b40.hm-f.jp
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 06:8b:a7:fd:d1:eb:08:9c:c6:2b:28:07:89:c7:dd:4a was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=b40.hm-f.jp
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:8b:a7:fd:d1:eb:08:9c:c6:2b:28:07:89:c7:dd:4aSerial Number (int): 8700504510141267506800838440764562762
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 10:be:6b:e6:c7:83:60:f1:bc:0e:90:62:a6:06:f2:d8:46:5d:dc:b2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 3d:49:3e:5c:bc:ef:9e:e7:65:7a:6e:36:3b:a6:6c:96:be:67:90:ef
Fingerprint (sha256): 01:3f:26:f3:2c:6e:50:b4:39:25:88:dc:c4:34:67:c0:91:25:e3:8b:51:ed:b0:96:54:a7:de:ce:ff:15:bc:f0
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate b40.hm-f.jp
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for b40.hm-f.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
b40.hm-f.jp
Other certificates including the domain name hm-f.jp
(limited to 100 certificates)
a04.hm-f.jp
b40.hm-f.jp
a00.hm-f.jp
a06.hm-f.jp
a06.hm-f.jp
b27.hm-f.jp
b37.hm-f.jp
a10.hm-f.jp
b29.hm-f.jp
a00.hm-f.jp
a12.hm-f.jp
b49.hm-f.jp
dsk-mail.hm-f.jp
b65.hm-f.jp
b40.hm-f.jp
b46.hm-f.jp
b27.hm-f.jp
b11.hm-f.jp
b65.hm-f.jp
a01.hm-f.jp
b04.hm-f.jp
a02.hm-f.jp
b69.hm-f.jp
b08.hm-f.jp
a05.hm-f.jp
b07.hm-f.jp
cricojp.hm-f.jp
a09.hm-f.jp
a12.hm-f.jp
*.hm-f.jp
a03.hm-f.jp
b18.hm-f.jp
a02.hm-f.jp
b56.hm-f.jp
b10.hm-f.jp
a01.hm-f.jp
b51.hm-f.jp
b20.hm-f.jp
a05.hm-f.jp
b60.hm-f.jp
a07.hm-f.jp
b44.hm-f.jp
a00.hm-f.jp
a03.hm-f.jp
a11.hm-f.jp
a10.hm-f.jp
b12.hm-f.jp
b23.hm-f.jp
a02.hm-f.jp
a08.hm-f.jp
b60.hm-f.jp
b18.hm-f.jp
a10.hm-f.jp
nsw01.hm-f.jp
b01.hm-f.jp
a12.hm-f.jp
b33.hm-f.jp
a07.hm-f.jp
a05.hm-f.jp
b33.hm-f.jp
a04.hm-f.jp
a13.hm-f.jp
b17.hm-f.jp
b08.hm-f.jp
demo.hm-f.jp
a07.hm-f.jp
b34.hm-f.jp
a01.hm-f.jp
b68.hm-f.jp
a10.hm-f.jp
a04.hm-f.jp
b36.hm-f.jp
b72.hm-f.jp
b33.hm-f.jp
b45.hm-f.jp
b50.hm-f.jp
a01.hm-f.jp
b23.hm-f.jp
a10.hm-f.jp
b63.hm-f.jp
a00.hm-f.jp
b64.hm-f.jp
b28.hm-f.jp
b35.hm-f.jp
b23.hm-f.jp
b73.hm-f.jp
a01.hm-f.jp
b59.hm-f.jp
b25.hm-f.jp
a00.hm-f.jp
b07.hm-f.jp
b17.hm-f.jp
a09.hm-f.jp
b20.hm-f.jp
b08.hm-f.jp
b36.hm-f.jp
b74.hm-f.jp
nsw01.hm-f.jp
b31.hm-f.jp
a01.hm-f.jp
b40.hm-f.jp
a00.hm-f.jp
a06.hm-f.jp
a06.hm-f.jp
b27.hm-f.jp
b37.hm-f.jp
a10.hm-f.jp
b29.hm-f.jp
a00.hm-f.jp
a12.hm-f.jp
b49.hm-f.jp
dsk-mail.hm-f.jp
b65.hm-f.jp
b40.hm-f.jp
b46.hm-f.jp
b27.hm-f.jp
b11.hm-f.jp
b65.hm-f.jp
a01.hm-f.jp
b04.hm-f.jp
a02.hm-f.jp
b69.hm-f.jp
b08.hm-f.jp
a05.hm-f.jp
b07.hm-f.jp
cricojp.hm-f.jp
a09.hm-f.jp
a12.hm-f.jp
*.hm-f.jp
a03.hm-f.jp
b18.hm-f.jp
a02.hm-f.jp
b56.hm-f.jp
b10.hm-f.jp
a01.hm-f.jp
b51.hm-f.jp
b20.hm-f.jp
a05.hm-f.jp
b60.hm-f.jp
a07.hm-f.jp
b44.hm-f.jp
a00.hm-f.jp
a03.hm-f.jp
a11.hm-f.jp
a10.hm-f.jp
b12.hm-f.jp
b23.hm-f.jp
a02.hm-f.jp
a08.hm-f.jp
b60.hm-f.jp
b18.hm-f.jp
a10.hm-f.jp
nsw01.hm-f.jp
b01.hm-f.jp
a12.hm-f.jp
b33.hm-f.jp
a07.hm-f.jp
a05.hm-f.jp
b33.hm-f.jp
a04.hm-f.jp
a13.hm-f.jp
b17.hm-f.jp
b08.hm-f.jp
demo.hm-f.jp
a07.hm-f.jp
b34.hm-f.jp
a01.hm-f.jp
b68.hm-f.jp
a10.hm-f.jp
a04.hm-f.jp
b36.hm-f.jp
b72.hm-f.jp
b33.hm-f.jp
b45.hm-f.jp
b50.hm-f.jp
a01.hm-f.jp
b23.hm-f.jp
a10.hm-f.jp
b63.hm-f.jp
a00.hm-f.jp
b64.hm-f.jp
b28.hm-f.jp
b35.hm-f.jp
b23.hm-f.jp
b73.hm-f.jp
a01.hm-f.jp
b59.hm-f.jp
b25.hm-f.jp
a00.hm-f.jp
b07.hm-f.jp
b17.hm-f.jp
a09.hm-f.jp
b20.hm-f.jp
b08.hm-f.jp
b36.hm-f.jp
b74.hm-f.jp
nsw01.hm-f.jp
b31.hm-f.jp
a01.hm-f.jp
Certificate
The complete raw certificate details for b40.hm-f.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEsDCCA5igAwIBAgIQBoun/dHrCJzGKygHicfdSjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTAyMDgwMDAwMDBaFw0yMDA0MDgxMjAwMDBaMBYxFDASBgNVBAMTC2I0MC5o bS1mLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+YZqpbAPlO9 +sx1MUtQJ/dwrqPgZ+/CV5vpnHSpE4Gk4Ig3zpvCZx7oPXfGiHxUZwczLc27bhF0 HHEO1WUAFwuyZ61rn1ZgQNVl8OobthpFrosDB2zqzphONKr2vnuRKOikN7C1acRH 2b8+mLHCMmGGbSSh4rFGGTaugzBAZlRAXs50hOqGfJTqAO5igRcMJZUvEgXXZLFT wka4Q5hGTG2HzS/Q3eeAzCUr5xfOGUTovoH5DR6DVsYHN4YeNwfJp9gzWZqeU2jU wR1kl3X1rzgJuCkTf6Bh3BQpYGYGsZgJXZJcqKcD9fjAFkkvwxlQAgXUVKT4PE8x vRdvfDFTCQIDAQABo4IBsDCCAawwHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qND FjiebMUwHQYDVR0OBBYEFBC+a+bHg2DxvA6QYqYG8thGXdyyMBYGA1UdEQQPMA2C C2I0MC5obS1mLmpwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVz dC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9 bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw CAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0 YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdl b3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquvJFBrhuf0do9Oe /VfADSQZ8g6DfIq0JLmBA2tvIVMh/3ZjZiup9j7fPiB4Ozi2jZvMysc/FWmFBACL ZXop+CCfzx4EGNiGt85fDLwskIxdxZSBcJ5nnjDMnjzZJPXFt8CMfZXRsjfBi8DD QQB6RVgURHEmiJwy6aIUiW9S1TsZq3o6gSGM0DzaeLUY7BJMgDooS8GFnYpOOnn/ P6TsKBQDLVwzV/tlCro7kQXNajnqJxPxaSWVU7WVUGW9rKiCwpaCXgKKkoNCHmQM 00p3JdsYwErdET6q/yl+RfyJFnjc7/0Zd7iN5CSjiBF9ez5+YOKG1+rdKQnMJIxD M9dyRg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+YZqpbAPlO9+sx1MUtQ J/dwrqPgZ+/CV5vpnHSpE4Gk4Ig3zpvCZx7oPXfGiHxUZwczLc27bhF0HHEO1WUA FwuyZ61rn1ZgQNVl8OobthpFrosDB2zqzphONKr2vnuRKOikN7C1acRH2b8+mLHC MmGGbSSh4rFGGTaugzBAZlRAXs50hOqGfJTqAO5igRcMJZUvEgXXZLFTwka4Q5hG TG2HzS/Q3eeAzCUr5xfOGUTovoH5DR6DVsYHN4YeNwfJp9gzWZqeU2jUwR1kl3X1 rzgJuCkTf6Bh3BQpYGYGsZgJXZJcqKcD9fjAFkkvwxlQAgXUVKT4PE8xvRdvfDFT CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8700504510141267506800838440764562762 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b40.hm-f.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25234889355032365346319280548192785362445380985716901119152526317336424850799288563210850823564046960591185095583076155983691941273226161015403231101952835631953104458151924737048996063132270016365064897594890032467230210718062455813055861141091275505976844622716005751953536607310264966378184819028723506286511324699508768901680550950673656177123804428799993428040685085028028992402946671213992644711060857839453905393102586893119604136997929251487091251189729002612016451930256162487123627767466216685844336791508006677787767774861044408595325277208748114685588191314610211360082747116261740559465720140097368707849 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 10be6be6c78360f1bc0e9062a606f2d8465ddcb2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b40.hm-f.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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