poc.coconsole.bwoffshore.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:50:c6:72:d1:40:7f:e5:61:19:b0:7a:bd:ef:b1:3b was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=poc.coconsole.bwoffshore.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:50:c6:72:d1:40:7f:e5:61:19:b0:7a:bd:ef:b1:3b
Serial Number (int): 1748636758340094017025664478788694331
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 99:15:52:48:ae:0a:50:a9:47:15:1a:a0:a0:1b:22:65:0a:4a:b0:59
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ef:f3:2b:76:ad:54:9d:09:84:12:6f:4c:54:ed:0e:eb:15:47:99:21
Fingerprint (sha256): ea:60:04:8a:7b:b2:55:80:f5:6f:14:45:eb:80:ed:ab:42:92:3e:ac:d0:89:d2:4c:e2:9a:3b:74:d8:ff:23:a8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate poc.coconsole.bwoffshore.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for poc.coconsole.bwoffshore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

poc.coconsole.bwoffshore.com

Other certificates including the domain name bwoffshore.com

(limited to 100 certificates)
integration.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
cwa.bwoffshore.com
z27os2sut060.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
sslno.bwoffshore.com
sni.cloudflaressl.com
access.bwoffshore.com
sslsg.bwoffshore.com
sslsg.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
barossa.coconsole.bwoffshore.com
sslsg.bwoffshore.com
www.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
externalmemory.bwoffshore.com
access.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
access.bwoffshore.com
sslno.bwoffshore.com
poc.coconsole.bwoffshore.com
sslno.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com

Certificate

The complete raw certificate details for poc.coconsole.bwoffshore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHqDCCBZCgAwIBAgIQAVDGctFAf+VhGbB6ve+xOzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAnMSUwIwYDVQQDExxwb2MuY29j
b25zb2xlLmJ3b2Zmc2hvcmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxWt3uhfkLGBXTHGE0oAXLDXbVFL55T+O83zYLKDzo7iaNiEm4f83k4EY
JM5K7HoPoeBq5/+dUVNdjyE6ABVgYWsXMGDtjeNJsjMkVq5lxulxXO31LfDRTJxK
XV6HCOii6H2cviCWbkXcEzVnIw06KJuNE7qev278QLHOmc0w41VInf91tResKqO6
9Benwl2gR/PMBMi70c3XpTZfoGgEuOJcvCtxvI9wNmRzypnMfc8PB6RfqdSptr5r
VM4HvAP0TZ9dwKStz8d4Xcf4fngAx7jWPjBXqWmXUCLg8YURqwvH7JISK0KQMjMs
gtE/zx/CJJF/8gVBBteb0nRTlsJJ8QIDAQABo4IDmTCCA5UwHwYDVR0jBBgwFoAU
pbTW6zbE52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFJkVUkiuClCpRxUaoKAbImUK
SrBZMCcGA1UdEQQgMB6CHHBvYy5jb2NvbnNvbGUuYndvZmZzaG9yZS5jb20wPgYD
VR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu
Y3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9i
YWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAC
hkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNS
U0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB
1nkCBAIEggFvBIIBawFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf
tZsAAAGMOG6AZAAABAMARzBFAiAYSEWvnb4UM+oHd9MlY47w/3ZsggmeLq1mH1gh
KCuINgIhANFFzeWyXE5qpBq3IPMV3e9x7b32zUf+sgXEAGOuqgajAHYASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMOG5/5AAABAMARzBFAiASA/p3
mxdeLVCiiE2Qvp06RDDRzMq+yzRG1fS69tqWdQIhALliZIG9YB7xGEHJiFMj7ilE
hgwS7ATAFD0fF+XPG4qiAHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX
+6sAAAGMOG5/5AAABAMASDBGAiEApXgV3iBDC/Ho7cpOq3NWdPU/g3U7rH01/Se2
XNFI3sUCIQC+vBjnyLQk5qDSMvLIYWshS2DQSSaNmqhaNFIF4svSTTANBgkqhkiG
9w0BAQsFAAOCAgEAhJWKUEKnyQ1ZAfZQcx+6qnuGvmxlpQmCB3Hc8GE1YgXmM6xS
hIFNnN9lsyFs7z2oLLX94eyj3sZD+p7t90G8GpdeMw3sVxJAwduMr12W+u+YyGnb
ydY25H2dWLR72LmNtpmwRt7tD4g2vRRqBNaNq5zbQGksZ+jK1cVEcTojKZbaTbas
b9KZekRN5c1o20thTIh6irsrw1sEs2bXjw1ZopmVJrBt5y6n6SkuB8CR6UYJSSEB
PFn2YiLKZpYEbIPQw6RlO+2Qp5QSVj+bZsuQPFLxE6rDBQQ536SLiFfyIuAJgpkX
wN8e+u6yeAui1WscsgLjEL0MrXa8Fav1jbohPnyIUv7foqk+3/pesY/gPl/JYoDh
m+zsGt5jkrTSL7Mju6dSB0/b26fa422xbbsFzpsiINHtuQl2TlybIggB1avgZMS9
U0eB2poo0l+/AHKTW+HLUC5FOZWyLSC4JmL5YYyS2Dg+dfOemyN3pBYQvOX+zkMC
esvY8WM0IWzo+YE+vyF/Lno+x1+oJcrDVM56HsYqTAUeHWZtR1+EB5ovXm9ePlUc
wINs+iwb13CUiohSRmFCWMlLo6P85oVU+ksCpxU8gniRXAdF/5TrHR036l7NQ8Ww
W3yjjUA52igCd6F/QyNPSGjE2keSm5GdUxJATT58K/zuhFCRIuR/BqSCHnQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWt3uhfkLGBXTHGE0oAX
LDXbVFL55T+O83zYLKDzo7iaNiEm4f83k4EYJM5K7HoPoeBq5/+dUVNdjyE6ABVg
YWsXMGDtjeNJsjMkVq5lxulxXO31LfDRTJxKXV6HCOii6H2cviCWbkXcEzVnIw06
KJuNE7qev278QLHOmc0w41VInf91tResKqO69Benwl2gR/PMBMi70c3XpTZfoGgE
uOJcvCtxvI9wNmRzypnMfc8PB6RfqdSptr5rVM4HvAP0TZ9dwKStz8d4Xcf4fngA
x7jWPjBXqWmXUCLg8YURqwvH7JISK0KQMjMsgtE/zx/CJJF/8gVBBteb0nRTlsJJ
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1748636758340094017025664478788694331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'poc.coconsole.bwoffshore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24921940368077344974875075468542614695193558658829746103608625453085040930028691239217376092559917186312407843554352451977564951432946331801608301007016493728828584413994875522106227282266660290055043765281884399375478860675940169894507350473846207386913170105519312835941651175813177092773060023096280275770581950961369778846247904304628986151064918541963397668196752074319434423879518513685838208125812259575387838191115169763586348354410818541374181955921900168698633670195630043215153347012341054742909010619659837432392726057507618161235155209493385692702884190854311161840566204608083583345202039116567610018289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99155248ae0a50a947151aa0a01b22650a4ab059
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc.coconsole.bwoffshore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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