*.lge.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 05:3a:bf:27:b0:94:d1:0f:c7:33:39:dc:ed:d4:bf:96 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.lge.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:3a:bf:27:b0:94:d1:0f:c7:33:39:dc:ed:d4:bf:96Serial Number (int): 6951170281501504907843602295022731158
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 7c:f0:fc:91:03:1e:bf:a0:51:2f:33:8d:0b:88:20:f0:15:80:fe:fb
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 18:a7:bc:43:9b:11:79:8b:fc:5f:f3:56:e2:74:aa:8a:fe:76:e9:b1
Fingerprint (sha256): 02:61:9c:5f:32:3f:ff:4b:a7:8b:fd:dd:e1:fb:ab:7c:ff:a9:62:da:a5:54:18:ad:0d:2d:1a:ca:eb:60:fc:59
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.lge.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.lge.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.lge.com
lge.com
lge.com
Other certificates including the domain name lge.com
(limited to 100 certificates)
cams.lgpayqa.lge.com
aicsso.lge.com
epss.lge.com
gsfsplus-eu.lge.com
invoiceportal.lge.com
cicvpn.lge.com
lge.com
aicacs.lge.com
nmpis.lge.com
gcrc.lge.com
winwin.lge.com
vmi.lge.com
dm01.gdms.lge.com
nmpis.lge.com
rone-kic.lge.com
redmine.lgcom.lge.com
drmcp.lge.com
teleaic.lge.com
msis.lge.com
dm04.gdms.lge.com
pcms.lge.com
*.lge.com
liveplus.lge.com
*.lge.com
chatbotqa.lge.com
lgsync.lge.com
*.lge.com
vpc.lge.com
dm01.gdms.lge.com
ems.lge.com
*.lge.com
glopp.lge.com
lge.com
telepresence.lge.com
qhelp.lge.com
flaskdevlgetsacs.lge.com
vpn.lge.com
pcms.lge.com
etax.lge.com
learningnet.lge.com
gscs.lge.com
thinqpet.lge.com
www.lge.com
epss.lge.com
gsfs-eu.911.lge.com
www.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
*.lge.com
*.lge.com
gscs.lge.com
tms.eu.lge.com
moffice.lge.com
kmsso.lge.com
lmu.lge.com
sso.lge.com
es.lgcom.lge.com
imc.lge.com
*.lge.com
membership.lgpaytest.lge.com
caweb.lgpaytest.lge.com
gcuv2.lge.com
almmobile.lge.com
qhelp.lge.com
dm01.gdms.lge.com
g-crm.lge.com
ineo.lge.com
*.lge.com
ehealth.lge.com
*.lge.com
epss.lge.com
*.lge.com
vpn.lge.com
gsfsplus.lge.com
lgvmi.lge.com
lgpatent.lge.com
lspmv.lge.com
www.lgcomstg.lge.com
sign.lge.com
sdss.lge.com
oil.lge.com
smile.lge.com
cicvpn.lge.com
brand.lge.com
cnmas2.lge.com
gitlab.lgcom.lge.com
*.lge.com
*.lge.com
lgpatent.lge.com
fido.lgpay.lge.com
san-3-s13.tlsprovisioning.exacttarget.com
*.lge.com
smile.lge.com
glcp.lge.com
cloud.marketing.lge.com
gscs-america.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
caweb.lgpaytest.lge.com
vecs.lge.com
dm01.ksut.lge.com
newlss.lge.com
aicsso.lge.com
epss.lge.com
gsfsplus-eu.lge.com
invoiceportal.lge.com
cicvpn.lge.com
lge.com
aicacs.lge.com
nmpis.lge.com
gcrc.lge.com
winwin.lge.com
vmi.lge.com
dm01.gdms.lge.com
nmpis.lge.com
rone-kic.lge.com
redmine.lgcom.lge.com
drmcp.lge.com
teleaic.lge.com
msis.lge.com
dm04.gdms.lge.com
pcms.lge.com
*.lge.com
liveplus.lge.com
*.lge.com
chatbotqa.lge.com
lgsync.lge.com
*.lge.com
vpc.lge.com
dm01.gdms.lge.com
ems.lge.com
*.lge.com
glopp.lge.com
lge.com
telepresence.lge.com
qhelp.lge.com
flaskdevlgetsacs.lge.com
vpn.lge.com
pcms.lge.com
etax.lge.com
learningnet.lge.com
gscs.lge.com
thinqpet.lge.com
www.lge.com
epss.lge.com
gsfs-eu.911.lge.com
www.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
*.lge.com
*.lge.com
gscs.lge.com
tms.eu.lge.com
moffice.lge.com
kmsso.lge.com
lmu.lge.com
sso.lge.com
es.lgcom.lge.com
imc.lge.com
*.lge.com
membership.lgpaytest.lge.com
caweb.lgpaytest.lge.com
gcuv2.lge.com
almmobile.lge.com
qhelp.lge.com
dm01.gdms.lge.com
g-crm.lge.com
ineo.lge.com
*.lge.com
ehealth.lge.com
*.lge.com
epss.lge.com
*.lge.com
vpn.lge.com
gsfsplus.lge.com
lgvmi.lge.com
lgpatent.lge.com
lspmv.lge.com
www.lgcomstg.lge.com
sign.lge.com
sdss.lge.com
oil.lge.com
smile.lge.com
cicvpn.lge.com
brand.lge.com
cnmas2.lge.com
gitlab.lgcom.lge.com
*.lge.com
*.lge.com
lgpatent.lge.com
fido.lgpay.lge.com
san-3-s13.tlsprovisioning.exacttarget.com
*.lge.com
smile.lge.com
glcp.lge.com
cloud.marketing.lge.com
gscs-america.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
caweb.lgpaytest.lge.com
vecs.lge.com
dm01.ksut.lge.com
newlss.lge.com
Certificate
The complete raw certificate details for *.lge.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtTCCA52gAwIBAgIQBTq/J7CU0Q/HMznc7dS/ljANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA2MjgwMDAwMDBaFw0yMDA2MjcxMjAwMDBaMBQxEjAQBgNVBAMMCSoubGdl LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnPS4cek7N94nJ3 u54uOqA7b/C3Ninz+3k1AVF4n+3uFeKfGsvnB0rYfyshoHJaGSluthQi+mOmtSIA BJEu5Fq3OZk9lR2ibs+0Zd8GWaHtS41+BifurKU1nUa6gH/kEBR9AuOWTGiFEItk eOMpj7boaUJeircR9eoqfBz8BOWk/zA2yAzHYljJ6fs1sDIX8D48HSvm3agdsLxk 0AqKUwEs6fS6W4c7rDNlAU7qkbE2ABjkIh0RMNtZRR2PLSEakUEdYmH9PqwWU01+ IOPxjisWOj8QGNFQqPxo4FRsllhg6kRBGWQAAcwUBetxgR55VFmXmRUokJTlX90p r1heQO8CAwEAAaOCAbcwggGzMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4 nmzFMB0GA1UdDgQWBBR88PyRAx6/oFEvM40LiCDwFYD++zAdBgNVHREEFjAUggkq LmxnZS5jb22CB2xnZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdl b3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3Bglg hkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t L0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRw Oi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2Vy dHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRx2cyispk oe6bpmR2+P9AJ2akY4a8U8hhF5xGBATJg7IJbxq4OgYNRnAJrekxmlx1BJLpH3ZC 4rS8VMBG7C0Q+qrfoez6rLcqlQKn/lXhPom9NGi3VFvgbRTT8O4VjpJPIP9k9UU2 KR2mhk1DJvtOK3qFXXIxYLfQJtNIZjopsCyevebPR74PZtjGR4A2RKDs13kGzEK7 ek2Liuzq6u+RchpR4xE4lbedxc9VkDFWDnO5zupwD00GLgvAcKUJqo/rxzzwT6A+ CrolMMr/+w289E87MNco9K44PQ+zS35izAMEvxAQSA42ex0GJ5q7fx/oUjZxLZv2 6D5HpIRu56if -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc9Lhx6Ts33icne7ni46 oDtv8Lc2KfP7eTUBUXif7e4V4p8ay+cHSth/KyGgcloZKW62FCL6Y6a1IgAEkS7k Wrc5mT2VHaJuz7Rl3wZZoe1LjX4GJ+6spTWdRrqAf+QQFH0C45ZMaIUQi2R44ymP tuhpQl6KtxH16ip8HPwE5aT/MDbIDMdiWMnp+zWwMhfwPjwdK+bdqB2wvGTQCopT ASzp9LpbhzusM2UBTuqRsTYAGOQiHREw21lFHY8tIRqRQR1iYf0+rBZTTX4g4/GO KxY6PxAY0VCo/GjgVGyWWGDqREEZZAABzBQF63GBHnlUWZeZFSiQlOVf3SmvWF5A 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6951170281501504907843602295022731158 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-27 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lge.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23456307408093306640705714728616047019653710504834813987393361458176216318345119773626844845125152119431403832297737733489665692158345200050165161485050851521371199196586358670302440931382675038805071485797393519998489778221975502656081478536078511074246022739765741987931277961948877898234735360966262273353147129726780406208836374605732134784864813200717564010427267177769491880463924001188081940456573770798705543015310265805367596981957084528489730011454095413196924892793458189921845915217443285537072241224535906401590275938038951171144559121763268450062389581485264629413675798726953317703438439826396880453871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7cf0fc91031ebfa0512f338d0b8820f01580fefb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lge.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0091c767328aca64a1ee9ba66476f8ff402766a46386bc53c861179c460404c983b2096f1ab83a060d467009ade9319a5c750492e91f7642e2b4bc54c046ec2d10faaadfa1ecfaacb72a9502a7fe55e13e89bd3468b7545be06d14d3f0ee158e924f20ff64f54536291da6864d4326fb4e2b7a855d723160b7d026d348663a29b02c9ebde6cf47be0f66d8c647803644a0ecd77906cc42bb7a4d8b8aeceaeaef91721a51e3113895b79dc5cf559031560e73b9ceea700f4d062e0bc070a509aa8febc73cf04fa03e0aba2530cafffb0dbcf44f3b30d728f4ae383d0fb34b7e62cc0304bf1010480e367b1d06279abb7f1fe85236712d9bf6e83e47a4846ee7a89f