novica.ca
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 04:e3:22:92:2b:48:db:3f:14:c4:fb:d5:39:95:26:4e was issued on by DigiCert, Inc..
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=novica.ca
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e3:22:92:2b:48:db:3f:14:c4:fb:d5:39:95:26:4eSerial Number (int): 6496264552661254045910667992969324110
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 67:11:46:b2:75:3b:5b:a8:f2:d9:b7:13:3e:0b:5d:a0:c3:01:8d:91
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 56:52:b7:56:2b:a4:a0:f8:90:4e:26:ac:47:14:c8:e7:e7:b0:6e:1b
Fingerprint (sha256): c7:5a:35:ca:1b:4f:f4:8b:42:26:03:ca:8e:e7:c5:ea:fa:81:50:8c:a6:33:1b:12:28:14:5c:41:31:e3:3d:b9
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate novica.ca
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for novica.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
novica.ca
*.novica.ca
*.worldartisanday.org
worldartisanday.org
*.worldartisanday.com
worldartisanday.com
artisanday.com
*.artisanday.org
*.artisansday.com
*.artisanday.com
artisansday.org
artisanday.org
artisansday.com
*.artisansday.org
*.worldartisansday.org
worldartisansday.org
*.worldartisansday.com
worldartisansday.com
handmade.com
*.handmade.com
novica.co.uk
*.novica.co.uk
novica.uk
*.novica.uk
*.novica.ca
*.worldartisanday.org
worldartisanday.org
*.worldartisanday.com
worldartisanday.com
artisanday.com
*.artisanday.org
*.artisansday.com
*.artisanday.com
artisansday.org
artisanday.org
artisansday.com
*.artisansday.org
*.worldartisansday.org
worldartisansday.org
*.worldartisansday.com
worldartisansday.com
handmade.com
*.handmade.com
novica.co.uk
*.novica.co.uk
novica.uk
*.novica.uk
Other certificates including the domain name novica.ca
(limited to 100 certificates)
Certificate
The complete raw certificate details for novica.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJJDCCBwygAwIBAgIQBOMikitI2z8UxPvVOZUmTjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjIwNjAyMDAwMDAwWhcNMjIxMDI4MjM1OTU5WjAUMRIwEAYDVQQDEwlub3ZpY2Eu Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVMx57rUla0YcGr+ol Njh4PFzOut6dPczfJNyUyW/5K7NLZip0I1+Q6Qr6N4phOdHkirRWxid1in1bPkm0 QS0XotdV+SyeOSjFpd+PtP4cTL92M3v3H5IBwcVrBxjL/XzrewEquta9BkW5EhCd F2OX0z1psmbNjMYI7HcLhXPENVkG6P/YfbvvbJs7O9rfS6FpdH+hlSs2xPtn8EH0 cdAePBngI6M0H8YwkeBHjyhDK4RjYkgoTRa2uTx9ppJQ1+tHl2dSRbiq0sZSCeA0 XfiRIcd0yWyXQcT4Yilsi9sGiZAMcn9E4GIjR7cswIVPvUo2kcKa5171kNzCof1Y fd7LAgMBAAGjggUoMIIFJDAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASogBLhm IzAdBgNVHQ4EFgQUZxFGsnU7W6jy2bcTPgtdoMMBjZEwggG5BgNVHREEggGwMIIB rIIJbm92aWNhLmNhggsqLm5vdmljYS5jYYIVKi53b3JsZGFydGlzYW5kYXkub3Jn ghN3b3JsZGFydGlzYW5kYXkub3JnghUqLndvcmxkYXJ0aXNhbmRheS5jb22CE3dv cmxkYXJ0aXNhbmRheS5jb22CDmFydGlzYW5kYXkuY29tghAqLmFydGlzYW5kYXku b3JnghEqLmFydGlzYW5zZGF5LmNvbYIQKi5hcnRpc2FuZGF5LmNvbYIPYXJ0aXNh bnNkYXkub3Jngg5hcnRpc2FuZGF5Lm9yZ4IPYXJ0aXNhbnNkYXkuY29tghEqLmFy dGlzYW5zZGF5Lm9yZ4IWKi53b3JsZGFydGlzYW5zZGF5Lm9yZ4IUd29ybGRhcnRp c2Fuc2RheS5vcmeCFioud29ybGRhcnRpc2Fuc2RheS5jb22CFHdvcmxkYXJ0aXNh bnNkYXkuY29tggxoYW5kbWFkZS5jb22CDiouaGFuZG1hZGUuY29tggxub3ZpY2Eu Y28udWuCDioubm92aWNhLmNvLnVrgglub3ZpY2EudWuCCyoubm92aWNhLnVrMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8G A1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1Ry dXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRw Oi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hB MjU2MjAyMkNBMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcC ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcw AoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExT UlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5 AgQCBIIBbQSCAWkBZwB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceE AAABgSXYwKYAAAQDAEcwRQIhAOggQY9+Cp/TZlnrJV7naeDIeg0gMdoWyaY74gZV emMqAiB/x4lu2WQ5jQD+2DwHn1CaTKzENNdTrYqhW2eyl1ErQwB1AFGjsPX9AXmc Vm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAABgSXYwPUAAAQDAEYwRAIgOBZfovrq I6jjGGXNdg/IztTl/UHyhzLPIdImioq20loCIH1Th38jnUSD/X5XvTVrFxN48Ayl 7juSggy8Wv/Blo1mAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYA AAGBJdjA1QAABAMARzBFAiEAyWcK9WemzdwALK5RjjzE+vH42E5rB0N5uBosWXVi mn4CICy3xWCc7Bb05IWABSWmqDstncqvXwjctfGQf3AE9/IhMA0GCSqGSIb3DQEB CwUAA4ICAQBaJomg2FWF5F7sw6i1l9ZDjGUcIynqmrleDQfb0284CLgUSK8ZNu1i dBJkV15sJRLSqk7cB4ay4aAO7IRZAo80Tn+n4/cqWZ7ra6v9pGlcZ0MrBJpPiUrm hl8CUvv0VRnrPnnpbjD56bNlt0sOk8A4w59uPC1rfiOrZBKrhZ7IQgdvimkHoDML p5Gh98cPMCKbl38q+wl71zkBgxMAiAkhH+BQ/8bWg10N97QOGFksoU3/DlUus834 hgQW52VbY0RvgBXItCUhEs3CMxD+8QIyfIjGSG2lJd0SatpwvA4R9MQuwJIX8/UY jKGR2X7oCzwxCsCj7wNSQvNuetLIfCpbZ53KGSI/WwRYm+JlgDa5z+/6AGdl+i06 pSb8HLdqtRJKIOI33QKAxoidYdgEyQNeBWZaDT1UKPTofbKynizONIseQQf3D6K7 Ph5kSkyfn/HxeNDhmRT6FJ1da2doZr0L3OLMnogUbH0UM3M2OT8eDbGoJBeH2CP+ pwYZSH4aJWbfDKs4ai3xBcaPu45TVxaRFQtVyQZI5HNhBet0Yoqca1bxuoOw8dkW hqOBesg4EJ6NsxjuJj7Z/rZo22uN/L+WzwfczYDCEck3WKC4bVbqOiJraNC9u/QU 8WChSRSratsN+gDaJwW0VNHx9+ENa6e9ym5BdLOu3KIotb3bSQnHKw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTMee61JWtGHBq/qJTY4 eDxczrrenT3M3yTclMlv+SuzS2YqdCNfkOkK+jeKYTnR5Iq0VsYndYp9Wz5JtEEt F6LXVfksnjkoxaXfj7T+HEy/djN79x+SAcHFawcYy/1863sBKrrWvQZFuRIQnRdj l9M9abJmzYzGCOx3C4VzxDVZBuj/2H2772ybOzva30uhaXR/oZUrNsT7Z/BB9HHQ HjwZ4COjNB/GMJHgR48oQyuEY2JIKE0Wtrk8faaSUNfrR5dnUkW4qtLGUgngNF34 kSHHdMlsl0HE+GIpbIvbBomQDHJ/ROBiI0e3LMCFT71KNpHCmude9ZDcwqH9WH3e ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6496264552661254045910667992969324110 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novica.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18834715195163354476110785850300412690916650299471714823615323769152958605817554761849428841696133888005396538876050436433144907823553870582244332631626167336115293071636692332185308764068374429481431554889222396464390850713052187972649138702473703942622568689692027463289289310400964700032274011727008613518811494514595830947346298465503355030488885791984724006850100866201964077346139037216466481219126549773984442189678884852317109384911214525845464279109011506419580069199091092993597515519302651995845382888284461899733309400177900366404762534570759663479930278698326329596980791678855519259639784067954621931211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 671146b2753b5ba8f2d9b7133e0b5da0c3018d91 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (432 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novica.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handmade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novica.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novica.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 005a2689a0d85585e45eecc3a8b597d6438c651c2329ea9ab95e0d07dbd36f3808b81448af1936ed62741264575e6c2512d2aa4edc0786b2e1a00eec8459028f344e7fa7e3f72a599eeb6babfda4695c67432b049a4f894ae6865f0252fbf45519eb3e79e96e30f9e9b365b74b0e93c038c39f6e3c2d6b7e23ab6412ab859ec842076f8a6907a0330ba791a1f7c70f30229b977f2afb097bd739018313008809211fe050ffc6d6835d0df7b40e18592ca14dff0e552eb3cdf8860416e7655b63446f8015c8b4252112cdc23310fef102327c88c6486da525dd126ada70bc0e11f4c42ec09217f3f5188ca191d97ee80b3c310ac0a3ef035242f36e7ad2c87c2a5b679dca19223f5b04589be2658036b9cfeffa006765fa2d3aa526fc1cb76ab5124a20e237dd0280c6889d61d804c9035e05665a0d3d5428f4e87db2b29e2cce348b1e4107f70fa2bb3e1e644a4c9f9ff1f178d0e19914fa149d5d6b676866bd0bdce2cc9e88146c7d14337336393f1e0db1a8241787d823fea70619487e1a2566df0cab386a2df105c68fbb8e53571691150b55c90648e4736105eb74628a9c6b56f1ba83b0f1d91686a3817ac838109e8db318ee263ed9feb668db6b8dfcbf96cf07dccd80c211c93758a0b86d56ea3a226b68d0bdbbf414f160a14914ab6adb0dfa00da2705b454d1f1f7e10d6ba7bdca6e4174b3aedca228b5bddb4909c72b