uat.distribution.amadeus.com

- Amadeus Data Processing GmbH -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:1c:8f:77:1d:f1:64:a0:6a:03:fd:96:63:98:af:6b was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amadeus Data Processing GmbH

Organization: Amadeus Data Processing GmbH
State / Province: Bavaria
Locality: Erding
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:1c:8f:77:1d:f1:64:a0:6a:03:fd:96:63:98:af:6b
Serial Number (int): 9452890104524939273365001005325397867
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 96:30:73:3b:f9:f9:73:6d:fa:53:00:0a:c3:c2:ec:f0:38:25:67:e4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f1:d6:53:52:29:fd:0d:5a:bd:37:f4:a5:d5:57:fe:6b:9f:6e:f5:28
Fingerprint (sha256): 04:4b:ed:af:75:42:69:2c:0f:c7:4b:b8:d3:f9:48:c3:3b:ab:4b:5f:6b:0f:6a:ad:f5:6d:da:fe:d2:e1:40:9a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate uat.distribution.amadeus.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.distribution.amadeus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.distribution.amadeus.com
acceptance.emea1.sellingplatformconnect.amadeus.com
uat.appstore.sellingplatformconnect.amadeus.com
acceptance.custom.sellingplatformconnect.amadeus.com
acceptance.emea2.sellingplatformconnect.amadeus.com
uat1.custom.sellingplatformconnect.amadeus.com
uat1.sellingplatformconnect.amadeus.com
acceptance.em1.sellingplatformconnect.amadeus.com
acceptance.sellingplatformconnect.amadeus.com

Other certificates including the domain name amadeus.com

(limited to 100 certificates)
acceptance.sellingplatform.amadeus.com
www.printmytrip.amadeus.com
api.ncl.amadeus.com
tc239.resdesktop.altea.amadeus.com
post-development.multimedia.testing.amadeus.com
prdsgw.acus.remotemanagement.amadeus.com
tc39.resdesktop.altea.amadeus.com
tc219.resdesktop.altea.amadeus.com
imperva.com
integrationmiddleware.amadeus.com
www.farexpert.amadeus.com
tc316.resdesktop.altea.amadeus.com
e-travelmanagement22.amadeus.com
revenue-optimisation-solutions.amadeus.com
wav.bibi.amadeus.com
www.farexpert.amadeus.com
tc221.resdesktop.altea.amadeus.com
5654672874405888-fe3.pantheonsite.io
pcm.eu2.amadeus.com

pdt.acus.amadeus.com
wav.bibi.amadeus.com
servicehub.amadeus.com
wav.dwm02.amadeus.com
imperva.com
ltoca.amadeus.com
pcm.ca.amadeus.com
uat.revenue-optimisation-solutions.amadeus.com
airtraffic.amadeus.com
EXTRANET.SAPTM.AMADEUS.COM
imperva.com
tc244.resdesktop.altea.amadeus.com
production.webservices.SAFI.amadeus.com
airlines.api.amadeus.com
tc310.resdesktop.altea.amadeus.com
mailhybrid.amadeus.net
tst.wtb.hotel.amadeus.com
5709436928655360-fe2.pantheonsite.io
airlineretailing.amadeus.com
tc120.resdesktop.altea.amadeus.com
tc0-praxis.intranet.uat-validation.resdesktop.altea.amadeus.com
mobil.sca.amadeus.com
www.test.attachment.amadeus.com
ie.data-exchange.amadeus.com
webplanning.admin.amadeus.com
tc313.intranet.resdesktop.altea.amadeus.com
tc112.intranet.resdesktop.altea.amadeus.com
docs.test.amadeus.com
imperva.com
wftc2-b2c.amadeus.com
5654672874405888-fe3.pantheonsite.io
acceptance.jcp.pointofsale-application.testing.amadeus.com
agencymanager.amadeus.com
uat.servicehub.amadeus.com
book.hx.amadeus.com
tst.wtb.hotel.amadeus.com
5654672874405888-fe3.pantheonsite.io
acceptance.custom.sellingplatformconnect.amadeus.com

wav.dwm02.amadeus.com
siteacceptance.travel-agency.amadeus.com
skilling.tc11.resdesktop.altea.amadeus.com
amadeus.com
startups.amadeus.com
docs.amadeus.com
tc212.resdesktop.altea.amadeus.com
intranet.uat1.resdesktop.altea.amadeus.com
uat.aetmww.amadeus.com
amadeusone.amadeus.com
tc15.resdesktop.altea.amadeus.com
sellservermodules.amadeus.com
internalopportunities.amadeus.com
advertising.media-solutions.ppt-saas.amadeus.com
airlines.api.amadeus.com
job.amadeus.com
qa.wcm.origin.amadeus.com
skilling.tc11.intranet.resdesktop.altea.amadeus.com
ppt.passenger-recovery.amadeus.com
oneviewcx.amadeus.com
smart-retailer.amadeus.com
acceptance.sellingplatformconnect.amadeus.com
servicehub.amadeus.com
uat3.resdesktop.altea.amadeus.com
tc230.resdesktop.altea.amadeus.com
dev.webservices.amadeus.com
detokenize.test.payment.amadeus.com
imperva.com
tc14.resdesktop.altea.amadeus.com
mobile-services.amadeus.com
uat.distribution.amadeus.com
billingservices.amadeus.com
www.security-service.amadeus.com
www.security-service.amadeus.com
relayt.amadeus.com
customers.amadeus.com
securityadmin.amadeus.com
tc242.resdesktop.altea.amadeus.com
tc310.resdesktop.altea.amadeus.com
learning-universe.amadeus.com
e-travelmanagement2.amadeus.com

Certificate

The complete raw certificate details for uat.distribution.amadeus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuzCCBaOgAwIBAgIQBxyPdx3xZKBqA/2WY5ivazANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODExMDkwMDAwMDBaFw0xOTA2MTExMjAwMDBaMH4xCzAJBgNVBAYTAkRFMRAw
DgYDVQQIEwdCYXZhcmlhMQ8wDQYDVQQHEwZFcmRpbmcxJTAjBgNVBAoTHEFtYWRl
dXMgRGF0YSBQcm9jZXNzaW5nIEdtYkgxJTAjBgNVBAMTHHVhdC5kaXN0cmlidXRp
b24uYW1hZGV1cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4
j2166+dIEu0UdQUsnL7r8+VjEttAcQs0npPOUfm02Z70OB6Gu2wXaUyu03XgtkVh
AXiwzg1IVMi+1e8TBpg2NFRE8RM1uTy8egqpuaB/hevNSE/5jM+lXQWTkDXntme9
k06IPLMo2ME+rFloLR4LtsN/bk4GkFbgXDqDGW96Ij8t65mK3OwIonztADk3Ts1B
KfC6ddiCJRhV5FfOOXw+oNv0l91sq3K4s5hpNCGv/2ZA5EPFaBBwZdms4MBlIBoo
gfCRaM9x4FbbRwJ4LUm2Z6Qx4hxFG08mTmeA7ZLGoZn0ohAwI9y7+IJpdyo6Xvpb
oOiNGIySdbvAwpsTaeZzAgMBAAGjggNTMIIDTzAfBgNVHSMEGDAWgBSQWP+wnHWo
UVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUljBzO/n5c236UwAKw8Ls8DglZ+QwggG3
BgNVHREEggGuMIIBqoIcdWF0LmRpc3RyaWJ1dGlvbi5hbWFkZXVzLmNvbYIzYWNj
ZXB0YW5jZS5lbWVhMS5zZWxsaW5ncGxhdGZvcm1jb25uZWN0LmFtYWRldXMuY29t
gi91YXQuYXBwc3RvcmUuc2VsbGluZ3BsYXRmb3JtY29ubmVjdC5hbWFkZXVzLmNv
bYI0YWNjZXB0YW5jZS5jdXN0b20uc2VsbGluZ3BsYXRmb3JtY29ubmVjdC5hbWFk
ZXVzLmNvbYIzYWNjZXB0YW5jZS5lbWVhMi5zZWxsaW5ncGxhdGZvcm1jb25uZWN0
LmFtYWRldXMuY29tgi51YXQxLmN1c3RvbS5zZWxsaW5ncGxhdGZvcm1jb25uZWN0
LmFtYWRldXMuY29tgid1YXQxLnNlbGxpbmdwbGF0Zm9ybWNvbm5lY3QuYW1hZGV1
cy5jb22CMWFjY2VwdGFuY2UuZW0xLnNlbGxpbmdwbGF0Zm9ybWNvbm5lY3QuYW1h
ZGV1cy5jb22CLWFjY2VwdGFuY2Uuc2VsbGluZ3BsYXRmb3JtY29ubmVjdC5hbWFk
ZXVzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29t
L0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAq
MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeB
DAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMu
Z2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVz
dC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHW
eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAEhf/3jjcIu3Ql4kK/xNaC9A
AMtzG+XCZFTZwNvdtrsOi0Ea/iITVu2GSvVlm2E3GEsHeJyOWPtxuMUeagSVfvEN
s5VcSEDVeL7on0QmdpMDI9wykqJTFQz0ycJzwikQrdiEgAJFVZHSfM/+GmKdYk4G
EPZ1goiQu0l2MqL+sSaeSajhz0tZg4zpAWNEPUm+NtlXxdXe29Hn77TeD+XZxSdb
LlVL8JdaSauDo2FpKz1BN6tDIc+FcBknjcclUKwMX+x8lBxwaqyu1Nmq52LnWkcF
y9PTVnOmjuLrzBY2QdcLPBBWp8yOsbPUGGNBbvTVnTeYhoQOkEayP4DZcW9Y+Sc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI9teuvnSBLtFHUFLJy+
6/PlYxLbQHELNJ6TzlH5tNme9DgehrtsF2lMrtN14LZFYQF4sM4NSFTIvtXvEwaY
NjRURPETNbk8vHoKqbmgf4XrzUhP+YzPpV0Fk5A157ZnvZNOiDyzKNjBPqxZaC0e
C7bDf25OBpBW4Fw6gxlveiI/LeuZitzsCKJ87QA5N07NQSnwunXYgiUYVeRXzjl8
PqDb9JfdbKtyuLOYaTQhr/9mQORDxWgQcGXZrODAZSAaKIHwkWjPceBW20cCeC1J
tmekMeIcRRtPJk5ngO2SxqGZ9KIQMCPcu/iCaXcqOl76W6DojRiMknW7wMKbE2nm
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9452890104524939273365001005325397867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erding'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amadeus Data Processing GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.distribution.amadeus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23298574927388339032292719769371248498041018066694660709489698556171183553883054744712034664663973558635763413639857417639561061512786522951586325577964641441200622515978639762205847582630347832523897180043196393197509670510455590642575703891908622315733433334448664838825003259773932045337945953703723658475667620127773807161953859484856903336173552496087273877244992012665842737434253772130788632289114444752680448535186202675002641984622503058909433584058505427060482969592463775616650076245059352705383296715638932608564277402753941633680533118516554308435522422183291735051273980465336314253698913162520601159283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9630733bf9f9736dfa53000ac3c2ecf0382567e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (430 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.distribution.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.emea1.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.appstore.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.custom.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.emea2.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.custom.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.em1.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.sellingplatformconnect.amadeus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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