ara.gmw.nhs.uk

- Greater Manchester Mental Health NHS Foundation Trust -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:a1:ea:f7:bb:c3:bc:2e:4a:f2:45:6a:57:95:84:9a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Greater Manchester Mental Health NHS Foundation Trust

Organization: Greater Manchester Mental Health NHS Foundation Trust
Locality: Manchester
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:a1:ea:f7:bb:c3:bc:2e:4a:f2:45:6a:57:95:84:9a
Serial Number (int): 8816093480247324030052684183593387162
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ae:23:78:5d:29:ee:23:16:be:ab:83:41:f3:c1:57:9c:25:d6:c4:b6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 15:5e:d3:b8:9d:f9:90:ae:80:ef:cb:62:5e:52:41:81:ff:ff:d0:bd
Fingerprint (sha256): f3:35:b2:c2:85:9a:cc:28:03:25:a6:64:dd:bd:bf:f3:2d:ac:5e:d0:b7:26:20:d7:91:ff:23:67:3f:aa:20:70

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ara.gmw.nhs.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ara.gmw.nhs.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ara.gmw.nhs.uk

Other certificates including the domain name gmw.nhs.uk

(limited to 100 certificates)
sip.gmw.nhs.uk
DirectAccess-NLS.gmw.nhs.uk
gmw.nhs.uk
ara.gmw.nhs.uk
owa.gmw.nhs.uk
www.gmw.nhs.uk
adrms.gmw.nhs.uk
gmw.nhs.uk
Documents.gmw.nhs.uk
ara.gmw.nhs.uk
learninghub.gmw.nhs.uk
sip.gmw.nhs.uk
outlook.gmw.nhs.uk
learninghub.gmw.nhs.uk
gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
owa.gmmh.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
sip.gmw.nhs.uk
sip.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
learninghub.gmw.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
Documents.gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
*.gmw.nhs.uk
AutoDiscover.gmmh.nhs.uk
sip.gmmh.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
FTP01.gmw.nhs.uk
owa.gmw.nhs.uk
www.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
IP-DECT6500.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
www.eol.gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
Documents.gmw.nhs.uk
www.gmw.nhs.uk
www.eol.gmw.nhs.uk
sip.gmw.nhs.uk
ara.gmw.nhs.uk
DirectAccess-NLS.gmw.nhs.uk
www.gmw.nhs.uk
ara.gmw.nhs.uk
OWA.GMW.NHS.UK
gmw.nhs.uk
gmw.nhs.uk
sip.gmw.nhs.uk

Certificate

The complete raw certificate details for ara.gmw.nhs.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHwjCCBqqgAwIBAgIQBqHq97vDvC5K8kVqV5WEmjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA0MTMwMDAwMDBa
Fw0yMzA1MTQyMzU5NTlaMHsxCzAJBgNVBAYTAkdCMRMwEQYDVQQHEwpNYW5jaGVz
dGVyMT4wPAYDVQQKEzVHcmVhdGVyIE1hbmNoZXN0ZXIgTWVudGFsIEhlYWx0aCBO
SFMgRm91bmRhdGlvbiBUcnVzdDEXMBUGA1UEAxMOYXJhLmdtdy5uaHMudWswggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQClLdrtvLQZpkgbIVDXVMhe6cmP
3yzlRrdPFDw6yhgfivMX3Zq03AgWEPhnqanx/pTgJnAhAl+yx9SVO5DgoGPjxttq
jbWqg544zkWeR6ZRNdYw4n5rxG3EdDxYnnkwPLX91EvtYwdNXi4GN9P2F1SD4yMR
bX76dJHSbMqiLozh6orbv1IM4YwzWCDGauECBJhT9WdpJwh58hvlGD3Kmt09hBAw
WPYDa2BPGA3fV+cGJhx93HfGKSOxfRQWxoknvOcYZzktGFf88uX0NSxKipN7wwoE
/VIhTBIVAL3kZIgmoVWM1cISw4ZggYhEKKpIzjS3isn1ScMp5Pa7FFblq3rtOlpq
8vh5PohGiwLgRmNC7ZLFvaoQoQvnSTnYkP1q+qLK/FMlQBU+sA8QL8JTXnR9+f1w
8D32b64PzG79GCdhO3/vGmr7qVPA81endWFa43/vX5p76NaF4WBBuCSREf56mwXc
mpFeEp01OH7F7gMTlEN4yzRoQQZPHvKvtBl6zyxnE05RGUTc4qk2MnKdlTCHyfnb
opESfTFef5MSNwcrczF5F57fAd3oaSrPVkPsNFDGqjOpJwYG2+C5/bYR0EADlDKp
BLPXng7gD2c0efIH1ioI9eBHFfZolr8SeccdzVQJtNGfHbKfy8aGhREFyX1h3Aio
ATvIQ+1ns/3DetRx9QIDAQABo4IDbDCCA2gwHwYDVR0jBBgwFoAUt2ui6qiqhIx5
6rTaD5iyxZV2ufQwHQYDVR0OBBYEFK4jeF0p7iMWvquDQfPBV5wl1sS2MBkGA1Ud
EQQSMBCCDmFyYS5nbXcubmhzLnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDov
L2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00
LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExT
UlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcG
CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfwYIKwYBBQUH
AQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYI
KwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRM
U1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAXwGCisGAQQB1nkC
BAIEggFsBIIBaAFmAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooA
AAGAI48SuwAABAMARzBFAiBwKsFCxLMe6b3Tt3cx24NGaeMsgBcK7yyfI3e9nq2q
FgIhAKNOLCoc92iTSGGkVGNNI5NDtFnLixOWxbe51zmVMPoeAHUANc8ZG7+xbFe/
D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAGAI48SqwAABAMARjBEAiBqKnfWl/cv
syBvj7dA7NqBa3GYTH3+u9+1H0IcRej52AIgUCj2yNj7X1pFp8kQMCYbylaU0wzp
u4X3rdvwfDDqT9UAdQCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAA
AYAjjxLcAAAEAwBGMEQCIA6Zqj9ikMgU/PfpnilYSLnLNQUXdvbbKjEKzYSS/+EZ
AiB/5IiGS8M0GEJqki4e8Ncpp4j7icQKotTIEld9Q320gDANBgkqhkiG9w0BAQsF
AAOCAQEAgrHuHaFTRBTcEb3CKC/quGowGBg+fZ0drG6hpO0MbwHh9UoH6c8PA2dD
XN+r0SK5zuHwv7D4/GEOd9F12xTtxWpTBdlIi14F2SBlo1hgSgE/gEdvXKOqVtTm
NQphAtqMPx5w7jcITmdOGiq5bLhtsP//XACQN+Pj00tmpKMUR0ef4b3kU82IE2V5
jLNmq0m8gISyFr0CZEf2p4olgb1Dtg1+JuaE4cF2DzGf7rKtpvRQ2ydN1Eqq5wlZ
TdedKKo8277wA0pb9LSCNvwu78kEPdMBIhHYmtZBQBqCxgSADcYZRydXxrNm+qO4
9JKx89R8jxjsep+N3nnQnbG3u1Qpyg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8816093480247324030052684183593387162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester Mental Health NHS Foundation Trust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ara.gmw.nhs.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673872024560040919392503534699013824580787851642947473707012311204574456128685341144965952132709460371884006923517500089163322683621319547317307148365721871169505437824877120798026248211731310737869053971442165390440595330203708699403599862138048099221984193295042518682837269826924545879308978155913623892571929961579056696773751219623916588417182624659717892472962055000757072743032292845050464735350638948697688497327809627819660833944687163701070566312201495997700181253076781880229771638313642468951841949952169920765639678969699132704274953741287921696910425192742752570262236865774999812181999822191129880876139318053785526099335027264364385687511053033433132265645347860518601895553383500254117337920747574148424554248220528355232759716692251462656986485314388488747856234041461841988316171969632360402205595416059475611383080062743202434121500623894686110178601677494546307746449983834667482462188976843206223290602248113806145259963766512003186164797810344143549667901753005563466989140899713446995212616315957308063949107213939281883568134686997144779562530358224431984148645235710422374258636152322403298627150609390768876742212505608010886876335335600750452396781937097992313291536078364925961662948602452346698428871157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae23785d29ee2316beab8341f3c1579c25d6c4b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ara.gmw.nhs.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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