afgruppen.no
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0c:31:d1:e0:52:a0:5a:c4:ec:4b:81:5a:bc:d4:a8:da was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=afgruppen.no
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:31:d1:e0:52:a0:5a:c4:ec:4b:81:5a:bc:d4:a8:daSerial Number (int): 16209415291774391005034683034305341658
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c5:77:21:52:e0:e5:8f:a7:87:bf:3a:4f:6a:37:4e:45:61:dd:4f:d4
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): ea:79:d4:06:30:96:b9:dd:a9:94:54:f3:f6:07:fd:12:d0:ba:a1:79
Fingerprint (sha256): eb:b5:b4:ee:7a:e9:3c:57:b4:7a:92:e5:74:39:9b:04:42:05:25:10:a7:a8:a8:a9:60:1a:cc:00:28:21:f9:ff
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate afgruppen.no
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for afgruppen.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
afgruppen.no
Other certificates including the domain name afgruppen.no
(limited to 100 certificates)
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
collab.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
*.afgruppen.no
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
adfs.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
collab.afgruppen.no
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
www.afgruppen.no
wrk-osl.videonor.net
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-mal.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
collab.afgruppen.no
*.afgruppen.no
wrk-mal.videonor.net
app.afgruppen.no
wrk-mal.videonor.net
*.afgruppen.no
wrk-osl.videonor.net
*.afgruppen.no
citrix.afgruppen.no
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
sip.afgruppen.no
wrk-mal.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
wrk-osl.videonor.net
app.afgruppen.no
wrk-osl.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
afgruppen.no
wrk-mal.videonor.net
wrk-osl.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
collab.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
*.afgruppen.no
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
mail.afgruppen.no
wrk-osl.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
adfs.afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
collab.afgruppen.no
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
www.afgruppen.no
wrk-osl.videonor.net
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
wrk-mal.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
collab.afgruppen.no
*.afgruppen.no
wrk-mal.videonor.net
app.afgruppen.no
wrk-mal.videonor.net
*.afgruppen.no
wrk-osl.videonor.net
*.afgruppen.no
citrix.afgruppen.no
afgruppen.no
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
sip.afgruppen.no
wrk-mal.videonor.net
citrix.afgruppen.no
wrk-osl.videonor.net
wrk-osl.videonor.net
app.afgruppen.no
wrk-osl.videonor.net
wrk-osl.videonor.net
wrk-mal.videonor.net
wrk-mal.videonor.net
afgruppen.no
afgruppen.no
Certificate
The complete raw certificate details for afgruppen.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHiDCCBXCgAwIBAgIQDDHR4FKgWsTsS4FavNSo2jANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjQwNDE5MDAwMDAwWhcNMjQxMDE5MjM1OTU5WjAXMRUwEwYDVQQDEwxhZmdydXBw ZW4ubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBWEDNJmvbrAJ 6q1v3cm0o9kDOw/PE0P9ofBXmiABj5z7bmftJNVK0B4TWQDh+tAg2uy0+ku8xza5 51PPPd7xjCf2/BYscbEmrO3nZ59PWEnqLorePShPxEV+GyDXklkBraggE9aQFrJU qzqQrpLdQ1iuRRQqNk7A5anpEKfDhToouSGetmoY+2LYDXoILwKvYz0695BeO1rU uKZy//c6KJI0CAlyzXM/QUGcl+BA0/702Mzy8IxLLzwG7at0QjwRLM4z36V86Tch 0QOxVd0AI1EEvypVCKGegvF9BONh3sws/SOFlBlnlW3yeC/uaYxNnKXuHVFzH3tn LIQkQRQBAgMBAAGjggOJMIIDhTAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASog BLhmIzAdBgNVHQ4EFgQUxXchUuDlj6eHvzpPajdORWHdT9QwFwYDVR0RBBAwDoIM YWZncnVwcGVuLm5vMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGH BggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB /wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABjvSvvR8AAAQDAEgwRgIhAIGN70yAIsCru1Lc QvhK2sNoCECC0nSPJIR4Q9JNe1wNAiEA9hlAIn7QFC4o1WFcH4JwiORo21VI/u9W T5RIVf4lsnMAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY70 r71hAAAEAwBHMEUCIQC/Dd63FUBBvGNO3UOIwSEuJ8E4VdVppcCRywMUOlmeGwIg ONFs04lljPsm+XOKdsm5BDoGp56b2rA7ybiOLExZXN8AdgDatr9rP7W2Ip+bwrtc a+hwkXFsu1GEhTS9pD0wSNf7qwAAAY70r70vAAAEAwBHMEUCIHJpythSrKPyaRou JYXBRkOxSDQYXsOWrOwLWuQy4juAAiEA1K3FYFEDX8HrBbkIOYZE6qbzmDPmtoBe 9asg/Z7uPsYwDQYJKoZIhvcNAQELBQADggIBAAo3qx3jEaq6fTChkTdoSz802VXf 4DJ+TpJSt0FUazTTXg9Bv/AeXg5aZ7QIa+gcCEc1IKS64ZFmxJSMKmTQt6FYFmLR SL8nuC5WppXUd0+eiIy5NuwpK2AJtv/nZyyGtNn5wtBivslAUijPh58kVtSlTZnP /kV2DII8r8X5ZqhiVcF4N2JBbWQ2DFU1oKTAACenPUPeij7H868ZMb2vMJgGHdxH xyUraPhjSAJQHB+pRirOLn9QmrX9td+Kj3vNXsH2peCy2JvE3MxBfAP8ZCQk5j1J d+/c+raGRQZRHY8iLQve2tTkM6v9P4ghDD9wzd93ODRMTBq9jNEWfrI/D8UzSx69 ws1F3hvWwHeApZdfRrjmWmWkpQDQvk4Qe3fiN00nG+6cyrgawaOuEgcBLRHq/QkK xV6t/Ychs1dtKR9K47AD5C5SJB1yoi+tuFBxbtBUyXimMueK3r02Gov1XNx9YEyO 4sCwfOT5enaFwJZ2cM3ES4VqaRO/L97A0gPrXSXQJPXF2HIVALp3fZ5/XYIGId+E G/l85fWHHwpk2QDVg1ClLYZGqJu84z3O14lLSEw3fhAi1y+UB7/jlhPZxUJZ7dDQ Cz5MJAuq5uQwEnQGxcwL1IYukxltLgpkJ4ob2e8tt52wqLWHXKzyMuxPfQz+a7Lv oBGFd8eG/GAb3db/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgVhAzSZr26wCeqtb93J tKPZAzsPzxND/aHwV5ogAY+c+25n7STVStAeE1kA4frQINrstPpLvMc2uedTzz3e 8Ywn9vwWLHGxJqzt52efT1hJ6i6K3j0oT8RFfhsg15JZAa2oIBPWkBayVKs6kK6S 3UNYrkUUKjZOwOWp6RCnw4U6KLkhnrZqGPti2A16CC8Cr2M9OveQXjta1Limcv/3 OiiSNAgJcs1zP0FBnJfgQNP+9NjM8vCMSy88Bu2rdEI8ESzOM9+lfOk3IdEDsVXd ACNRBL8qVQihnoLxfQTjYd7MLP0jhZQZZ5Vt8ngv7mmMTZyl7h1Rcx97ZyyEJEEU AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16209415291774391005034683034305341658 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afgruppen.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22473070745607214940060416936483630781360253331191310250085260350622230841361088483013840853462918783594523170835128517480411045346696053548329425445519553179110869075158347551979881024018296142013126882025136511532337359612819352617751011783508507626581369833552722374197016170314803214208611698847287833776924036384920904817401691683240349128484425069308635245592424925633336809469359064828159992077971423788907519072043767803220909065532750078325824165402232408364508697004076137619342652045687279049183388593688514253795882836342365868827806712427004453691881064896482182233892215446493189706907517104536112141313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c5772152e0e58fa787bf3a4f6a374e4561dd4fd4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afgruppen.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 000a37ab1de311aaba7d30a19137684b3f34d955dfe0327e4e9252b741546b34d35e0f41bff01e5e0e5a67b4086be81c08473520a4bae19166c4948c2a64d0b7a1581662d148bf27b82e56a695d4774f9e888cb936ec292b6009b6ffe7672c86b4d9f9c2d062bec9405228cf879f2456d4a54d99cffe45760c823cafc5f966a86255c1783762416d64360c5535a0a4c00027a73d43de8a3ec7f3af1931bdaf3098061ddc47c7252b68f8634802501c1fa9462ace2e7f509ab5fdb5df8a8f7bcd5ec1f6a5e0b2d89bc4dccc417c03fc642424e63d4977efdcfab6864506511d8f222d0bdedad4e433abfd3f88210c3f70cddf7738344c4c1abd8cd1167eb23f0fc5334b1ebdc2cd45de1bd6c07780a5975f46b8e65a65a4a500d0be4e107b77e2374d271bee9ccab81ac1a3ae1207012d11eafd090ac55eadfd8721b3576d291f4ae3b003e42e52241d72a22fadb850716ed054c978a632e78adebd361a8bf55cdc7d604c8ee2c0b07ce4f97a7685c0967670cdc44b856a6913bf2fdec0d203eb5d25d024f5c5d8721500ba777d9e7f5d820621df841bf97ce5f5871f0a64d900d58350a52d8646a89bbce33dced7894b484c377e1022d72f9407bfe39613d9c54259edd0d00b3e4c240baae6e430127406c5cc0bd4862e93196d2e0a64278a1bd9ef2db79db0a8b5875cacf232ec4f7d0cfe6bb2efa0118577c786fc601bddd6ff