mattbanes.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:7e:ee:89:14:59:e8:9b:e0:9a:e2:cc:e0:48:2f:2c was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mattbanes.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:7e:ee:89:14:59:e8:9b:e0:9a:e2:cc:e0:48:2f:2c
Serial Number (int): 15280575431851789493738328096080670508
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 28:60:15:fa:1b:2a:22:b7:1e:e7:3c:c2:91:1e:c2:d3:42:1a:a9:6e
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): f5:83:94:e9:71:ef:21:88:c2:d1:8d:16:84:d2:1e:f3:e6:90:0d:ba
Fingerprint (sha256): ce:9e:70:bb:7c:7e:9b:33:27:29:2e:52:80:cb:64:24:2a:58:11:39:f2:bd:42:fa:5e:bc:9d:d7:3a:4e:74:7c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate mattbanes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mattbanes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mattbanes.com

Other certificates including the domain name mattbanes.com

(limited to 100 certificates)
rho.mycda.app
support.bmt.ky
mattbanes.com
support.bmt.ky
sni1c6fdgl.wpc.edgecastcdn.net
support.klr.co.za
www.app.wordspace.co
www.gofoobee.com
sportrend.asia
www.getamplify.org
sni1c6fdgl.wpc.edgecastcdn.net
criticide.app
damara.club
mattbanes.com
macrocalc.mattbanes.com
helpdesk.cybertimez.com
dev.nativ.ai
support.marathonsoftware.com.au
holabogota.club
help.productionsoft.com
www.clistefarms.com
support.detect-measure.com
golf.games235.com
martineseror.art
mattbanes.com
macrocalc.mattbanes.com
www.astrochap.co.uk
www.binarybotshop.com
press.guarentee.ca
globalburners.com
soporte-central.semperti.com
etienne-blanc.com
beyond-budget.com
www.bangalowmartialarts.com
www.facturacionninja.com
support.bmt.ky
assets.planmates.app
damara.club
oauth.discaste.com
voicesofthesierra.mattbanes.com
www.fincablancaibiza.com
testm.infasme.org
www.starname.network
acarsansiparis.com
support.bmt.ky
tomasbelada.com
test.salatinos.cz
cheesecakeinteractive.com
support.netixsolutions.com
support.xtech.ae
banamaduwa.tk
support.bmt.ky
recipes.mattbanes.com
www.bitscheduler.com
www.amokal.com
*.mattbanes.com
support.onestoplogodesigner.com
support.accadiasoftware.co.il
auth.panelytics.dev.da-service.io
feecalc.westmar.ca
go.brazilianhub.com
www.labradap.com
support.easysignage.com
support.bmt.ky
trackingbus.cl
barbarians.com
agenda.mymoons.co
3d.teelookup.com
envelopes.mattbanes.com
recipes.mattbanes.com
www.bot2call.com
www.appstetix.com
shop19.online
support.netixsolutions.com
delegate.terraclasic.money
pokerater.app
www.overheard.dev
mattbanes.com
achiverscargo.com
support.bmt.ky
eviceconti.com.br
revestro.com
www.vertua.com
support.detect-measure.com
getverse.app
envelopes.mattbanes.com
test-mattbanes.mattbanes.com
biztool.soixantecircuits.fr
flutter.pics
speedcar-romania.ro
www.lindagarciarose.com
www.digimoxie.com
www.fluttercourse.com
admin.danaanbar.ca
suguchat.com
*.mattbanes.com
estebanpintos.com
mattbanes.com
support.bmt.ky

Certificate

The complete raw certificate details for mattbanes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhzCCBW+gAwIBAgIQC37uiRRZ6JvgmuLM4EgvLDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwODIyMDAwMDAwWhcNMjQwMjIyMjM1OTU5WjAYMRYwFAYDVQQDEw1tYXR0YmFu
ZXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA289Kcp9yd1Ea
ZKThWYKpkWi7lxwO3+2tkpDi6TX4lbfXb0hC3PD7YLL2817YmkonoXmmr+r46M3D
MwBpoO7VkQMzywd1k/2/ajDDm2i7r9il5fwInZdoW2oVXdv4o8K6If8T2f0dhIu8
J1WE9Te/sicxGLRK0f79l/v+Oi+U4Vvby+d/uQEZ0cw0cMhWpuDPR9mP8vtaiNV8
70+XGpBzruZkxNS7O13H5Qs6OJC5kQto2pm7fiOirywJk4Z6pm2AQtNxlHbDV+7v
fmXCx1oS9H89xgpujwuIUkAqhLrgvGtO3kHloz0NiprQdfSZGFAbMf4jQ1NwFSWF
/2502UJyZQIDAQABo4IDhzCCA4MwHwYDVR0jBBgwFoAUpbTW6zbE52um38RkCwEq
IAS4ZiMwHQYDVR0OBBYEFChgFfobKiK3Huc8wpEewtNCGqluMBgGA1UdEQQRMA+C
DW1hdHRiYW5lcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5k
aWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNB
MS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEds
b2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDA+BgNVHSAENzA1MDMGBmeB
DAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
gYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl
cnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
R2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwCQYDVR0T
BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA7s3QZNXbGs7FXLedtM0T
ojKHRny87N7DUUhZRnEftZsAAAGKHnwMMQAABAMARzBFAiB/t2s0N+lpwvPHqdZK
qE6IefgBfA2ZwJuJdcjVsCB3zwIhAOwByky5NNZW+WgIrN1whIIgqdNFIsSMl7PU
vBs04jaZAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGKHnwM
LAAABAMARzBFAiEAoFxruedd2cSFJe/ppCW+f60mxTM25Mi3JovzNRpaU4oCIDck
oi7Z8DLrFuwbym2YyifgHwqGUewfEpdH14WQnNOUAHcA2ra/az+1tiKfm8K7XGvo
cJFxbLtRhIU0vaQ9MEjX+6sAAAGKHnwMFwAABAMASDBGAiEAk/fyFjgzW40LO0js
dyZ/Efj8CccpEgaZbIiVDs9kLlwCIQDFi0PbAiBs9c3Kh/L1cZGWQCJMvccnCW5q
8zCV0DBYjjANBgkqhkiG9w0BAQsFAAOCAgEAXb36dgaBjDw/arrkt/OrFo0FvMNi
v/m+FzcFdp6IZ3FIuWKXrXbF5tIpVEuG/XYgjXefrpbvNnZ1JjpUw4ISEhDzcUmH
TrRP+OlhWZ1cjmQAgwbMSDIQLe9NDvZUDKQ8aZoACr4Zm4OK6ssM2CWzTGXEZHam
CYHjrbTxvSyLsurkO/mBrRwQs6hzsm9kInVaOF9NmcT4yCMezy5lC+444ThyuERX
D10lmMMceY4nYzA/cwwN4SsDGQeyDy3aljqraPw7Tp/2rkPKwzDKxDPtcHVCSPdF
DQbbkISlOu4MZKVvIilr4ACmZZYc5rCF6fu/3UckMgg5EH+lE49iK7Tl9kwwTZm9
lqqL0iy07kddGnugBnCRUWFUekuWK/de3gmvXDL/CtOKStUMwGViKZpdj5TNVw9l
fpcMSEe2uEGdAZSCOCAuYeRPI7tPsT7mpA3K6vWdPfKyjT9nxUziDj61DQoQQ3LZ
Ya6G24BW4y2aZYZopy+tf/VVeG//yQDgrNdfWk8oUsSmxtNp45KsezsVfdSfg4aD
zEWOVR/Oxa2WOIzBEOwIKIZjMmPPXyWOyCj0OXN5VL7pPgcc5AP38/if8h4BYY2e
bFbH73d7JTv066YJLgvXoTsSE/o9SPnktObwf+iBIQyP5160TACDmV+YReflxwvs
9g62i7Wu1kuvhyM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA289Kcp9yd1EaZKThWYKp
kWi7lxwO3+2tkpDi6TX4lbfXb0hC3PD7YLL2817YmkonoXmmr+r46M3DMwBpoO7V
kQMzywd1k/2/ajDDm2i7r9il5fwInZdoW2oVXdv4o8K6If8T2f0dhIu8J1WE9Te/
sicxGLRK0f79l/v+Oi+U4Vvby+d/uQEZ0cw0cMhWpuDPR9mP8vtaiNV870+XGpBz
ruZkxNS7O13H5Qs6OJC5kQto2pm7fiOirywJk4Z6pm2AQtNxlHbDV+7vfmXCx1oS
9H89xgpujwuIUkAqhLrgvGtO3kHloz0NiprQdfSZGFAbMf4jQ1NwFSWF/2502UJy
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15280575431851789493738328096080670508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mattbanes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27748407696471227886673831247758526761910851876548903723212530834945518897859419855424229352153383253986841553105536188678174187161721198482363537670865033066516316603494297616871518469066933504536142391877601173057516020414459592476991196950669562723310507971082242056012541176730499145155234480876016936812638635818540138542603105373816371841440784099868653804167957669292890917170938132706819431491315985069830658904258249742189153498670380573550454073683967928598503515471724287024056865033220412432650785995164704236346581043427087875062726920487728620629305238507379550918454345810535799428915674367360124482149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							286015fa1b2a22b71ee73cc2911ec2d3421aa96e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattbanes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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