*.northeastern.org
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0b:10:58:c1:f9:80:5e:01:4c:df:b0:df:a5:1c:53:f3 was issued on by DigiCert, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.northeastern.org
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:10:58:c1:f9:80:5e:01:4c:df:b0:df:a5:1c:53:f3Serial Number (int): 14706384923668072320873897524922700787
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 5b:5a:7c:66:8b:13:fe:60:f2:74:16:80:c3:52:bd:81:ea:f1:97:94
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 98:70:a0:2e:1c:7b:46:f0:54:3c:7a:59:a9:f2:86:b2:71:1a:60:f2
Fingerprint (sha256): bb:99:72:05:53:65:2b:8e:18:1d:41:85:e3:e4:6d:a2:df:70:68:69:d4:c0:e5:c5:cb:fc:29:93:1d:ca:d3:03
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate *.northeastern.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.northeastern.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.northeastern.org
www.northeastern.org
northeastern.org
www.northeastern.org
northeastern.org
Other certificates including the domain name northeastern.org
(limited to 100 certificates)
helpcenter.vidd.ly
support.drmoneypro.com
webmail.northeastern.org
help.stp-systems.com
*.northeastern.org
webmail.northeastern.org
clinic.alistishari.org
support.solvoz.com
hpdq.citek.vn
support.vincix.com
*.northeastern.org
*.northeastern.org
service.westernnrg.com
soniccare.virtualgraffiti.com
bcclcare.e-providence.in
soniccare.virtualgraffiti.com
merakicare.virtualgraffiti.com
merakicare.virtualgraffiti.com
*.northeastern.org
*.northeastern.org
helpdesk.fsfsc.org
*.northeastern.org
*.northeastern.org
callcenter.northeastern.org
northeastern.org
*.northeastern.org
merakicare.virtualgraffiti.com
*.northeastern.org
*.northeastern.org
support.ezi-pos.com
*.northeastern.org
*.northeastern.org
support.cfolio.com
support.certpedia.in
*.northeastern.org
helpdesk.fsfsc.org
*.northeastern.org
webmail.northeastern.org
support.cfolio.com
support.cfolio.com
*.northeastern.org
support.actax.com
*.northeastern.org
support.trademasters.com
webmail.northeastern.org
support.certpedia.in
*.northeastern.org
*.northeastern.org
*.northeastern.org
helpcenter.trackmategps.com
helpdesk.fsfsc.org
support.certpedia.in
*.northeastern.org
*.northeastern.org
*.northeastern.org
support.trademasters.com
*.northeastern.org
events.mediacent.africa
merakicare.virtualgraffiti.com
webmail.northeastern.org
customercare.townline.ca
helpdesk.fsfsc.org
webmail.northeastern.org
helpdesk.fsfsc.org
soniccare.virtualgraffiti.com
support.certpedia.in
hjelp.pcverkstedet.com
helpcenter.trackmategps.com
helpcenter.trackmategps.com
support.drmoneypro.com
webmail.northeastern.org
help.stp-systems.com
*.northeastern.org
webmail.northeastern.org
clinic.alistishari.org
support.solvoz.com
hpdq.citek.vn
support.vincix.com
*.northeastern.org
*.northeastern.org
service.westernnrg.com
soniccare.virtualgraffiti.com
bcclcare.e-providence.in
soniccare.virtualgraffiti.com
merakicare.virtualgraffiti.com
merakicare.virtualgraffiti.com
*.northeastern.org
*.northeastern.org
helpdesk.fsfsc.org
*.northeastern.org
*.northeastern.org
callcenter.northeastern.org
northeastern.org
*.northeastern.org
merakicare.virtualgraffiti.com
*.northeastern.org
*.northeastern.org
support.ezi-pos.com
*.northeastern.org
*.northeastern.org
support.cfolio.com
support.certpedia.in
*.northeastern.org
helpdesk.fsfsc.org
*.northeastern.org
webmail.northeastern.org
support.cfolio.com
support.cfolio.com
*.northeastern.org
support.actax.com
*.northeastern.org
support.trademasters.com
webmail.northeastern.org
support.certpedia.in
*.northeastern.org
*.northeastern.org
*.northeastern.org
helpcenter.trackmategps.com
helpdesk.fsfsc.org
support.certpedia.in
*.northeastern.org
*.northeastern.org
*.northeastern.org
support.trademasters.com
*.northeastern.org
events.mediacent.africa
merakicare.virtualgraffiti.com
webmail.northeastern.org
customercare.townline.ca
helpdesk.fsfsc.org
webmail.northeastern.org
helpdesk.fsfsc.org
soniccare.virtualgraffiti.com
support.certpedia.in
hjelp.pcverkstedet.com
helpcenter.trackmategps.com
helpcenter.trackmategps.com
Certificate
The complete raw certificate details for *.northeastern.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHtzCCBZ+gAwIBAgIQCxBYwfmAXgFM37DfpRxT8zANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjIxMDA4MDAwMDAwWhcNMjMxMDA5MjM1OTU5WjAdMRswGQYDVQQDDBIqLm5vcnRo ZWFzdGVybi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1o3g iRvivoaLRwTaxas4KoRiX/n3MxKQ7vi3hXiAIDUD9GUPWWTvYaa9g4IzpG9r04yK zxhGvrTUOKdd+7VNwDKG6lJLWcYYjPnigkQpKewqD49AaHdR6xWgMDltgtBCSmLu fgCgBCsODLI9+OOVJIgj95gViG4Jm+pZ3Xy/B0eBp/0SNJDvQXs7P+Ka3zVHRGH+ OASFkixzk3DQEZgNXk3l4irAmyMYjZ9WZlHIbetZvAPp0ImSGNzCqif+aBVlzZCY hwC0sMjdRk+er1YHu+9um73wcQsCa0wTyWiyrQ/ntVyjr7aAxX2EuiaLCHHQ+8g7 vN7YNOYnVZ7WUB9HAgMBAAGjggOyMIIDrjAfBgNVHSMEGDAWgBSltNbrNsTna6bf xGQLASogBLhmIzAdBgNVHQ4EFgQUW1p8ZosT/mDydBaAw1K9gerxl5QwRQYDVR0R BD4wPIISKi5ub3J0aGVhc3Rlcm4ub3JnghR3d3cubm9ydGhlYXN0ZXJuLm9yZ4IQ bm9ydGhlYXN0ZXJuLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwz LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy Q0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0 R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4GA1UdIAQ3MDUwMwYG Z4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAJBgNV HRMEAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDoPtDaPvUGNTLnVyi8 iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYO1Q7TtAAAEAwBGMEQCIE01Iv+U0Cg/F5cj HU25Afake7iUEUzpPFuJ6uiYhkoIAiAg3Y651Aa1aC3M1I6guQ1V52hU0IVMhHHY 2OaiyGePlgB1ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABg7VD tVgAAAQDAEYwRAIgFzK63vgFg7H7OTxJ+V7SmsrigHws8xgzq7H+V+4zrIwCIBz5 WkzenSf8TUxw9u0jj0gXDAdFCYQaiz50+ffXepjZAHcAtz77JN+cTbp18jnFulj0 bF38Qs96nzXEnh0JgSXttJkAAAGDtUO1NgAABAMASDBGAiEAo4MP/ayX2LAca/HP JrUaM8uWxIhoKqhZpt/jUBOHMFsCIQDhtMMwqOoFE4gs2kBypJzQDOu4USo3iPUR 24Hjp4vtkTANBgkqhkiG9w0BAQsFAAOCAgEAdEES+4VP2j/3T0QwMGB3Pu8yboIs 208Ie6EfcysWfIuh1vUJIv3Jwf0cfv/GHt7LF1otMyzO7dRaZzpITnQdPvY0g0nZ Lo7jHirCJWIQSZfSFqyuJw795TLlsi8aHc3L1oa/zRcdOVKLXUo05AqGkruoziZ0 +dHyHGf1axAmXMwUdZT+03Fw5WHc1BgAYnVQGPSRd8eSFpvZq0WJGWTh3fmSMeL8 3KWpZ7h1Tx66fE4aT2+LuUvHzmx0AOtN5RoMLw/BBpaMZ1QEo5ZzskMUtVrRoNrh GrcxpRqpjVH8xRs3rMHAEoQGSWaZBvbXBxcekzuxER/Hwj/kl5q1Wd1vrqDgthq8 UYFO8iki+PD4StE9myDitrgTkd0JeGlfjEGO7EF+Bk3a4Xebx4WFGmcD3o6hQljC YrATB3DNxpel5IsbPe5nv6MS63fw39iLxfyeRnQ+vE7+IooUH/cm66O5q/dO5d31 VVZTExrEJLR/cBist67jIr97dfdY0GPbZpVpb4jlFpyMw1LWG81bzMITP+RSvvJM 6zfqExAAVmongVwm0iYtxqw99YibyQ3+wdVC2To5JjdFflkswI6Y1sl7YODPqWxH D7B+clukraDeI4wMuyaJSwvkU8y8+u7Iw2/s5IHn9vY6xiUkqKhXGsNTEV3rpnQM d1WyQIwY5UM5Agk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydaN4Ikb4r6Gi0cE2sWr OCqEYl/59zMSkO74t4V4gCA1A/RlD1lk72GmvYOCM6Rva9OMis8YRr601DinXfu1 TcAyhupSS1nGGIz54oJEKSnsKg+PQGh3UesVoDA5bYLQQkpi7n4AoAQrDgyyPfjj lSSII/eYFYhuCZvqWd18vwdHgaf9EjSQ70F7Oz/imt81R0Rh/jgEhZIsc5Nw0BGY DV5N5eIqwJsjGI2fVmZRyG3rWbwD6dCJkhjcwqon/mgVZc2QmIcAtLDI3UZPnq9W B7vvbpu98HELAmtME8losq0P57Vco6+2gMV9hLomiwhx0PvIO7ze2DTmJ1We1lAf RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14706384923668072320873897524922700787 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.northeastern.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25479699921085540957597428258875346216118164086799404429688885017071816825913870370901410868105281397361799567045950564265821898800219150512289519831544673078656784163570313951770358136477859186711498620560053047773035418277079028564228112865430869994410619044118931829754142059319510173998136319900958580240606090871851218467509886325335212689778178457689331306463405419242650786106189098561636679825216546437236384000439150925041563865995827816020080141419376001278862397907738773622191107726358681035545260398501964971158202039972220705174361042213452976809488165143809621929311381994487668609144324646811676450631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5b5a7c668b13fe60f2741680c352bd81eaf19794 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northeastern.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northeastern.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastern.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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