www.lefrecce.it

- FERROVIE DELLO STATO ITALIANE S.P.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:2c:2b:13:14:f9:f0:3e:d9:65:65:fd:43:62:7e:38 was issued on by DigiCert Inc.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FERROVIE DELLO STATO ITALIANE S.P.A.

Organization: FERROVIE DELLO STATO ITALIANE S.P.A.
State / Province: Lazio
Locality: Roma
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:2c:2b:13:14:f9:f0:3e:d9:65:65:fd:43:62:7e:38
Serial Number (int): 10863158683494761444566446671019540024
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:91:d9:18:0a:70:c1:6a:67:b8:6e:98:35:66:ca:21:d4:07:a1:e7
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): fb:4a:74:3a:8d:c1:e3:0a:5f:de:d8:4d:c2:91:c8:5e:26:18:f1:c6
Fingerprint (sha256): 03:aa:e7:6d:1f:08:92:76:d5:a4:1b:17:af:e9:fa:9e:8f:f8:91:e9:fe:9d:17:3b:0a:8f:3b:54:72:2c:16:48

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.lefrecce.it

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lefrecce.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.trenitaliatper.com
www.thello.fr
www.lefrecce.it
www-int.trenitaliatper.com
www-corr.trenitaliatper.com
www-cert.trenitaliatper.com
ticketsuat.c2c-online.co.uk
ticketsstaging.c2c-online.co.uk
ticketsbeta.c2c-online.co.uk
tickets.c2c-online.co.uk
thello.fr
portaleapi.lefrecce.it
portaleapi-certificazione.lefrecce.it
portaleapi-cert.lefrecce.it
olta.lefrecce.it
olta-certificazione.lefrecce.it
next.c2c.lefrecce.it
lefrecce.it
int.c2c.lefrecce.it
dev.c2c.lefrecce.it
corr.c2c.lefrecce.it
consumer-apimanagement.lefrecce.it
cert.c2c.lefrecce.it
c2c-online.co.uk
app.lefrecce.it
app-correttiva.lefrecce.it
app-certificazione.lefrecce.it
apimanagement.lefrecce.it
apimanagement-cert.lefrecce.it
api.trenitaliatper.com
api.lefrecce.it
api-int.trenitaliatper.com
api-corr.trenitaliatper.com
api-cert.trenitaliatper.com
api-cert.lefrecce.it
ams.c2c.lefrecce.it
agenzia.trenitalia.com
agenzia.cert.trenitalia.com

Other certificates including the domain name lefrecce.it

(limited to 100 certificates)
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it

Certificate

The complete raw certificate details for www.lefrecce.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6QRw5cE0cSLmZ/dkXfz
Ldqqt7v1qkPxgh+RgJewYHuDa00spZLI9a2EupKNiX49RPESVSIp2qXjQFGQpd9p
TUlVacBI5U2k5ANkNwVTE1r46fmB7NATm387EU0XoaTnMCq9K6HC4TnXnxF74ohp
13bKAGQO9MzOUmiOvp0jXZcV+Qxxvxx+dFzqvj2xAdVAZXHLLOVKGgZTz9+s/djw
LjMWKzN/D3V6EvFMb0zoKgxEVy3WYSrVHv/MWPPacmCWqjthKQp7AAlj76qHenMm
dt+aQ4SfKs6+C8VJXFB1mpgTSBxy8K4JsU/YX0asS7gohy36Zx/EMOGKWRrQcf+R
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10863158683494761444566446671019540024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lazio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FERROVIE DELLO STATO ITALIANE S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lefrecce.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22677562220880400763219317686694207204620949517439314188885141180494511163164444016046852839183213050635755710117027654431157126707702896409891908144139011318397755935923891944113387795830458660665346919820621624289494823909948462934717899800856599019960279568581257366939584564483064135952938502964239178191097131129043115635298060031082531461773787131260880748306227545045122519806057152994110752503366606747658681645262324079193649170832793004167500452941259916713546312309389921773410235904952116157839441607750632502908104242825055026547253000269001163479312798899407188752804851720357656939578953922247294685563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d891d9180a70c16a67b86e983566ca21d407a1e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsstaging.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thello.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaleapi-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olta.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olta-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corr.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumer-apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2c-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-correttiva.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-certificazione.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimanagement-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-int.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-corr.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.trenitaliatper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.c2c.lefrecce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.trenitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenzia.cert.trenitalia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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