TBS RSA Organization Validation Secure Server CA 3

Intermediate certificate used for the issuance of TBS X509 RSA server certificates as of August 2023. Chained with USERTrust RSA Certification Authority.

The CRL is available here:
http://crl.sectigo.com/TBSRSAOrganizationValidationSecureServerCA3.crl

It can be importing via this link:
http://www.tbs-x509.com/TBSRSAOrganizationValidationSecureServerCA3.crt

Or use the text version here under.

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ba:37:4b:20:e4:a6:ec:68:1b:c3:ab:46:d8:6d:d9:a4
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
        Validity
            Not Before: Aug  2 00:00:00 2023 GMT
            Not After : Aug  1 23:59:59 2033 GMT
        Subject: C = GB, O = TBS Internet Ltd, CN = TBS RSA Organization Validation Secure Server CA 3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (3072 bit)
                Modulus:
                    00:b1:69:98:10:0c:a3:05:ac:03:f2:54:44:d0:39:
                    d9:b8:2b:4a:83:ba:e9:63:f5:2b:e0:89:8d:b6:24:
                    92:4f:f8:07:fd:ce:9b:f6:e3:bd:9f:ff:33:22:2e:
                    c1:07:7a:f3:68:0f:f1:6a:62:90:b2:ac:b3:22:1e:
                    d6:10:8f:31:64:de:11:a0:a8:41:0f:9d:af:2a:7f:
                    a1:50:63:f3:a2:af:5b:65:ed:1b:e9:5c:02:51:c9:
                    c2:7c:87:78:77:5b:cf:7a:b9:7f:f9:a6:83:6a:62:
                    40:63:bd:4f:d2:b6:99:5d:3c:93:52:79:f3:c1:97:
                    b1:3c:34:b6:8e:9a:28:91:b6:72:25:20:12:8b:39:
                    6c:7a:79:4f:01:26:ea:2d:fe:cf:31:b0:b0:58:a4:
                    e2:83:7d:43:61:80:31:5e:ae:8a:d0:b5:fe:a0:34:
                    50:1b:08:42:8d:87:b6:b8:ca:91:21:57:52:df:8c:
                    aa:b6:97:0b:83:e3:3c:34:ce:9c:43:87:0d:e3:51:
                    69:79:dc:b5:58:1d:33:02:7c:66:72:cc:a4:44:2b:
                    52:a2:47:3d:99:ce:be:5a:4d:c4:3d:69:2f:14:04:
                    65:8d:09:19:79:36:ff:b0:98:32:10:3d:44:2b:2e:
                    1d:77:45:fe:9c:3c:a2:32:c6:89:1e:37:ba:8c:8e:
                    87:04:0d:73:01:0d:8d:6d:19:db:37:64:3e:85:0a:
                    e0:4b:f4:a2:0f:c7:52:c8:00:be:07:81:56:d5:25:
                    fc:83:ac:d7:99:4d:5b:c0:4b:e3:42:67:99:68:bc:
                    1b:ac:81:13:07:e8:6c:db:49:97:b2:39:d8:d1:71:
                    bf:9a:de:a7:be:c0:7b:6c:75:22:3e:5b:de:7e:1c:
                    7e:da:34:3f:ea:84:4d:9a:2d:7f:c3:df:a4:5b:c8:
                    2a:0d:3e:9f:53:54:c9:fd:14:0d:af:05:fc:ba:f2:
                    6f:45:0a:74:b9:05:2b:7e:46:f0:1d:08:b1:f7:b9:
                    e9:0f:3e:fa:4b:6b:1b:31:48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB

            X509v3 Subject Key Identifier: 
                80:93:5D:2A:CA:8D:D8:4A:CB:2A:AD:87:42:D8:C0:37:D9:61:20:15
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.109
                Policy: 2.23.140.1.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAAACA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha384WithRSAEncryption
         61:d7:96:60:ea:bc:e6:8c:f2:e4:56:4f:a1:4d:c4:e7:40:8a:
         76:de:52:70:d2:cd:01:b9:43:78:48:d5:04:88:04:90:5a:3e:
         eb:74:5e:b4:d4:21:04:8a:df:b1:c7:59:c7:7c:7e:63:73:f9:
         f3:76:78:f2:1b:c0:13:74:0b:b8:d0:6a:5f:7a:f4:84:c2:4c:
         ff:51:16:5d:d1:db:69:1a:6c:2c:48:b4:e6:41:db:41:af:48:
         9c:51:af:3b:72:21:5d:9e:49:aa:03:40:ab:ff:18:cf:f5:39:
         88:a4:f6:d3:f5:fd:3b:07:af:9b:79:8f:43:2e:b6:e1:3b:2a:
         2b:18:ab:74:b7:55:c5:7c:30:2a:f6:62:30:fc:e8:35:fc:b4:
         77:30:82:aa:dc:1c:d9:33:f1:e6:c3:35:80:88:9c:7e:77:98:
         d1:77:28:4d:d8:9c:f0:05:35:40:45:ce:92:32:db:21:bc:b0:
         04:09:05:59:0d:7c:c1:01:99:21:1e:b9:a0:97:51:77:cc:bb:
         19:6b:0c:cd:35:31:8c:49:b3:9b:f3:2f:bb:a2:55:ae:e4:68:
         58:04:d9:ea:69:ba:5c:7d:3e:19:bd:8e:84:bc:0f:69:2e:5d:
         c0:75:88:09:58:b7:72:8d:ad:8f:ec:4d:84:08:98:c5:94:f7:
         8e:55:9a:4f:7b:68:19:4b:94:32:ec:1c:ac:9b:5b:8e:8d:d5:
         f4:cf:38:a3:e5:5b:9b:04:66:5a:b5:63:6b:75:6c:40:ae:5d:
         86:ce:18:6f:b9:8f:9c:47:cf:aa:10:7d:d5:ef:17:61:be:89:
         3c:8f:4c:4b:24:34:38:32:de:b0:67:d2:85:1e:e6:74:3f:20:
         8e:25:25:e9:2c:47:06:33:d1:6f:50:fa:f9:f2:09:a0:dc:3e:
         f6:f3:96:34:02:8d:46:42:f9:e2:01:63:64:f1:83:6b:5f:cd:
         6d:15:62:b3:2d:e6:04:4f:dc:7f:86:e4:58:e4:ae:2d:16:86:
         b3:1f:6f:d3:7f:60:80:87:5b:0c:dc:93:58:8a:bc:35:78:59:
         09:b8:be:bc:58:62:cb:4a:2b:62:7e:a0:17:d8:ef:89:21:72:
         37:34:05:9c:06:94:b9:d6:b9:f3:77:7c:87:59:2c:e7:d7:3d:
         65:80:9c:77:86:35:3c:ed:0a:b1:a3:37:fc:05:05:5c:04:08:
         58:ea:f3:a9:88:07:08:a5:f5:00:1e:8c:5c:16:bb:a0:29:31:
         34:b3:36:84:0d:f8:11:75:de:b1:1a:bd:b2:ed:04:60:7f:97:
         0e:9f:38:e0:7c:d8:73:8d:d4:db:4b:26:ab:ce:3d:72:db:f6:
         22:4c:1e:cd:0f:cd:10:25