backup-panel.1and1.com

- 1&1 Internet Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:8f:ab:6c:60:1f:51:fd:0a:a6:0d:2d:1f:a1:d9:96 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 Internet Inc.

Organization: 1&1 Internet Inc.
State / Province: Pennsylvania
Locality: Chesterbrook
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:8f:ab:6c:60:1f:51:fd:0a:a6:0d:2d:1f:a1:d9:96
Serial Number (int): 7392115308127260514325709824939121046
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:24:3f:d6:c3:b9:50:bc:b1:a2:bb:bf:60:a6:02:79:bc:39:a3:94
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 47:34:af:33:75:5c:02:fb:25:e8:81:26:f0:5d:4e:d6:48:8e:f3:81
Fingerprint (sha256): 02:89:34:98:49:08:81:0a:0a:d8:ae:01:1e:a7:3d:10:36:f5:1a:78:77:98:39:d6:04:20:7c:06:93:f0:db:06

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate backup-panel.1and1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backup-panel.1and1.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backup-panel.1and1.com

Other certificates including the domain name 1and1.com

(limited to 100 certificates)
incapsula.com
winshus63.1and1.com
whstatic.1and1.com
kontakt.1und1.de
help.1and1.com
sslext.1and1.com
listlocal.1and1.com
www.1and1.com
postmaster-contact.1und1.de
mywebsitepersonal.1and1.com
mam-hipchat.1and1.com
winshus124.1and1.com
*.nltconfirm.1and1.com
help.1and1.com
mri.1and1.com
backup-panel.1and1.com
analytics.1and1.com
*.1and1.com
mike.1und1.de
winshus107.1and1.com
cloudpanel-feedback.1and1.com
contact.1and1.com
microshop.1and1.com
xadmin.exchange.1and1.us
passwort.ionos.de
mypersonal.1and1.com
domainconnect.1and1.com
smd-static.1and1.com
mybusiness.1and1.com
upselling.ionos.de
ias.1and1.com
pics.newslettertool.1and1.com
premium-feature.1and1.com
timsato.tool.1and1.com
*.1and1.com
dav.mailxchange.1and1.com
1.exchange.1and1.us
websiteanalysis.1and1.com
mbe.1and1.com
testing.rankingcoach.1und1.de
vacation.extranet.1and1.com
winshus131.1and1.com
location-marketing.1und1.de
domainconnect.1and1.com
nlt-qa.1and1.com
admins.domains-web.1and1.com
telesales-diy.1and1.com
winshus100.1and1.com
admins.domains-gmxnet.1and1.com
surveys.1and1.com
login.ionos.de
domrec-services.1and1.com
websitebuilder.1and1.com
winshus126.1and1.com
caas.1and1.com
onlinestorage.1and1.com
cloudpanel-api.1and1.com
sem-admin.1and1.com
mywebsitepersonal.1and1.com
ipc.help.1and1.com
winshus100.1and1.com
mailxchange.1and1.com
mybusiness.1and1.com
cantina.extranet.1and1.com
newsroom.1und1.de
order.1and1.com
m.help.1and1.com
loginapi.1and1.com
api-staging-caas.1and1.com
osfepre-us.1and1.com
analytics.1and1.com
ias-stats-services.1and1.com
1.exchange.1and1.us
timsato.xtool.1and1.com
serviceportal.1and1.com
api.1and1.com
community.1and1.com
digital-success.ionos.de
login.ionos.de
admins.domains-gmxnet.1and1.com
admins.domains-web.1and1.com
mailxchange.1and1.com
ohpcontrollerqa.1and1.com
onlinestorage-help.1and1.com
phpmyadmin.1and1.com
widgets-mw.1and1.com
smtp.1and1.com
widgets-mw.1and1.com
winshpus9.1and1.com
newsroom.1und1.de
winservicesus.1and1.com
newsroom.1und1.de
api.1and1.com
vacation.extranet.1and1.com
smtp.1and1.com
help.1and1.com
incapsula.com
admin.1and1.com
winshus115.1and1.com
contact.1and1.com

Certificate

The complete raw certificate details for backup-panel.1and1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIQBY+rbGAfUf0Kpg0tH6HZljANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEwMTYwMDAwMDBaFw0yMDEwMTUxMjAwMDBaMHgxCzAJBgNVBAYTAlVTMRUw
EwYDVQQIEwxQZW5uc3lsdmFuaWExFTATBgNVBAcTDENoZXN0ZXJicm9vazEaMBgG
A1UECgwRMSYxIEludGVybmV0IEluYy4xHzAdBgNVBAMTFmJhY2t1cC1wYW5lbC4x
YW5kMS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVQX2SJac
H9bV5bMj3NUKbAlgxOlWcfjK5zDWqfDMVk9S/psXgZdgDexs6CLnUSTmg5fx1pww
78sIZ+YPmnjALml80NgJVSRytAclNzgmMKFPHxXFtjXoSyBj966W9hF2tBjI77cm
1IPmCQvDEukdTlt1QvL7+kYTT/N5zudGe5e19QZ5JQT2mJW7BKFXKdpnaO+lE5PE
t93zZzYELckyNJqaxwzB55xQUj1jXFR0VfsFtAZO1zWrf0y8cL21S4KRfyJhROv1
W5YKe+zi7q4jjW96OGxMaAKerLziT0RhPwVkJZG3L0iRUj+pP9uJNL8/J1oqteq0
gzg8I4Vzt8jHAgMBAAGjggG7MIIBtzAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3y
o0MWOJ5sxTAdBgNVHQ4EFgQUgyQ/1sO5ULyxoru/YKYCebw5o5QwIQYDVR0RBBow
GIIWYmFja3VwLXBhbmVsLjFhbmQxLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6
Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAE
RTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUH
MAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRw
Oi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkG
A1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB
AEdfpb8WjxpY/ntXtaCmip+uRiQ5Xsrj2EqqPYYEHMZv4WqxqO/FhTT+aihuCN7O
WaXPdFR7Q58BoCWVRKjlqhIPwhCiCn+H3jjI0y+lUySvXj+X1i2tQi9RHYmKQ3a/
IIIkUp5NRpi0UkLGtQPdkhSA9ImFRFm0RWIadn85Q/PtNa9ZrKgNRH5flTpceW1M
02vqsNJfPw56cfZhAlvBl8B4b8DY1gTPyLOUZ3bK3z4q8ozTXPgvoCCJPW0/W8H0
xzmzFEIXgFrAup/O8Pwu3eXXgl/y2wc3rJ7ITYT8Qa0j3/KYYgs8Js5+WEXsBt9O
VBfjP3uksIaaCypME9qUDgU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFUF9kiWnB/W1eWzI9zV
CmwJYMTpVnH4yucw1qnwzFZPUv6bF4GXYA3sbOgi51Ek5oOX8dacMO/LCGfmD5p4
wC5pfNDYCVUkcrQHJTc4JjChTx8VxbY16EsgY/eulvYRdrQYyO+3JtSD5gkLwxLp
HU5bdULy+/pGE0/zec7nRnuXtfUGeSUE9piVuwShVynaZ2jvpROTxLfd82c2BC3J
MjSamscMweecUFI9Y1xUdFX7BbQGTtc1q39MvHC9tUuCkX8iYUTr9VuWCnvs4u6u
I41vejhsTGgCnqy84k9EYT8FZCWRty9IkVI/qT/biTS/PydaKrXqtIM4PCOFc7fI
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7392115308127260514325709824939121046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chesterbrook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Internet Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backup-panel.1and1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24784634319894887356802006242709294570473667148927658529365047505231209213563618771160893698433286191459142855923220750392195948435549112457980435829900291115046797957634380385885427878739771964451167140073891192343498218706713883701386707526540942736911260291293802180015190601001676217915080593826360214940437475581734991592205041893361993170570870708377658663978912225512537330394310861365699955865552905673698989534798673813458198609786114647532570967419149693922000034755762729044566918274402617163178335301454595378117744887172822585541937604387567794687785398687801165741334638515259176246227202812117845002439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83243fd6c3b950bcb1a2bbbf60a60279bc39a394
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup-panel.1and1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00475fa5bf168f1a58fe7b57b5a0a68a9fae4624395ecae3d84aaa3d86041cc66fe16ab1a8efc58534fe6a286e08dece59a5cf74547b439f01a0259544a8e5aa120fc210a20a7f87de38c8d32fa55324af5e3f97d62dad422f511d898a4376bf208224529e4d4698b45242c6b503dd921480f489854459b445621a767f3943f3ed35af59aca80d447e5f953a5c796d4cd36beab0d25f3f0e7a71f661025bc197c0786fc0d8d604cfc8b3946776cadf3e2af28cd35cf82fa020893d6d3f5bc1f4c739b3144217805ac0ba9fcef0fc2edde5d7825ff2db0737ac9ec84d84fc41ad23dff298620b3c26ce7e5845ec06df4e5417e33f7ba4b0869a0b2a4c13da940e05