careershub.policeconduct.gov.uk

- Independent Office for Police Conduct -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:e3:55:70:bf:a1:24:ee:e9:d2:84:4f:76:e0:f7:2e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Independent Office for Police Conduct

Organization: Independent Office for Police Conduct
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:55:70:bf:a1:24:ee:e9:d2:84:4f:76:e0:f7:2e
Serial Number (int): 5168068311919113825181700747295782702
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: fd:06:48:ef:d5:cb:71:cb:0a:66:92:37:e6:51:8b:70:5c:d5:b8:63
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 0a:3f:5a:e7:35:fc:ae:96:98:f5:e8:f3:fd:51:c6:4c:79:eb:76:c2
Fingerprint (sha256): c1:db:d9:35:58:33:5b:bb:42:e9:4a:a7:b1:c1:bd:1d:15:0b:48:66:2d:60:2d:2c:97:bb:d6:ce:94:54:7c:e0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate careershub.policeconduct.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careershub.policeconduct.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careershub.policeconduct.gov.uk

Other certificates including the domain name policeconduct.gov.uk

(limited to 100 certificates)
www.policeconduct.gov.uk
mail.policeconduct.gov.uk
iopc-cms.policeconduct.gov.uk
Mail.policeconduct.gov.uk
sts.policeconduct.gov.uk
Mail.policeconduct.gov.uk
ictsc.policeconduct.gov.uk
Mail.policeconduct.gov.uk
Mail.policeconduct.gov.uk
www.policeconduct.gov.uk
mail.policeconduct.gov.uk
policeconduct.gov.uk
www.policeconduct.gov.uk
policeconduct.gov.uk
sni.cloudflaressl.com
Mail.policeconduct.gov.uk
operationsmanual.policeconduct.gov.uk
policeconduct.gov.uk
policeconduct.gov.uk
ufbeta.policeconduct.gov.uk
policeconduct.gov.uk
ictsc.policeconduct.gov.uk
sts.policeconduct.gov.uk
Mail.policeconduct.gov.uk
remote.policeconduct.gov.uk
accesspool1.policeconduct.gov.uk
policeconduct.gov.uk
careershub.policeconduct.gov.uk
userfeedback.policeconduct.gov.uk
sts.policeconduct.gov.uk
remote.policeconduct.gov.uk
iopc-cms.policeconduct.gov.uk
sts.policeconduct.gov.uk
policeconduct.gov.uk
sni.cloudflaressl.com
www.policeconduct.gov.uk
jobsearch.policeconduct.gov.uk
policeconduct.gov.uk

Certificate

The complete raw certificate details for careershub.policeconduct.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG9TCCBd2gAwIBAgIQA+NVcL+hJO7p0oRPduD3LjANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw
MzI3MDAwMDAwWhcNMjQwNDExMjM1OTU5WjB4MQswCQYDVQQGEwJHQjEPMA0GA1UE
BxMGTG9uZG9uMS4wLAYDVQQKEyVJbmRlcGVuZGVudCBPZmZpY2UgZm9yIFBvbGlj
ZSBDb25kdWN0MSgwJgYDVQQDEx9jYXJlZXJzaHViLnBvbGljZWNvbmR1Y3QuZ292
LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU+8y/5Q6zxoKPd8
/2CQH/1N3AX4vp46PrQnfHUDNqJWX8g9yLCyrhV+DpOvzYIYmCpREN5Qb5EnjYL1
KD51TllTD69b/sghHIaS24zmox3TbWOc/ryr6nzzds1GKPytTjzcYSMvuGiu95OF
ErJ4xKCqS/HOwIydUPEnfa1xoMjRIn/FFMnSSbZKxFrhZ6PkuwtRR2Hay4Simp9R
FRPyaV/qKnPuxn/nCfOBLC9sMcsrcsZZkD1CQxwlOTwNegSZd1hGNqR8R+q42CGz
xRNH1XcyxCSeMvPtjRNX4QPsQIYk8OB3XJ+bLIOIEDb2Ucfv5WO+ct2Scwgsn2Ma
9umGzwIDAQABo4IDmDCCA5QwHwYDVR0jBBgwFoAUdIWAwGbH3zfez70pN6oDHb7t
zRcwHQYDVR0OBBYEFP0GSO/Vy3HLCmaSN+ZRi3Bc1bhjMCoGA1UdEQQjMCGCH2Nh
cmVlcnNodWIucG9saWNlY29uZHVjdC5nb3YudWswDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBE
hkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JT
QVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0
cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0
cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBD
QTEtMS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUA
dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGHIz5OUgAABAMARjBE
AiB71Jq0VkymdWe7TFMyPo3FF5aKtPQGj27C9cIwQRQyfgIgYtTTZOVUpHXvjwxm
I2cz5QVVhuqIbltK+vqdaOsdmQEAdgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxr
gBB6wXdytQAAAYcjPk5DAAAEAwBHMEUCIA7nZRruN02es//9VZO9VjtNTUlD8tPH
ceWZ4XjiTwWWAiEAxyW1OSuFlnkgxNF7gonXdXHCx8jhzq8YA7tneaaN/3EAdwBI
sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYcjPk4oAAAEAwBIMEYC
IQCs4SCYiDkUo4jyveURf59vg1MKJb49e4Ze3tTfpki9wgIhAK6K3R0BimPxmtd3
WFcC+JrptnnlxeeGjFoXiVug2HzrMA0GCSqGSIb3DQEBCwUAA4IBAQBKH6HsCPD2
GLOUDX5QKZSXb9rT6h+TiXqI3pYT6v9LTSWruMLu4xnS9kMCXL7FHTsiqzHeL+9U
IYPtQsFGlnfvYL4nQ0HPw5BOzu4FnBZiNezt2XUiM+eIRLq8kxr97QHZJLfxH7pl
qnkvAj2gSVzHwLHnbMMSA7Ph82KobsHXzOwh1FQLnmbGhBOodfodHHAXkCqrhasF
CApo1ApB8gCE/ddOW+VyyiNcbLMzz+rfLU10f8p2IeTDj+HB8G/Smfjcf9wNSRwx
onMEpCoYXCFDAjjhGtYEluPALsMnzlHluFE6/+U9u6g6RSX5FkqKFSHZ0uVZvODf
VxUy4Ly5Oa9j
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU+8y/5Q6zxoKPd8/2CQ
H/1N3AX4vp46PrQnfHUDNqJWX8g9yLCyrhV+DpOvzYIYmCpREN5Qb5EnjYL1KD51
TllTD69b/sghHIaS24zmox3TbWOc/ryr6nzzds1GKPytTjzcYSMvuGiu95OFErJ4
xKCqS/HOwIydUPEnfa1xoMjRIn/FFMnSSbZKxFrhZ6PkuwtRR2Hay4Simp9RFRPy
aV/qKnPuxn/nCfOBLC9sMcsrcsZZkD1CQxwlOTwNegSZd1hGNqR8R+q42CGzxRNH
1XcyxCSeMvPtjRNX4QPsQIYk8OB3XJ+bLIOIEDb2Ucfv5WO+ct2Scwgsn2Ma9umG
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5168068311919113825181700747295782702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Independent Office for Police Conduct'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careershub.policeconduct.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23393406439379305146623540005433950528215652897774960615560753581101665569190967935537320450248915298155877363211367725153360357217429695114119890079344660659193651883841157182188451022334463253628091612573133333723479226541734152534021873523469479000780604985723422322196979124742022896264457433656935733713849498716757079791666280607952850119243841825712111588348670638665484960172655358120314273640065102715228562516683770845606118686216893979122167817602264014596918669168203667192215870222196152776449515784718811747830707955067158792914270455668170252348284190873873129893193543487972190867089975728061905733327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd0648efd5cb71cb0a669237e6518b705cd5b863
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careershub.policeconduct.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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