api.softwareone.cloud
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 04:78:d5:7c:90:e0:ff:e4:4e:fd:f2:45:c7:86:25:33 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=api.softwareone.cloud
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:78:d5:7c:90:e0:ff:e4:4e:fd:f2:45:c7:86:25:33Serial Number (int): 5944317628539421594487169446991766835
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 9f:7c:2b:12:6f:76:87:35:16:23:03:b6:7e:e6:54:09:d9:fb:19:0d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): eb:5d:ee:7b:0b:64:11:70:ea:9f:96:61:d7:46:a7:35:c7:1d:7e:e8
Fingerprint (sha256): ee:9e:a2:08:36:78:b7:8e:a4:af:4d:df:f8:9c:3c:f8:75:4e:84:22:5a:7e:27:b6:c3:bc:04:30:c3:e5:99:6a
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate api.softwareone.cloud
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.softwareone.cloud
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.softwareone.cloud
Other certificates including the domain name softwareone.cloud
(limited to 100 certificates)
monitoring.millennia.cloud
status.chaosgroup.com
monitoring.millennia.cloud
status.configcat.com
monitoring.millennia.cloud
monitoring.millennia.cloud
itsm-api.sap.softwareone.cloud
status.chaosgroup.com
update.softwareone.cloud
status.opa.ba
status.chaosgroup.com
porinimon.porini.it
monitoring.millennia.cloud
monitoring.millennia.cloud
*.di.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
porinimon.porini.it
monitor.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
api-portal.softwareone.cloud
status.chaosgroup.com
*.softwareone.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
*.softwareone.cloud
status.chaosgroup.com
monitoring.millennia.cloud
monitoring.millennia.cloud
testsite247.dynu.net
rmm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
demo.webmon24x7.eu
monitoring.millennia.cloud
dashboard.flipkick.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
*.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
statuspage.siteflow.app
api.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
monitoring.millennia.cloud
isitup.vit4u.co.uk
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
status.chaosgroup.com
monitoring.millennia.cloud
status.configcat.com
monitoring.millennia.cloud
monitoring.millennia.cloud
itsm-api.sap.softwareone.cloud
status.chaosgroup.com
update.softwareone.cloud
status.opa.ba
status.chaosgroup.com
porinimon.porini.it
monitoring.millennia.cloud
monitoring.millennia.cloud
*.di.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
porinimon.porini.it
monitor.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
api-portal.softwareone.cloud
status.chaosgroup.com
*.softwareone.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
*.softwareone.cloud
status.chaosgroup.com
monitoring.millennia.cloud
monitoring.millennia.cloud
testsite247.dynu.net
rmm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
demo.webmon24x7.eu
monitoring.millennia.cloud
dashboard.flipkick.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
*.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
statuspage.siteflow.app
api.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
monitoring.millennia.cloud
isitup.vit4u.co.uk
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
Certificate
The complete raw certificate details for api.softwareone.cloud in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmTCCBYGgAwIBAgIQBHjVfJDg/+RO/fJFx4YlMzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMjA1MDAwMDAwWhcNMjQwNjA1MjM1OTU5WjAgMR4wHAYDVQQDExVhcGkuc29m dHdhcmVvbmUuY2xvdWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd OroPoe4GC8X7P6Ol1O9R8f1A4z3KzmLS3lvI9EPsVVb4IGMo+jaEj3K0FWo+IbUo zjhApsJfay7MhHp+gWWBX8BzsuJWIin7HZvz7b5Czks1yfDJuGyknEHzy1WlDlJb ZIHeH6YqxO8+q8G5Xlk9zSoPmgUA4SNhrtA3pBcI9bEw1JRsIqBCnzMF9O7jcgr3 7f5tCjGQIkqhQDEJBnVnTiLy5nTBHu1eRK2+z6y/8PxOlo91I2ItCf3FEL85Cxpm zEdeK8lPDEnycEOMJlP9tEJhmKxP1ojx/m/UQjriCOiAYMtv6W1LvxePszV/g9Wk RJwvGRuHk4VBUdJihLOlAgMBAAGjggORMIIDjTAfBgNVHSMEGDAWgBSltNbrNsTn a6bfxGQLASogBLhmIzAdBgNVHQ4EFgQUn3wrEm92hzUWIwO2fuZUCdn7GQ0wIAYD VR0RBBkwF4IVYXBpLnNvZnR3YXJlb25lLmNsb3VkMD4GA1UdIAQ3MDUwMwYGZ4EM AQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGf BgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9U cnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0 cDovL2NybDQuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNI QTI1NjIwMjJDQTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw MjJDQTEuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB aAB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjDrTRPUAAAQD AEcwRQIgQ9zTtyxppaw6IOZlgVjVucirt6HPgOMMoaXyMvp5CLgCIQD41h3QZ1lZ 4rLE4ZzJhU44/feQwcJmTioQSj3n5VxCeQB2AEiw42vapkc0D+VqAvqdMOscUgHL Vt0sgdm7v6s52IRzAAABjDrTROoAAAQDAEcwRQIhAJwpbM/Kw1/Bimt1KfozGzMQ j57X7paqwwZKHR1Ht7HuAiAvYpQwyjkql+BnYmbPMTrYQMTWoyYEzwwupCRrX3BU YwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjDrTROoAAAQD AEcwRQIhAMcjhQHBeW8/BZiTwK8kJAbFNcXyL0nTB1BcIExk/dJAAiB4MygcJurv ZNHOCd0UEZ9bnL74kzqL1yGHXfaXJ7czrTANBgkqhkiG9w0BAQsFAAOCAgEAMTrq JKV+Bm2EjRc7X9lF+dN2QjQ5poTtZY55Wdgph0QY9LFDVNRRMdaeDpjWkv0+FDI6 RYLzW7QDqEgOC1QafOQVESjAnnBVq0Xh5/i+KfFZs5YuHoIpyGsqhltJea2bMjiH 3K+ANXssSuY4YCvZ8AbBiJ3yhQAjoiC9xkEprJw8F/Jp13A1xEnmjdCWmhgOj5cr 6iFqmNYXBtxwTi/VKmEIMWeZHgQOKkiVNSzM3q8trciJ5fU0ioFsUxzGtzs7t234 dSmFIvdHb95LLHHprEp2/5MTbBUFshxiY9kp7tRvHy8puetumy8IJ1bPivewo97i sKARQFRSamurZoUhN3YDelagz1q5B6Eya0rmGCvxIbzqXzMqyBFnaRWhi/h7VMrM sOjDLgrMdu495bFn3X6wCE0tBlnFaIxd2NxGhuisSK3yq2j9kE80msGYH7SMx9q9 wwstQm+lSWnf05gVVILI244SxNlUg/yDpHJ7bEPHTZYD2coQyE0rKVPF+puqxOkN 4aiYfg3nif3/jNXKFBdtGMct3O+XkPGtvTGXAFgp3JWykDFrHhu82oik2ZPySaSe iGmz2gSA8fCOl1nNjkpFkCsHa312rEqsuvYUwTCxZBwRhrC8deln4fQP042UYdqw ebXISjcc2oBRWQys317IOybDwDdeUj6pB0mSbig= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tq6D6HuBgvF+z+jpdTv UfH9QOM9ys5i0t5byPRD7FVW+CBjKPo2hI9ytBVqPiG1KM44QKbCX2suzIR6foFl gV/Ac7LiViIp+x2b8+2+Qs5LNcnwybhspJxB88tVpQ5SW2SB3h+mKsTvPqvBuV5Z Pc0qD5oFAOEjYa7QN6QXCPWxMNSUbCKgQp8zBfTu43IK9+3+bQoxkCJKoUAxCQZ1 Z04i8uZ0wR7tXkStvs+sv/D8TpaPdSNiLQn9xRC/OQsaZsxHXivJTwxJ8nBDjCZT /bRCYZisT9aI8f5v1EI64gjogGDLb+ltS78Xj7M1f4PVpEScLxkbh5OFQVHSYoSz pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5944317628539421594487169446991766835 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.softwareone.cloud' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27927624662415209483976830418483171282732636528434091120775011437455724054189574693888658626365825995515290817404892069002414944649767880649811791745710722405020665983215418650759069287462648252157145451319455472691494541457067068131478591548312303906379761333773891081392453226194529228756821513483894844405569967043755646875414470780582117944972892548889732842692882896114332265276018621147856115164789547384360423446109094997296961194070730374073316510882165193837270353435166935274609025084526572163571452258883243709429241734978837979849815694060207039776771589534071644962123158692529316596770814463837275992997 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9f7c2b126f768735162303b67ee65409d9fb190d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.softwareone.cloud' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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