strapi.nyanheroes.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:31:92:e8:00:87:4b:fc:28:e6:d1:c5:44:4d:f5:1e was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=strapi.nyanheroes.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:31:92:e8:00:87:4b:fc:28:e6:d1:c5:44:4d:f5:1e
Serial Number (int): 14878910112601681423609060372228470046
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 18:f7:d6:23:39:a7:d1:f4:89:88:50:4c:a9:e5:a0:14:67:da:55:b8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 9a:d5:1b:95:95:1a:d0:0c:02:b2:f1:8b:13:5c:2a:3b:fa:64:39:60
Fingerprint (sha256): d7:8a:db:64:33:b8:ab:60:4e:36:99:84:ed:d0:05:ae:ba:c4:a3:b1:47:84:b7:41:9e:96:3c:dd:c3:d2:f7:64

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate strapi.nyanheroes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for strapi.nyanheroes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

strapi.nyanheroes.com

Other certificates including the domain name nyanheroes.com

(limited to 100 certificates)
bot.nyanheroes.com
*.nyanheroes.com
missions.nyanheroes.com
api.nyanheroes.com
helpdesk.matisa.ch
nyanheroes.com
nyanheroes.com
nyanheroes.com
bot.nyanheroes.com
bot.nyanheroes.com
itservicedesk.poundland.co.uk
*.nyanheroes.com
support.sodra.com
*.nyanheroes.com
nyanheroes.com
ido.nyanheroes.com
mint.nyanheroes.com
nyanheroes.com
missions.nyanheroes.com
*.nyanheroes.com
mint.nyanheroes.com
missions.nyanheroes.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
nyanheroes.com
missions.nyanheroes.com
expeditions.nyanheroes.com
bot.nyanheroes.com
missions.nyanheroes.com
servicedesk.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
*.nyanheroes.com
www.nyanheroes.com
www.nyanheroes.com
*.nyanheroes.com
expeditions.nyanheroes.com
itservicedesk.poundland.co.uk
*.nyanheroes.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
nyanheroes.com
expeditions.nyanheroes.com
helpdesk.matisa.ch
bot.nyanheroes.com
bot.nyanheroes.com
nyanheroes.com
www.nyanheroes.com
*.nyanheroes.com
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
helpdesk.matisa.ch
itdesk.nyanheroes.com
helpdesk.acrotec.ch
*.nyanheroes.com
helpdesk.acrotec.ch
api.nyanheroes.com
*.nyanheroes.com
*.nyanheroes.com
bot.nyanheroes.com
*.nyanheroes.com
missions.nyanheroes.com
itdesk.nyanheroes.com
bot.nyanheroes.com
missions.nyanheroes.com
helpdesk.acrotec.ch
support.sodra.com
servicedesk.ecm.software
missions.nyanheroes.com
support.sodra.com
expeditions.nyanheroes.com
itservicedesk.poundland.co.uk
support.autogroup.gr
*.nyanheroes.com
nyanheroes.com
servicedesk.bergtoys.com
api.nyanheroes.com
bot.nyanheroes.com
sale.nyanheroes.com
*.nyanheroes.com
*.nyanheroes.com
nyanheroes.com
nyanheroes.com
*.nyanheroes.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
ido.nyanheroes.com
missions.nyanheroes.com
strapi.nyanheroes.com
itdesk.nyanheroes.com
api.nyanheroes.com
expeditions.nyanheroes.com
missions.nyanheroes.com
support.autogroup.gr
api.nyanheroes.com
*.nyanheroes.com

Certificate

The complete raw certificate details for strapi.nyanheroes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHmzCCBYOgAwIBAgIQCzGS6ACHS/wo5tHFRE31HjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMjA2MDAwMDAwWhcNMjQwNjA2MjM1OTU5WjAgMR4wHAYDVQQDExVzdHJhcGku
bnlhbmhlcm9lcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5
h4kCH8CgFp2p/CG+35RHwU2UN5f1gxMYiB6ZF5czsYYpw5X12GitRWRsC3PQEX7g
5sC4xkzhZjwU7/9WR2LtTrM+EQ+R9wpOoIxMsMl3eNLKv+1c2+4w3sjEFOkmqnKc
BPC++zD8BXOHBmpZv2IEp+uRHmbgvQkZh7cucZJkXXpT65KXiWRaDF3IDztl//+e
SHeEKoF2wFpDo74aUfNCTxLGH54/GdJV66JFX/oOuRvbJ2Ej3+PFbSvaYznMQtDD
rtGFp9rGYIkO6bF7blfWZeHQmwlZJZOBXXL9sZ8Gl1v5epseNxzih/VW9Cw0ThDA
Papip0FPk9NCNTaDP/jdAgMBAAGjggOTMIIDjzAfBgNVHSMEGDAWgBSltNbrNsTn
a6bfxGQLASogBLhmIzAdBgNVHQ4EFgQUGPfWIzmn0fSJiFBMqeWgFGfaVbgwIAYD
VR0RBBkwF4IVc3RyYXBpLm55YW5oZXJvZXMuY29tMD4GA1UdIAQ3MDUwMwYGZ4EM
AQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGf
BgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9U
cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0
cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNI
QTI1NjIwMjJDQTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw
MjJDQTEuY3J0MAwGA1UdEwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwB
agB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjD2NylIAAAQD
AEgwRgIhAKLRQGt4FIQon7wVOx1nop5i8rkWqkJV4DFrGvCQ+2qXAiEAoqsuhqZk
nrJFcMedZBeLEBp+TIxYm1CdwB9jSJS7evgAdgBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAYw9jcomAAAEAwBHMEUCIFTJtjGni7CAYbpQwoCLO1vR
8XDRiisuVvet2DJuh4apAiEAimQDqPi1B0x6NH/w0I5DSO4O1yAPpu5DxLN3Zoiq
uwkAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYw9jcn2AAAE
AwBIMEYCIQDJ8Zhb5tsgglq06WCW/bFbXBFVgaoYZc+vhdqncHSaLAIhAJUJotMs
q6GzMohFzIEsshs5feO+X9lMQcO5uYtKeBnUMA0GCSqGSIb3DQEBCwUAA4ICAQCH
fScLmCj5FH/YRFo7zavWzXzD/ykdR+buzmr5/HvmKnP0WBsOIcEb43B3mKjzDC7v
uAKbVT2aM5SdUrN9A0y8foLbQMXbuEsoOsur9o+itaRnqF0KhecrTa0bSJz8anBJ
kT6+YRFObJb3p7STS3m3B2Jcl+0ofUBAPMS8+fjL1ck+lbLkmP83VI9bPoOQXYkH
6kSUzcKTj+BKzmEKzoJr8AyDdhG34JrVmNP+113kkPbY7aRlAphBjClPuZ1/dxLn
3mvmAsd7j2rJtkUV3axDhCtYUqsWw6ej1cyPjFw3O9SrP3zHRvLdNBD3WN4QWesH
varKEWKciVwmWgWFRVu4QWzJkuxKTLkwzef7awTbs365hSlVy6A+VwUnGDtS1DpB
THK/ZPdTy9UVsmCH7n3SoZg4AIpPN6CEAqQiTTK8Fw3oKrrnaNRuIFnuPvxtu+zV
XTbGmdrGaurWGN3VZUNfKU5VDdB4/HLtxWi79Nbdf4Li6NnV3GIcI2d9PbGbm5ky
WPOhT95do0O/0Qy0GOUMFnS9X5xmuOFr5WsuFxqctPr/e0PMKMJkVe0utRR2Et3D
sEcoCjeAOs+ClOZhFSueNstBEBcllYIxZ9umpEi5fcHfm9Rx2kmbF0MdJiu20ejH
Ar+lSfXAnxU6hGwT+755Sv6oNy1VsoMWk1OCJhOTMw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYeJAh/AoBadqfwhvt+U
R8FNlDeX9YMTGIgemReXM7GGKcOV9dhorUVkbAtz0BF+4ObAuMZM4WY8FO//Vkdi
7U6zPhEPkfcKTqCMTLDJd3jSyr/tXNvuMN7IxBTpJqpynATwvvsw/AVzhwZqWb9i
BKfrkR5m4L0JGYe3LnGSZF16U+uSl4lkWgxdyA87Zf//nkh3hCqBdsBaQ6O+GlHz
Qk8Sxh+ePxnSVeuiRV/6Drkb2ydhI9/jxW0r2mM5zELQw67RhafaxmCJDumxe25X
1mXh0JsJWSWTgV1y/bGfBpdb+XqbHjcc4of1VvQsNE4QwD2qYqdBT5PTQjU2gz/4
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14878910112601681423609060372228470046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strapi.nyanheroes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23420921311219731767210385966033420482430683492010425208211701314373363914598015798798088306516548362111059109067987359441085010297590211631639047264557192426436346523457387367868901829580284416523477711601405905649436521255339780724085337452360571646475678549409019535934465962483027580926045563495497817558777577890076651343945046934404053181984210974674330689513102486130444879680602207546121574584058355299630800528806880481830363845707605242688840267269521350005375247822169964641554655744473587367690354299815308518668262671590776752871510768363187473665371659561486769383368849458960019399333214015911140260061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18f7d62339a7d1f48988504ca9e5a01467da55b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strapi.nyanheroes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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