southperth.wa.gov.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:21:f7:63:78:52:d2:6e:af:c6:33:23:0a:52:cf:7e was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=southperth.wa.gov.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:21:f7:63:78:52:d2:6e:af:c6:33:23:0a:52:cf:7e
Serial Number (int): 16127099381749157495890253634608484222
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 81:9a:4b:54:de:61:bc:61:08:60:3f:4e:38:63:2a:a3:11:df:a9:19
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 53:6d:76:96:26:38:de:12:5a:49:e4:65:f8:d5:61:00:18:be:0e:57
Fingerprint (sha256): ca:15:f3:15:85:5f:b4:94:6a:dc:d1:ea:70:eb:b8:0f:a1:bd:30:3a:3c:99:30:7e:1c:eb:7f:af:a4:3f:60:2e

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate southperth.wa.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southperth.wa.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

southperth.wa.gov.au

Other certificates including the domain name southperth.wa.gov.au

(limited to 100 certificates)
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
www.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
library.southperth.wa.gov.au
awpe.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
m.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au

Certificate

The complete raw certificate details for southperth.wa.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHlDCCBXygAwIBAgIQDCH3Y3hS0m6vxjMjClLPfjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjIxMjE2MDAwMDAwWhcNMjMwNjE2MjM1OTU5WjAfMR0wGwYDVQQDExRzb3V0aHBl
cnRoLndhLmdvdi5hdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMId
WNimppmsgNM58xarBJ+nOxOqY5ujEmVRPmqbk2lRa6zmHU2Zk9dkFKlfcebNn62C
xQUiJYysHft2P/euLZRlcM+ke1V6OHCR0ciC2tc/bHDH/tef8l0ztw9VwgDSs82e
JB/NvPMDKK/1my9Y2T+Ve+Cuv6Ee5Wqb/IT9bTjWK82zEvI0cyDugD8C/Q1e1H8S
Si5uMyIdYXAaeeKaUb9SbxD9ZwIlWLZSN0vSXsYpLGBRALHAKqlT7nCyICZpw5Bh
A65MlMRQ8LEgQIGqUqdsV/CTXCBZSP2YThVfWrRnCXR5quT3ALBKjph4T7Ih03nK
d8NZ15z/JgzTrY1OINkCAwEAAaOCA40wggOJMB8GA1UdIwQYMBaAFKW01us2xOdr
pt/EZAsBKiAEuGYjMB0GA1UdDgQWBBSBmktU3mG8YQhgP044YyqjEd+pGTAfBgNV
HREEGDAWghRzb3V0aHBlcnRoLndhLmdvdi5hdTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG
Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw
OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMD4G
A1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIy
Q0ExLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCt
9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYUZEz2dAAAEAwBHMEUC
IQDcT+FtZXn/ZfyiZCRn/lsGuvfI2uN5LfgsqVez+DS0BAIgKcIxrXYhYw5kzK/l
yGgHwhgQtjQAl42xpIPKDNTkIB8AdwCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc
8AMOeTalmgAAAYUZEz1CAAAEAwBIMEYCIQDVjEh+kX2ElvDwn+T3R0EADTFYeDiB
+BqW21KZ7DKzlQIhAK6fkQspp3cVhZbrZRH3TQnoLFcZ/fIZOCbXXUVxea9wAHUA
tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGFGRM8/AAABAMARjBE
AiA3B/ABKodJO+FG51NGKI9pAi3CSqVttKscx0jBJVmKRgIgNfkejSTP+W+/PIbK
XB6kRfsSSKOaMeVxT9pvzeSbOXUwDQYJKoZIhvcNAQELBQADggIBAG7csi/YfvJz
hcwO47CbGxbIffTlmMdMNiH4SrjLLq0xSiqDYbJ6J0ttXRKN3BKTeVfBWVxnDxpY
fnl+NazIqXPjbEa5UywRK4UdIB2tkbGVGFXydO5BqYvpr7ibu2E3MCaCclteBYfj
hkvoSkXPs3aCu960b4pFT9sYdhhelJOG5lChLniHYrqjEdNiwYsBzOnfpGFxyoZ5
U5cidmhzkV/h46G9RahhZDBgOyrXHD01S91rFA6xs0lEzBCIub759spHH1W9IRub
KYCBsP+i96ehd3FGHbG6Z3aPUv2sB+tbHNBs8ECqNRwcLC35Zh/HJ1kD3VPERyYH
sS304tUesswpDtyeRfOeQhO7DgONGDkdpyDlVAtKrd/zuHhksMhM58tWNxR50zH4
+V9p1S6104NdKhuk8ikxQEhksJ7QJ2HY75jcly7Ng8Etji9vOLxcMf0zkfqs/T8u
2/rVTr5wJ988LV7tLHgSy9I0YwONbs+ZsPfNBQVjoBpfkqyVASECZGBtHvwoivde
avdOauRTfBiNXuR3peLIqjm7OG2k4UoGqYMcpWtUqKrjJX9uJk6RoN4ozYqKFJV6
Q8Rft7G53PSVNLSMbLzSr0IS5V9zDyIalw+wIjfoCxN7CwVfR8PlMrI6Sr2qczuf
hQpKA742PwOCKxqwaZqefDqaZvm8uFxr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh1Y2KammayA0znzFqsE
n6c7E6pjm6MSZVE+apuTaVFrrOYdTZmT12QUqV9x5s2frYLFBSIljKwd+3Y/964t
lGVwz6R7VXo4cJHRyILa1z9scMf+15/yXTO3D1XCANKzzZ4kH8288wMor/WbL1jZ
P5V74K6/oR7lapv8hP1tONYrzbMS8jRzIO6APwL9DV7UfxJKLm4zIh1hcBp54ppR
v1JvEP1nAiVYtlI3S9JexiksYFEAscAqqVPucLIgJmnDkGEDrkyUxFDwsSBAgapS
p2xX8JNcIFlI/ZhOFV9atGcJdHmq5PcAsEqOmHhPsiHTecp3w1nXnP8mDNOtjU4g
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16127099381749157495890253634608484222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southperth.wa.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24504702736008830692031904288934942299400692208011185438014901435400334258306316413020382710406480640360668510173158114992736059974178645865439070572515760385836884969565501102280436686918485783043484530856048892280965800223483594581623003498258470511005470052019603527981948270812298429240558864150767079554243088908890716482937912019820188288192926648195942656996178157362415245925611759742502328468435849199447396692963433365069101707622559956729268762790828246951521281568387070134497580540644020199638131311411410527809166012407062605768501621615540154431764348825678532565056439111078750137941137435616300900569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							819a4b54de61bc6108603f4e38632aa311dfa919
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southperth.wa.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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