galbraithgroup.com
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 08:d2:be:f8:93:72:fb:33:d8:32:24:34:b1:db:e0:2a was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=galbraithgroup.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:d2:be:f8:93:72:fb:33:d8:32:24:34:b1:db:e0:2aSerial Number (int): 11728079658613938397681628626386935850
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b4:b8:3b:58:04:0c:13:06:c8:1f:25:8b:9d:aa:ba:76:31:95:66:1b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 49:bd:78:3f:f5:65:23:46:c2:72:b3:b1:bb:c8:f7:1c:7d:62:42:b0
Fingerprint (sha256): c5:e4:31:5b:bc:9f:55:10:57:21:ee:0f:47:34:e9:be:1d:2e:75:33:b0:86:20:f1:9f:88:3f:23:ac:af:8d:fe
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate galbraithgroup.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for galbraithgroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
galbraithgroup.com
Other certificates including the domain name galbraithgroup.com
(limited to 100 certificates)
suport.staff.utcluj.app
helpdesk.centurionukrs.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
ithelpdesk.uteco.com
sd.sch1584.su
*.galbraithgroup.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
dsi.alivetravel.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
galbraithgroup.com
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
support-services.gruener-punkt.de
helpdesk.derbigum.com
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
suport.staff.utcluj.app
dataroom.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
*.galbraithgroup.com
servicedesk.envisionpharma.com
publications.galbraithgroup.com
servicemanager.loacker.com
sd.sch1584.su
itservicedesk.eu.anritsu.com
servicedesk.cheaperwaste.co.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
helpdesk.derbigum.com
servicedesk.solidsolutions.co.uk
servicedesk.trencon.co.za
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
techteam.awayresorts.co.uk
servicedesk.trencon.co.za
servicedesk.solidsolutions.co.uk
www.galbraithgroup.com
galbraithgroup.com
servicedesk.quorumdev.com
galbraithgroup.com
www.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
dsi.alivetravel.com
support.gjesdal.kommune.no
support.gjesdal.kommune.no
servicedesk.solidsolutions.co.uk
itservicedesk.apc-overnight.com
helpdesk.galbraithgroup.com
*.galbraithgroup.com
servicedesk.abbotsholme.co.uk
support.ecctis.com
servicedesk.trencon.co.za
helpdesk.derbigum.com
servicedesk.envisionpharma.com
support.languagelink.ru
support.ecctis.com
galbraithgroup.com
*.galbraithgroup.com
helpdesk.zultys.com
helpdesk.zultys.com
support.gjesdal.kommune.no
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
suport.staff.utcluj.app
servicedesk.abbotsholme.co.uk
servicedesk.cheaperwaste.co.uk
itservicedesk.eu.anritsu.com
helpdesk.centurionukrs.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
ithelpdesk.uteco.com
sd.sch1584.su
*.galbraithgroup.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
dsi.alivetravel.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
galbraithgroup.com
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
support-services.gruener-punkt.de
helpdesk.derbigum.com
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
suport.staff.utcluj.app
dataroom.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
*.galbraithgroup.com
servicedesk.envisionpharma.com
publications.galbraithgroup.com
servicemanager.loacker.com
sd.sch1584.su
itservicedesk.eu.anritsu.com
servicedesk.cheaperwaste.co.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
helpdesk.derbigum.com
servicedesk.solidsolutions.co.uk
servicedesk.trencon.co.za
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
techteam.awayresorts.co.uk
servicedesk.trencon.co.za
servicedesk.solidsolutions.co.uk
www.galbraithgroup.com
galbraithgroup.com
servicedesk.quorumdev.com
galbraithgroup.com
www.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
dsi.alivetravel.com
support.gjesdal.kommune.no
support.gjesdal.kommune.no
servicedesk.solidsolutions.co.uk
itservicedesk.apc-overnight.com
helpdesk.galbraithgroup.com
*.galbraithgroup.com
servicedesk.abbotsholme.co.uk
support.ecctis.com
servicedesk.trencon.co.za
helpdesk.derbigum.com
servicedesk.envisionpharma.com
support.languagelink.ru
support.ecctis.com
galbraithgroup.com
*.galbraithgroup.com
helpdesk.zultys.com
helpdesk.zultys.com
support.gjesdal.kommune.no
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
suport.staff.utcluj.app
servicedesk.abbotsholme.co.uk
servicedesk.cheaperwaste.co.uk
itservicedesk.eu.anritsu.com
Certificate
The complete raw certificate details for galbraithgroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHlDCCBXygAwIBAgIQCNK++JNy+zPYMiQ0sdvgKjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjQwMjIwMDAwMDAwWhcNMjQwODIwMjM1OTU5WjAdMRswGQYDVQQDExJnYWxicmFp dGhncm91cC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUE1qf 6Fe5LEoLd8K8VuxXyTEZXJq7UovTpBFZJk44pxBaUcgISMEXIePc8XWddO3mi3Lk JFvYWz06HTHGyqr/BKYUZF3Yji9Nz7EEA3waHqRYE0qLjUAj2G0j6iDXbSq/QcCt 5oawe2il+6X1pxnbU6YI4KaIRbU3L63/kR7DuK2x5JSYKaWo4JNo7q7difWmIIc8 agag2Zy0IfI6cvjPGrEjYCGBzoXYsk4oisCqRfiNiXa7J7QQiuWlgKksc5IVW4Pt aMgZMbN2EHGvqy68LmnNLds7Frtxqw33JB7QSqf+CEyx18IKymE5DvvephKqTwsO Lq57Fg/eQkDkfEFFAgMBAAGjggOPMIIDizAfBgNVHSMEGDAWgBSltNbrNsTna6bf xGQLASogBLhmIzAdBgNVHQ4EFgQUtLg7WAQMEwbIHyWLnaq6djGVZhswHQYDVR0R BBYwFIISZ2FsYnJhaXRoZ3JvdXAuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkw JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8E gZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEds b2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2Ny bDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw MjJDQTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu Y3J0MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AO7N 0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjcZ5orMAAAQDAEcwRQIg VmyrfxAtKEs5dYsbOENCLUqSowf6LLlXxu7PBAih++wCIQD7A6D8M7s+wA/s2+JA 555fl5cPfn6WQNpFdbwHopp8UgB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABjcZ5orIAAAQDAEcwRQIgC0wmB1wpiKnXg8ZuiI4SiSvuWvlOKNfM af+rauS8PzYCIQDArveoOF1vVyxdgB0kCLukC+jWGz9EuXTdRkCjb2T1bAB3ANq2 v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjcZ5oq8AAAQDAEgwRgIh AM+DTTDNhKfq3YdR/O8vAk7Rz7izezAmPyP8RXHIrm9zAiEAoqCcz6NBlS7VAUoA J9uUw8AKGMPHC1/EUJlL7gcGoAkwDQYJKoZIhvcNAQELBQADggIBAJMtFSCPMxxB T1NVIUe1e65BBuF6uIFH7RdfJ+cBhHYhtt6/hGUuEyMytBUR6iKGLYHcLnRukg3N e/U9pwci2SKKxIL4CT4w10Hp6DJLkSK7iqrpU+6CRBL7+G7APaH2BZ+04at/T6dQ Ukhsqo6cuILqv3riftEWMOcSpCqQWbbu5THIHQvSQd3x22yurN9TI1C6nkqq2d8M 4M3DdfTUAtdELBrvxpRDKi5y88a6ZP8qHObsLspqr7PUEY8lc/BKlJhJkp5FBFxq eYf19HYR7gcKqWtIRvdVAJuTmz6kHUUPEIQoHq6X8Ci4nyfAEPk7otHDtBOfBR8R p5AtjLkiOyypwfY+RqKDd9PTRE0Gxu7s7UpM7g6+U60o1cQg8EGmKmoIC/ocb3hq PHvSdh07l+prl8l7F/nIiPtb7r2Gq/NFuLS3vUSV5+Iv2JoZHcCM1bJ34bRFZhTM r4xHAhZKP0y5tc/qtBZz4+KDf9DUNZGYfiUOMe8BvwTJ/xtxJiIgkB2X8JpywXfn zbqNPKFI/CxJB2WQTXbYQlRbBXy1v8WNhtIq/K8cIS/UNBKFxTj5nNXKinDw3nSJ PNlYS39b6ul2xjM6q9xl7qVsBQSvvLKYsIsMljbpTfY/R5PsQ0y1dzirsWg1liop sEWG/DsjaVJHa7AqthSe700UupEuiM0H -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBNan+hXuSxKC3fCvFbs V8kxGVyau1KL06QRWSZOOKcQWlHICEjBFyHj3PF1nXTt5oty5CRb2Fs9Oh0xxsqq /wSmFGRd2I4vTc+xBAN8Gh6kWBNKi41AI9htI+og120qv0HAreaGsHtopful9acZ 21OmCOCmiEW1Ny+t/5Eew7itseSUmCmlqOCTaO6u3Yn1piCHPGoGoNmctCHyOnL4 zxqxI2Ahgc6F2LJOKIrAqkX4jYl2uye0EIrlpYCpLHOSFVuD7WjIGTGzdhBxr6su vC5pzS3bOxa7casN9yQe0Eqn/ghMsdfCCsphOQ773qYSqk8LDi6uexYP3kJA5HxB RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11728079658613938397681628626386935850 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'galbraithgroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18692812949310365589965859796397786819324749372366327421615712250759226923956148757042532034185655206802116490820891562858544876168093564146594700659604697754342074849380265695940136542532971561877107401292039646183397195369790908948271840993883560665476454235861610707745819342271397798275015976345622185283549515322249492604419438526374492635593352470892762608171625883728335390277984963752286283071153502619483419168380207112149223918662570484751360342604130865779665111783941777393779776520351462086266336392645986806733477756059014209367212498156318535588884915124769093252775893665157315674151088790801189978437 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b4b83b58040c1306c81f258b9daaba763195661b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galbraithgroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc679a2b300000403004730450220566cab7f102d284b39758b1b3843422d4a92a307fa2cb957c6eecf0408a1fbec022100fb03a0fc33bb3ec00fecdbe240e79e5f97970f7e7e9640da4575bc07a29a7c5200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc679a2b2000004030047304502200b4c26075c2988a9d783c66e888e12892bee5af94e28d7cc69ffab6ae4bc3f36022100c0aef7a8385d6f572c5d801d2408bba40be8d61b3f44b974dd4640a36f64f56c007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018dc679a2af0000040300483046022100cf834d30cd84a7eadd8751fcef2f024ed1cfb8b37b30263f23fc4571c8ae6f73022100a2a09ccfa341952ed5014a0027db94c3c00a18c3c70b5fc450994bee0706a009 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00932d15208f331c414f53552147b57bae4106e17ab88147ed175f27e701847621b6debf84652e132332b41511ea22862d81dc2e746e920dcd7bf53da70722d9228ac482f8093e30d741e9e8324b9122bb8aaae953ee824412fbf86ec03da1f6059fb4e1ab7f4fa75052486caa8e9cb882eabf7ae27ed11630e712a42a9059b6eee531c81d0bd241ddf1db6caeacdf532350ba9e4aaad9df0ce0cdc375f4d402d7442c1aefc694432a2e72f3c6ba64ff2a1ce6ec2eca6aafb3d4118f2573f04a949849929e45045c6a7987f5f47611ee070aa96b4846f755009b939b3ea41d450f1084281eae97f028b89f27c010f93ba2d1c3b4139f051f11a7902d8cb9223b2ca9c1f63e46a28377d3d3444d06c6eeeced4a4cee0ebe53ad28d5c420f041a62a6a080bfa1c6f786a3c7bd2761d3b97ea6b97c97b17f9c888fb5beebd86abf345b8b4b7bd4495e7e22fd89a191dc08cd5b277e1b4456614ccaf8c4702164a3f4cb9b5cfeab41673e3e2837fd0d43591987e250e31ef01bf04c9ff1b71262220901d97f09a72c177e7cdba8d3ca148fc2c490765904d76d842545b057cb5bfc58d86d22afcaf1c212fd4341285c538f99cd5ca8a70f0de74893cd9584b7f5beae976c6333aabdc65eea56c0504afbcb298b08b0c9636e94df63f4793ec434cb57738abb16835962a29b04586fc3b236952476bb02ab6149eef4d14ba912e88cd07