKy q8j84gcScmRAGtfRPxcdmuIIAJ8jSa79qQa4AiEA85eOT5+KJQITwjJoz24nvnrz mYq1yKJPKTA3n9pmydwAdQA1zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvW TAAAAYLYPrNaAAAEAwBGMEQCIG/YFO9D2slQ/w/v7Lb1jWJc+Y6W2F2WJ4htD0w5 jp9cAiBAOTdNI+le6CCUoluqYvw4Fjd2VLyjsTtKPCRsyMaPjwB2ALNzdwfhhFD4 Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABgtg+s6AAAAQDAEcwRQIgKylewMFe dvQ51lPWf5UIxaSmu1sxqQLEmZT2cpbmjcwCIQD5RZ+FHtrfHz5HLHoCE3lODgYv rA6QLZFBDYkNl18IAzANBgkqhkiG9w0BAQsFAAOCAgEAn7Yp6Y7vIsWeubFT1u8U 9UoIXnrws1y8XtoX6RN+yYdzk0JuE9gk1dukR2dKgyzWHEzZWlRp4p9XIDBqncaE mA3qk4WM3Yh7KLvHoMZj2jMxogh8gYXE7DfZlv6e2sHjHOSeDhgtluU/Wr1FzQY6 Ua0NxtZNRqgmm2t07freO5ZiDzkc4NijqxO3Nuo9BId65C6yhuHK1sD5EwBFm/xe 1o8fmFoZz2t7CM3jxH3P1fQRR6rs2Ku6Hj9kUdav/wGyBDXd6zlm+lrsCWNiJZE1 +PBWjgVj/f4uEB0JSxDdzrTfDh2nBijSMaITyquQ+efSxb4eRRufuh6IldtW/sin Fp35tu/dsaCLsbebj+DViF9Y22SFgQ8IO7/uiMSU1uleYHTrRKgMuVEzzfpwRjRd X7LsCyG4We/F+PRp+pj7EtlxlbzKvrgjfcXbOQ2W0Jnsi6YpwKh9KXnp1m+v2nHx iTFTcm79mBYO+QiwZ/fskiIbB6AZ3z9gx15/BUiSxga+ug0mV3zm7cYWmbh8mFbx nulcdRqWssQmuOYu1F8zqIZdRLcnAW0p51yWccLltQXtr8ayFJbMHOfwnsd7Akit s4h7zl8E3H3W/XgnJ1rvL6x57/Ub6GbxfQvD26wQhEw0AHNUh72jM1rXEOo3pQ7n k2OPqgdfCq5zhAh0XYip8rw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIhKX899OMYTVq97fRHO +qANoscdAZ4bZgwyWgOZZV/rEPv3cjt8YhaR9ny2Iyi/4rRV5a0ki73rKeWbtVpl nhwakk4nhJVuFOy1qDNzwnwP81JBUtbgX95x38l9LD9R6/YxGcN1QSEAlvfDOCKs Z5Yo17zaI1QL4EAGk+Y1uqx3CDfsos2M8jc4rniJlviXp1cfCCFt128pw34pqkWP ao3vobX0cKtauPbf6/B1weEGyGSj2z9qMWCMg9GkS1VA/QZJD15iVhKHFRTQ3jjb 51fIlDxTtNGXdL2hRxVLKZ4fIKPscyy84uhFdDYlFte2kjBvShFHb59Q8U8G5XSR jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12419861440699752703745384350489241014 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fmls.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22285149036486437533938371995143737749651595524710648613184389520417726724978083714313660640736665355461510634379790150453962906488706891723413243758681652171768792941369864645342265933170010702701878258096272138492968124973012710263302754755757549957817438373189319979308876273450142508091984733645669754747863225940003557913711604638456441099531390218562527864433842595104416324569256328848389217795180688256185622886814791600450508734532790536157267624119804419482525141532438020079471176586796632178220402184255076724189752020447023173926022641087435068745868976834181442997959356005702060954420463177276757152141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c9b7e8a02f9fbbf62e03c64852a5c889cf3c9715 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmls.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000182d83eb329000004030047304502207371d2a2b2abc8fce207127264401ad7d13f171d9ae208009f2349aefda906b8022100f3978e4f9f8a250213c23268cf6e27be7af3998ab5c8a24f2930379fda66c9dc00750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000182d83eb35a000004030046304402206fd814ef43dac950ff0fefecb6f58d625cf98e96d85d9627886d0f4c398e9f5c02204039374d23e95ee82094a25baa62fc3816377654bca3b13b4a3c246cc8c68f8f007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000182d83eb3a0000004030047304502202b295ec0c15e76f439d653d67f9508c5a4a6bb5b31a902c49994f67296e68dcc022100f9459f851edadf1f3e472c7a0213794e0e062fac0e902d91410d890d975f0803 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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