selfcheck.fmolhs.org
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 06:38:18:9a:5f:81:62:9c:14:fc:fb:84:bd:e8:8a:50 was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=selfcheck.fmolhs.org
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:38:18:9a:5f:81:62:9c:14:fc:fb:84:bd:e8:8a:50Serial Number (int): 8266635607312453456296539834659932752
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 9f:59:bd:65:24:78:4b:83:41:be:dd:08:d8:12:7c:61:e5:19:84:bc
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 45:68:fe:7b:eb:54:75:a1:fa:81:ff:fd:47:e7:ab:60:85:d1:39:93
Fingerprint (sha256): b4:a7:13:35:e9:1c:c9:99:86:00:d2:6d:0f:e3:86:71:03:48:66:b3:bd:6c:9b:f0:6d:86:98:64:60:7f:2a:07
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate selfcheck.fmolhs.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for selfcheck.fmolhs.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
selfcheck.fmolhs.org
Other certificates including the domain name fmolhs.org
(limited to 100 certificates)
xenmobiletest.fmolhs.org
nphaikuconfig.fmolhs.org
enroll.fmolhs.org
video.fmolhs.org
mychart.fmolhs.org
kronos.fmolhs.org
airstripone.fmolhs.org
support.fmolhs.org
btrexpwye01.fmolhs.org
FMOLHS.org
powerplans.fmolhs.org
support.fmolhs.org
www.fmolhs.org
help.fmolhs.org
external.fmolhs.org
vpsxtest.fmolhs.org
visage.fmolhs.org
mobile.fmolhs.org
www.ololrmc.com
cardioserver.fmolhs.org
Mail.Fmolhs.org
alerts.fmolhs.org
careconnect.fmolhs.org
rmpportal.fmolhs.org
access.fmolhs.org
external1.fmolhs.org
haikuconfig.fmolhs.org
psonetest.fmolhs.org
vpn.fmolhs.org
ololvoalteiris.fmolhs.org
access.fmolhs.org
support.fmolhs.org
FMOLHS.org
access.fmolhs.org
connect.fmolhs.org
securemail.fmolhs.org
ololvoalteiris.fmolhs.org
fs.fmolhs.org
gptest.fmolhs.org
FMOLHS.org
access.fmolhs.org
selfcheck.fmolhs.org
mychart.fmolhs.org
Mail.Fmolhs.org
onbase.fmolhs.org
alerts.fmolhs.org
globalprotect.fmolhs.org
www.fmolhs.org
Lilatest.fmolhs.org
video.fmolhs.org
vpn.fmolhs.org
help.fmolhs.org
external.fmolhs.org
psone.fmolhs.org
rmpmanagement.fmolhs.org
enroll.fmolhs.org
vpn.fmolhs.org
Mail.Fmolhs.org
corepoint.fmolhs.org
btrexpwye01.fmolhs.org
connect.fmolhs.org
corepointtest.fmolhs.org
external1.fmolhs.org
a2go.fmolhs.org
mychart.fmolhs.org
fs.fmolhs.org
careconnect.fmolhs.org
storefront.fmolhs.org
careconnect.fmolhs.org
video.fmolhs.org
vendor.fmolhs.org
sharefile.fmolhs.org
accesstest.fmolhs.org
fs.fmolhs.org
Lila.fmolhs.org
airstripone.fmolhs.org
FMOLHS.org
healthviewtest.fmolhs.org
footprints.fmolhs.org
Mail.Fmolhs.org
external.fmolhs.org
vpn.fmolhs.org
btrexpwye01.fmolhs.org
storefront.fmolhs.org
securemail.fmolhs.org
airstriponetest.fmolhs.org
cardioservertest.fmolhs.org
footprints.fmolhs.org
lftgp.fmolhs.org
alerts.fmolhs.org
fs.fmolhs.org
kronosdowntime.fmolhs.org
btrexpwye01.fmolhs.org
visagetest.fmolhs.org
alerts.fmolhs.org
ahttest.fmolhs.org
storefrontgw.fmolhs.org
vpn.fmolhs.org
moveitdmz.fmolhs.org
myhealthrecordsupport.fmolhs.org
nphaikuconfig.fmolhs.org
enroll.fmolhs.org
video.fmolhs.org
mychart.fmolhs.org
kronos.fmolhs.org
airstripone.fmolhs.org
support.fmolhs.org
btrexpwye01.fmolhs.org
FMOLHS.org
powerplans.fmolhs.org
support.fmolhs.org
www.fmolhs.org
help.fmolhs.org
external.fmolhs.org
vpsxtest.fmolhs.org
visage.fmolhs.org
mobile.fmolhs.org
www.ololrmc.com
cardioserver.fmolhs.org
Mail.Fmolhs.org
alerts.fmolhs.org
careconnect.fmolhs.org
rmpportal.fmolhs.org
access.fmolhs.org
external1.fmolhs.org
haikuconfig.fmolhs.org
psonetest.fmolhs.org
vpn.fmolhs.org
ololvoalteiris.fmolhs.org
access.fmolhs.org
support.fmolhs.org
FMOLHS.org
access.fmolhs.org
connect.fmolhs.org
securemail.fmolhs.org
ololvoalteiris.fmolhs.org
fs.fmolhs.org
gptest.fmolhs.org
FMOLHS.org
access.fmolhs.org
selfcheck.fmolhs.org
mychart.fmolhs.org
Mail.Fmolhs.org
onbase.fmolhs.org
alerts.fmolhs.org
globalprotect.fmolhs.org
www.fmolhs.org
Lilatest.fmolhs.org
video.fmolhs.org
vpn.fmolhs.org
help.fmolhs.org
external.fmolhs.org
psone.fmolhs.org
rmpmanagement.fmolhs.org
enroll.fmolhs.org
vpn.fmolhs.org
Mail.Fmolhs.org
corepoint.fmolhs.org
btrexpwye01.fmolhs.org
connect.fmolhs.org
corepointtest.fmolhs.org
external1.fmolhs.org
a2go.fmolhs.org
mychart.fmolhs.org
fs.fmolhs.org
careconnect.fmolhs.org
storefront.fmolhs.org
careconnect.fmolhs.org
video.fmolhs.org
vendor.fmolhs.org
sharefile.fmolhs.org
accesstest.fmolhs.org
fs.fmolhs.org
Lila.fmolhs.org
airstripone.fmolhs.org
FMOLHS.org
healthviewtest.fmolhs.org
footprints.fmolhs.org
Mail.Fmolhs.org
external.fmolhs.org
vpn.fmolhs.org
btrexpwye01.fmolhs.org
storefront.fmolhs.org
securemail.fmolhs.org
airstriponetest.fmolhs.org
cardioservertest.fmolhs.org
footprints.fmolhs.org
lftgp.fmolhs.org
alerts.fmolhs.org
fs.fmolhs.org
kronosdowntime.fmolhs.org
btrexpwye01.fmolhs.org
visagetest.fmolhs.org
alerts.fmolhs.org
ahttest.fmolhs.org
storefrontgw.fmolhs.org
vpn.fmolhs.org
moveitdmz.fmolhs.org
myhealthrecordsupport.fmolhs.org
Certificate
The complete raw certificate details for selfcheck.fmolhs.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmDCCBYCgAwIBAgIQBjgYml+BYpwU/PuEveiKUDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMTI1MDAwMDAwWhcNMjQwNTI1MjM1OTU5WjAfMR0wGwYDVQQDExRzZWxmY2hl Y2suZm1vbGhzLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgW oCZA1oWTr0JE9bhjmUSLuUeLw5eITocyxwA6sYmUH7P9vmfT5fHOsCPjpxf+Ak6H FUCtqNsxJsxH4RwfCqlWA/89c3yKRfvxQ1a3qD2IhJSiSvyEb1rtP7tL+NANR1/f IZt0Yp8ymwb8rCD2lej8xv+pCboYGyUnalyAdyZ9A/Mb9gWkYT3bvrKac7vxH2uK vUmVPSSrTUwufmlaT4TBuOpxJNpdtCVTlEZxjRQvpQ8xmfyV8AkR/rdbjjHG/A9h 0V8hi0qe3PSkaSiCDO/MtBDGkDVubwlDlv7QFkqLGoZrhcu7FuMchCv15EQ6Kh1B 7nd2DO1DWv8QcNK8JUECAwEAAaOCA5EwggONMB8GA1UdIwQYMBaAFKW01us2xOdr pt/EZAsBKiAEuGYjMB0GA1UdDgQWBBSfWb1lJHhLg0G+3QjYEnxh5RmEvDAfBgNV HREEGDAWghRzZWxmY2hlY2suZm1vbGhzLm9yZzA+BgNVHSAENzA1MDMGBmeBDAEC ATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYD VR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1 c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6 Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy NTYyMDIyQ0ExLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy Q0ExLmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA dwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYwE8kj0AAAEAwBI MEYCIQDCxJCuOGVZBL8rUuplcEJALofbfMTHHd4EFds4C93RgwIhALe301ResLdn rKvBkV5yFj5x+9JFh6tEFTEwuHEO2lMRAHYASLDja9qmRzQP5WoC+p0w6xxSActW 3SyB2bu/qznYhHMAAAGMBPJI8AAABAMARzBFAiAVYTzLOLVxsUl7Z1GIdOWw1FFc +Mmb0mbWVPwE9e8rhgIhAL7CzYnnaWONK5Bdtr2UTBPYA+tIpWY8hl1PifqluodX AHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMBPJIzQAABAMA RzBFAiBWtFZWmGWrHyjFYHqwpnr3u2y/3Ur8URlravf9BYSdqgIhAKqsvlM0CO9h WdQRHf7J0c8IGXl+LPef0L+DNkXCeZg+MA0GCSqGSIb3DQEBCwUAA4ICAQBENFDK wnaW0vfJe9yGfyJWJ9bVj33sxBSdJyMH6AzXCsfG8xMOC69NOsXsz7r/vyncivOL xH0DrCVx1OpdSMpSx0lGz9TI6U/5xRF1AiUsOp+VZbiik0GOCO8tYtXTiTMFkPHC EFfBx9drvv7WPinLUL63X2JnQ63WNJ6sHHWBp0NbNdDr+ZCW4BZYTfLnMgMyN7vf pwfLxDKBgF13FLZ4DXbroaBeCFwHgjw4kd+E5OSyzTMRBxfme2WWEfVhwr81ghra H9wlITCzt4Z3D5X5FtkoE5gRuS1+I3HWX+ygNewz0zE56dZgC/o5jpzDbhpzKP8j hbmY2B0YVu63hxZbEasNV4GjpoK59gylNNuklakFqWBQZuKVZPrkNtfj/pYe5y4s 9r0c2WTgOWzfFmn7Y7EkhXkLNBS0XPWoxWkU2v//xftj9ligXVVTHvm9DYfLE/fy UpcSnjBKm5IcUEej3q+8sU2nmTVisQwZ0JqiNjMIhi27drNkKir/hwyH9nJuv+se QU2FnNeCSuLCMBnS4HRc3DcXu1M46JMkcRiC1JjDP1hX0l+ozbyYZYoxdTAgL3HG l8yW4VGi/633jrLb2NFkwTfKbfN8d1iI2WTdxJtwLcDvc5TVxU1lYPOEI/ZV/Ym1 bA+945l5Fm+mwp2KvYNkB4EpJB8VnDfZljfQsA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBagJkDWhZOvQkT1uGOZ RIu5R4vDl4hOhzLHADqxiZQfs/2+Z9Pl8c6wI+OnF/4CTocVQK2o2zEmzEfhHB8K qVYD/z1zfIpF+/FDVreoPYiElKJK/IRvWu0/u0v40A1HX98hm3RinzKbBvysIPaV 6PzG/6kJuhgbJSdqXIB3Jn0D8xv2BaRhPdu+sppzu/Efa4q9SZU9JKtNTC5+aVpP hMG46nEk2l20JVOURnGNFC+lDzGZ/JXwCRH+t1uOMcb8D2HRXyGLSp7c9KRpKIIM 78y0EMaQNW5vCUOW/tAWSosahmuFy7sW4xyEK/XkRDoqHUHud3YM7UNa/xBw0rwl QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8266635607312453456296539834659932752 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selfcheck.fmolhs.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25258818084364000226692068078756894311665664861576609820336701600522961490146393191670147941362859889413174153635779707321407186379037372660161900325435800448196908658771200894044931775605206402283737912617382619961943698651039399920440228757337637586818888297674418174780619353746595787397844661915897814122400991654175022893519809168217285362516393806509760464950665750726443311258884488133397564259873089843847589752799780836574578859522973603151279650256862993104248032549523835738662280062354589731788048626783381370493679185031737954793706060857275265113053311418799063887433086137175524968991735906953475138881 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9f59bd6524784b8341bedd08d8127c61e51984bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfcheck.fmolhs.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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