nnf-gpt-test.novonordiskfonden.dk
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 07:ea:96:5f:07:53:8b:aa:2b:c6:64:07:01:cc:c8:a4 was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nnf-gpt-test.novonordiskfonden.dk
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:ea:96:5f:07:53:8b:aa:2b:c6:64:07:01:cc:c8:a4Serial Number (int): 10522643325774942840897808721528015012
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 1e:69:da:f5:e3:4e:b2:f4:f5:83:77:1d:1a:1e:46:f2:9a:53:f0:d2
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 27:11:f1:fa:8d:5b:81:e9:57:46:ad:10:70:9b:54:c7:98:64:67:2a
Fingerprint (sha256): e8:c7:f0:54:48:61:c8:ff:70:26:84:e5:85:ae:07:9e:0e:33:21:dc:71:34:ba:1f:58:b8:5c:08:39:93:0c:7d
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate nnf-gpt-test.novonordiskfonden.dk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nnf-gpt-test.novonordiskfonden.dk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nnf-gpt-test.novonordiskfonden.dk
Other certificates including the domain name novonordiskfonden.dk
(limited to 100 certificates)
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
norma.novonordiskfonden.dk
budgets.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
fond.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
steno.novonordiskfonden.dk
steno.novonordiskfonden.dk
*.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
norma.novonordiskfonden.dk
nnf-gpt.novonordiskfonden.dk
*.novonordiskfonden.dk
cbc.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
norma.novonordiskfonden.dk
survey.novonordiskfonden.dk
application.novonordiskfonden.dk
nnf-gpt-test.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
norma.novonordiskfonden.dk
budgets.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
fond.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
steno.novonordiskfonden.dk
steno.novonordiskfonden.dk
*.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
norma.novonordiskfonden.dk
nnf-gpt.novonordiskfonden.dk
*.novonordiskfonden.dk
cbc.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
norma.novonordiskfonden.dk
survey.novonordiskfonden.dk
application.novonordiskfonden.dk
nnf-gpt-test.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
Certificate
The complete raw certificate details for nnf-gpt-test.novonordiskfonden.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHsDCCBZigAwIBAgIQB+qWXwdTi6orxmQHAczIpDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjQwMjIyMDAwMDAwWhcNMjQwODIyMjM1OTU5WjAsMSowKAYDVQQDEyFubmYtZ3B0 LXRlc3Qubm92b25vcmRpc2tmb25kZW4uZGswggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDK0maSNn3CvknYBheBPZDMdah9/s6d88DCCFGkNs0B9vEclKW M+mvCcg0tZ2EDTcPBsAq91ksAx4dRly1c6Fj2yqld/65VJDbN3s5lYe2+yZF05bQ TQrcOJx3vinIS12+XIwCyFKohroXHzY9Nwzf95QwcKcnBiRKu3jlEygw5jbm3OB+ Wcm1vF9c9MgNqHVleM2LKRqr9arCO9ydgDMFBC3ndTCMpw5OxlSm4GOojrSi2jsm I/aQLWewi91ZbleJF2iP3+IcKtDaGx2qlg4Eh5eeKnXA+ojj1Yj8AnDtRnFSa8Gu AWI0Kd8W53e+C3HdqKZRLDeXPh///+hxNemxAgMBAAGjggOcMIIDmDAfBgNVHSME GDAWgBSltNbrNsTna6bfxGQLASogBLhmIzAdBgNVHQ4EFgQUHmna9eNOsvT1g3cd Gh5G8ppT8NIwLAYDVR0RBCUwI4Ihbm5mLWdwdC10ZXN0Lm5vdm9ub3JkaXNrZm9u ZGVuLmRrMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEy NTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGHBggrBgEF BQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBR BggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dlb1RydXN0 R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB/wQCMAAw ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB3AHb/iD8KtvuVUcJhzPWHujS0pM27 KdxoQgqf5mdMWjp0AAABjdDn9IAAAAQDAEgwRgIhAN1GiguhnMM/QwKz2qEcDHmS YHdPdRLcRer77aEB87PgAiEA85wjMoTs1hW//ZYZdkUrTykeN1i5WjSogSCYwtY3 iFUAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY3Q5/Q2AAAE AwBGMEQCIHvTZ8wb8z9fUyArxgvfmQ3LlosfOQVdVX3J+gZm1QPpAiBvnQ6W3WAK FaQZ6tMTlePzLZgJSQJWJTpBn+aKMgmasAB1ANq2v2s/tbYin5vCu1xr6HCRcWy7 UYSFNL2kPTBI1/urAAABjdDn9D0AAAQDAEYwRAIgMq3aV/EorlP4G2TQ4ZdeyvV+ qxst5TAqzxX06GNY7WsCIEuWn/unSCBEfJ3Os4Hy0QP1uCDHdrZE04S9kktJXIQR MA0GCSqGSIb3DQEBCwUAA4ICAQAA0yrAL9ImAlsDWh+JUTXWPBr1U+4DUYbh6AKc iqp44I5lyG9z/JAlm9vq+ARz7YQHGuDlgWH5HZxB7ZiN/e3L0089sd9irUWaEvIz sSGEvYBM/9T+cuOx0q30ZyK1eKaOsbklP32vMTE3REPGg1RAG1hHOgp3xDgUrdzX IzoueBK+Ud0WlgiFoR1ZoblTkldzN8KOkh6uQod7CG1AD2XOL0hY4kTcOOPs7Tnf Ka7U7kZu04Nh1LNFoi0gqsPAZw6cnVDjgJqz/9j/8LKt0LF7h66EqCkDsjx+oPaw SKH0A05JB+v3wiid76WUDXGKL4P179viJM1aiiwhvrxKkVlYmbUnREmQPv4midbJ lBKkMgoS2SZlHy4tH+mOAEZLtI8pvadwysVo9tyYJdl+8opBd1cQv6PfGqvKdsmx WievVAC7T4euvboNffIk25Ww7oqbsqWHMa1ucoUUvk1WqacbLLBnwIKqtku5quui Hvy3C+QHRC+V+tebDZpQQIIC9Ixx7FIjmWKkcwt84q3PpvIMmpXto9SIHKGpaDtR n1/IPuq/hpEcMNOChifky5PkFOa2XYUYqKs9zhf1mGYzTunWtT9wlj6hcacXq7Mt o67gq7cclO7HMLKTQbqIg3Lb54X/uck+a6ztYYcXDhTUc4SJ0o7Mcwg7XsOq6aCx RNVbdw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwytJmkjZ9wr5J2AYXgT2 QzHWoff7OnfPAwghRpDbNAfbxHJSljPprwnINLWdhA03DwbAKvdZLAMeHUZctXOh Y9sqpXf+uVSQ2zd7OZWHtvsmRdOW0E0K3Dicd74pyEtdvlyMAshSqIa6Fx82PTcM 3/eUMHCnJwYkSrt45RMoMOY25tzgflnJtbxfXPTIDah1ZXjNiykaq/WqwjvcnYAz BQQt53UwjKcOTsZUpuBjqI60oto7JiP2kC1nsIvdWW5XiRdoj9/iHCrQ2hsdqpYO BIeXnip1wPqI49WI/AJw7UZxUmvBrgFiNCnfFud3vgtx3aimUSw3lz4f///ocTXp sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10522643325774942840897808721528015012 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nnf-gpt-test.novonordiskfonden.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24637815335353611890000755815105510254099073101322915564886289288455394610634458421048375434426701219843885907405381746467548585865678134842622390127871201909772068410456177056799831097306590493609957942718403912837823901503197562670028598586725349692568167206743066241562052402370878609190675156494980349836898912230333213020355457032747312165543932015672935720478090613090875316443759141346207887163200475033245154006257944409099311931755057204780154402088117548307106422871525421642998695813107376424601757145328872848821227306689766287228635600971268605403357347371843033275837321818757496655736180778154704890289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1e69daf5e34eb2f4f583771d1a1e46f29a53f0d2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnf-gpt-test.novonordiskfonden.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0000d32ac02fd226025b035a1f895135d63c1af553ee035186e1e8029c8aaa78e08e65c86f73fc90259bdbeaf80473ed84071ae0e58161f91d9c41ed988dfdedcbd34f3db1df62ad459a12f233b12184bd804cffd4fe72e3b1d2adf46722b578a68eb1b9253f7daf3131374443c68354401b58473a0a77c43814addcd7233a2e7812be51dd16960885a11d59a1b95392577337c28e921eae42877b086d400f65ce2f4858e244dc38e3eced39df29aed4ee466ed38361d4b345a22d20aac3c0670e9c9d50e3809ab3ffd8fff0b2add0b17b87ae84a82903b23c7ea0f6b048a1f4034e4907ebf7c2289defa5940d718a2f83f5efdbe224cd5a8a2c21bebc4a91595899b5274449903efe2689d6c99412a4320a12d926651f2e2d1fe98e00464bb48f29bda770cac568f6dc9825d97ef28a41775710bfa3df1aabca76c9b15a27af5400bb4f87aebdba0d7df224db95b0ee8a9bb2a58731ad6e728514be4d56a9a71b2cb067c082aab64bb9aaeba21efcb70be407442f95fad79b0d9a50408202f48c71ec52239962a4730b7ce2adcfa6f20c9a95eda3d4881ca1a9683b519f5fc83eeabf86911c30d3828627e4cb93e414e6b65d8518a8ab3dce17f59866334ee9d6b53f70963ea171a717abb32da3aee0abb71c94eec730b29341ba888372dbe785ffb9c93e6baced6187170e14d4738489d28ecc73083b5ec3aae9a0b144d55b77