merchantsignageap.visa.com
- Visa International Service Association -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 01:e1:6e:be:46:69:ef:7d:2d:a7:0c:54:e2:4e:54:78 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Visa International Service Association
Organization:
Visa International Service Association
State / Province:
California
Locality: Foster City
Country: US
Locality: Foster City
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:e1:6e:be:46:69:ef:7d:2d:a7:0c:54:e2:4e:54:78Serial Number (int): 2499740929154550336569663249856746616
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: c0:fc:41:54:0f:b0:0e:a0:7e:c5:29:46:70:3c:6e:47:52:3b:13:2c
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): c3:a3:7f:d1:ec:f9:aa:07:cb:27:57:05:f9:49:88:8f:05:79:47:0f
Fingerprint (sha256): 02:18:d2:33:2f:32:0b:d0:f4:f4:4b:af:df:1f:07:6e:88:0b:4e:ae:d6:6b:62:2d:83:c7:70:86:44:3b:04:cb
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate merchantsignageap.visa.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for merchantsignageap.visa.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
merchantsignageap.visa.com
www.merchantsignageap.visa.com
www.merchantsignageap.visa.com
Other certificates including the domain name visa.com
(limited to 100 certificates)
origin.icl.visa.com
myvisacard.stage.visa.com
reward.qa.paris.visa.com
SW730CPAPRODWEB00.visa.com
card.visa.com
intellilink.spendmanagement.visa.com
cert.tgs-credential-collection.visa.com
qa-mas.vpl.visa.com
www.bd.visa.com
baas.vbs.visa.com
sandbox.alias.visa.com
epm.lacbenefits.visa.com
pit.3dsecure.net
multinationalpremiumsolutions.visa.com
cte.mobileapp.apcemea.visa.com
GlobalCustomerAssistanceService.trusted.visa.com
ocsp.visa.com
qa.promotions.visa.com
hn.review.visa.com
qa.vis.informationmanagement.visa.com
resource.message.card.visa.com
international.visa.com
vis.tdp.visa.com
ag.review.visa.com
sni.cloudflaressl.com
gimt.cte.visaonline.com
sbx.purchasealerts.visa.com
global.review.visa.com
intellilink.spendmanagement.visa.com
qa02.rtm.visa.com
privacy.visa.com
mte.rtm.visa.com
viva.visa.com
o365auth.visa.com
globalpage.visa.com
sandbox.checkout.visa.com
api.intellilink.spendmanagement.visa.com
portal1i.visa.com
mssip.visa.com
xpollens.prod.paris.visa.com
impactlabtest.visa.com
smailexp.trusted.visa.com
merchantsignageap.visa.com
carddesigner.visa.com
bb.review.visa.com
sandbox.cloudpos.digital.visa.com
publicsearch.visa.com
mtf-mastercard-visatokenservicesout.visa.com
adfs.trusted.visa.com
cert.conferma.visa.com
merchantsignageglobal.visa.com
ai.review.visa.com
admin.dev.paris.visa.com
conferma.visa.com
africa.visa.com
ipservicescert.visa.com
alertsadm.visa.com
servicesgateway.visa.com
jm.review.visa.com
sni.cloudflaressl.com
design.visa.com
isa.sandbox.consumerapi.digital.visa.com
drp.visaonline.com
cemea.review.visa.com
vdnagateway.cte.visa.com
staging.mobileapp.apcemea.visa.com
travel.visa.com
*.corpdev.visa.com
qa.informationmanagement.visa.com
v3dstestsuite.3dsecure.net
www.africa.visa.com
barclays.qa.intellilink.visa.com
azuressomerrillProd.trusted.visa.com
www.myanmar.visa.com
ar.review.visa.com
sbx.notification-services.visa.com
globalclient.visa.com
members.visa.com
aacert.alias.visa.com
visa.com.br
www.bm.visa.com
hn.review.visa.com
canary.visa.com
federation.checkout.visa.com
assets.secure.checkout.visa.com
sw720mtgplc6.trusted.visa.com
verifiapitest.visa.com
ics2wstesta.ic3.com
myanmar.visa.com
staging.mepa.visa.com
merchantsignageglobal.visa.com
filexchange.visa.com
do.review.visa.com
loyalty.visa.com
qa02.rtm.visa.com
ics2wsa.ic3.com
cert.alias.visa.com
barclays.qa.intellilink.visa.com
www.visa.com
*.myvisacard.stage.visa.com
myvisacard.stage.visa.com
reward.qa.paris.visa.com
SW730CPAPRODWEB00.visa.com
card.visa.com
intellilink.spendmanagement.visa.com
cert.tgs-credential-collection.visa.com
qa-mas.vpl.visa.com
www.bd.visa.com
baas.vbs.visa.com
sandbox.alias.visa.com
epm.lacbenefits.visa.com
pit.3dsecure.net
multinationalpremiumsolutions.visa.com
cte.mobileapp.apcemea.visa.com
GlobalCustomerAssistanceService.trusted.visa.com
ocsp.visa.com
qa.promotions.visa.com
hn.review.visa.com
qa.vis.informationmanagement.visa.com
resource.message.card.visa.com
international.visa.com
vis.tdp.visa.com
ag.review.visa.com
sni.cloudflaressl.com
gimt.cte.visaonline.com
sbx.purchasealerts.visa.com
global.review.visa.com
intellilink.spendmanagement.visa.com
qa02.rtm.visa.com
privacy.visa.com
mte.rtm.visa.com
viva.visa.com
o365auth.visa.com
globalpage.visa.com
sandbox.checkout.visa.com
api.intellilink.spendmanagement.visa.com
portal1i.visa.com
mssip.visa.com
xpollens.prod.paris.visa.com
impactlabtest.visa.com
smailexp.trusted.visa.com
merchantsignageap.visa.com
carddesigner.visa.com
bb.review.visa.com
sandbox.cloudpos.digital.visa.com
publicsearch.visa.com
mtf-mastercard-visatokenservicesout.visa.com
adfs.trusted.visa.com
cert.conferma.visa.com
merchantsignageglobal.visa.com
ai.review.visa.com
admin.dev.paris.visa.com
conferma.visa.com
africa.visa.com
ipservicescert.visa.com
alertsadm.visa.com
servicesgateway.visa.com
jm.review.visa.com
sni.cloudflaressl.com
design.visa.com
isa.sandbox.consumerapi.digital.visa.com
drp.visaonline.com
cemea.review.visa.com
vdnagateway.cte.visa.com
staging.mobileapp.apcemea.visa.com
travel.visa.com
*.corpdev.visa.com
qa.informationmanagement.visa.com
v3dstestsuite.3dsecure.net
www.africa.visa.com
barclays.qa.intellilink.visa.com
azuressomerrillProd.trusted.visa.com
www.myanmar.visa.com
ar.review.visa.com
sbx.notification-services.visa.com
globalclient.visa.com
members.visa.com
aacert.alias.visa.com
visa.com.br
www.bm.visa.com
hn.review.visa.com
canary.visa.com
federation.checkout.visa.com
assets.secure.checkout.visa.com
sw720mtgplc6.trusted.visa.com
verifiapitest.visa.com
ics2wstesta.ic3.com
myanmar.visa.com
staging.mepa.visa.com
merchantsignageglobal.visa.com
filexchange.visa.com
do.review.visa.com
loyalty.visa.com
qa02.rtm.visa.com
ics2wsa.ic3.com
cert.alias.visa.com
barclays.qa.intellilink.visa.com
www.visa.com
*.myvisacard.stage.visa.com
Certificate
The complete raw certificate details for merchantsignageap.visa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGyTCCBbGgAwIBAgIQAeFuvkZp730tpwxU4k5UeDANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTE5MDYxMzAwMDAwMFoXDTIxMDYxMjEyMDAwMFowgY4xCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpDYWxpZm9ybmlhMRQwEgYDVQQHEwtGb3N0ZXIgQ2l0eTEvMC0G A1UEChMmVmlzYSBJbnRlcm5hdGlvbmFsIFNlcnZpY2UgQXNzb2NpYXRpb24xIzAh BgNVBAMTGm1lcmNoYW50c2lnbmFnZWFwLnZpc2EuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAyT3DNhUt/qTyxz4m6BumvT1PrAGSML2hkaLk6mTK 7cQJBBVKBloNCWKN49B8XomnD0cIgptbvBVRaSEWK4voDqpYC6Lqz/LgDO9+W1b2 3bRAjW3Yte82qAiuq1282eOITJfAWsS3yaTbZcGrlivHaoO6BcAOReoTyWRYD1nu 7N+qm2N/iXDKxHlv1DO8s8j+kgYpiDXpqLGaZm/M4j4u6gYUXD5fxUj2lS9hIox+ 1+/oo6NK/HA/69j76bvFnUDqzPcxNH6aUnefRWDN470Qoi7BYBcF70nC/pvJrxcw drUcTY6AVVgIVQHGsjMQ7x2jpi3OE+HVE1eNt57tKeDvcQIDAQABo4IDTjCCA0ow HwYDVR0jBBgwFoAUlE/UXYvkpOKmgP792PkA76O+AlcwHQYDVR0OBBYEFMD8QVQP sA6gfsUpRnA8bkdSOxMsMEUGA1UdEQQ+MDyCGm1lcmNoYW50c2lnbmFnZWFwLnZp c2EuY29tgh53d3cubWVyY2hhbnRzaWduYWdlYXAudmlzYS5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2 MDSgMqAwhi5odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNB RzEuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0 dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHYGCCsGAQUFBwEB BGowaDAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYI KwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRM U1JTQUNBRzEuY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB aAB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABa1H7KvEAAAQD AEcwRQIgfihSS7m2o4GHtPijL1OhKyyhgaoiIGUQPy0HY+JjOhQCIQC8Bh0uSLKn cdt1V2nPpFNS/KSXYBLi+4hHz4JWGAniPwB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2 /0q1YMG06v9eoIMPAAABa1H7KzwAAAQDAEcwRQIgdcGz/zGkSyr+Wq8+dZEiWx34 FFkIOHk18k1Gy2FNdQoCIQCr6eQo+KsU5qRllVpzPxpY2czGHGG2G8XPElU3Ejqv kQB2AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABa1H7KkUAAAQD AEcwRQIhAP/J/tY+QFy/aNRH624VlJmbMQqMhSgbHxL1KUpSFSDBAiB7ybmqNmgq 61REuwAJYNGpSLOLKl+16DOv8wgwnKKmvjANBgkqhkiG9w0BAQsFAAOCAQEAdiny sHb7i41IDhD+DfMFPXcW+7sqymlozxRhUm0MnhA6p0WC1k/77X/GfkSDQWT2wzf5 +s9tMsWVL/WMNBRcZ6WudSelFxMtdRYeUWKbg80ze48SBesciRV0Cae507vLmijU 1thtVUCyyTCj8fvSPPjX6BXbBTGbXYGG9m5lpZ3KzARm8rvOoFw2QuEIiTzgD0uF s0IUsLqRY09qdCqaX1BtosjSXDH5PGbOebNVKp+A4RP0CELpHcAAas8REYCX+yEs WbQ4EN8/PEfPBGCua0eJFAIxJcftsYHYeY4RaWToKOUooEKdq5rWMCSd+VH72KWf T5G3aGUOy92AOnY40A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT3DNhUt/qTyxz4m6Bum vT1PrAGSML2hkaLk6mTK7cQJBBVKBloNCWKN49B8XomnD0cIgptbvBVRaSEWK4vo DqpYC6Lqz/LgDO9+W1b23bRAjW3Yte82qAiuq1282eOITJfAWsS3yaTbZcGrlivH aoO6BcAOReoTyWRYD1nu7N+qm2N/iXDKxHlv1DO8s8j+kgYpiDXpqLGaZm/M4j4u 6gYUXD5fxUj2lS9hIox+1+/oo6NK/HA/69j76bvFnUDqzPcxNH6aUnefRWDN470Q oi7BYBcF70nC/pvJrxcwdrUcTY6AVVgIVQHGsjMQ7x2jpi3OE+HVE1eNt57tKeDv cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2499740929154550336569663249856746616 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Foster City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Visa International Service Association' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'merchantsignageap.visa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25404355543737597616453597529600889581071056801450551019097005339344502998085875112788826912824211470406163397827110356227695165817506489700143884715173061727247501132283726937083497801484128037620535222153227532612759272852123453921642815351094513937147802308752575238865817463355273794012183779518528565992621837596834091917321751961596473091926514724498299078058280171762266128453756622033131355422980230274718587232893251217767583719530242475020528154746544723325036440461624915093562886829954205225704990894350997078127379850258589326480307572249803600968614168478465531630067008194340999496536054380949399465841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c0fc41540fb00ea07ec52946703c6e47523b132c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchantsignageap.visa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merchantsignageap.visa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007629f2b076fb8b8d480e10fe0df3053d7716fbbb2aca6968cf1461526d0c9e103aa74582d64ffbed7fc67e44834164f6c337f9facf6d32c5952ff58c34145c67a5ae7527a517132d75161e51629b83cd337b8f1205eb1c89157409a7b9d3bbcb9a28d4d6d86d5540b2c930a3f1fbd23cf8d7e815db05319b5d8186f66e65a59dcacc0466f2bbcea05c3642e108893ce00f4b85b34214b0ba91634f6a742a9a5f506da2c8d25c31f93c66ce79b3552a9f80e113f40842e91dc0006acf11118097fb212c59b43810df3f3c47cf0460ae6b478914023125c7edb181d8798e116964e828e528a0429dab9ad630249df951fbd8a59f4f91b768650ecbdd803a7638d0