acs.newsint.co.uk

- News UK and Ireland Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:ad:84:18:d2:ea:58:56:c7:6e:93:5a:25:6e:be:92 was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

News UK and Ireland Limited

Organization: News UK and Ireland Limited
Organization unit: PROD_ACS
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ad:84:18:d2:ea:58:56:c7:6e:93:5a:25:6e:be:92
Serial Number (int): 16851682550764255890734879873799470738
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:29:d1:01:f7:14:e6:80:f7:78:48:6a:b7:c7:36:6f:83:e9:1c:43
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 84:2a:37:f9:6b:cb:f6:cf:de:19:29:e9:c8:88:69:97:2b:f9:56:db
Fingerprint (sha256): 06:1e:4f:e2:f7:e6:8a:dd:04:a0:7d:a3:f9:1e:1d:2d:56:a1:f3:46:b7:87:8d:0e:f8:5a:cc:1e:91:ac:db:10

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate acs.newsint.co.uk

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acs.newsint.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acs.newsint.co.uk
pre-live-main.newsint.co.uk
login.dreamteamfc.com
login.thesundaytimes.co.uk
login.page3.com
login.thesun.co.uk
login.thescottishsun.co.uk
login.0x69416d.co.uk
login.thetimes.co.uk
capi.newsint.co.uk
login.the-sun.com
login.the-tls.co.uk
login.thesun.ie
login.timesmembership.com
api.news.co.uk
login.mytimesplus.co.uk
live-main.newsint.co.uk

Other certificates including the domain name newsint.co.uk

(limited to 100 certificates)
remote.newsint.co.uk
newserpqas.newsint.co.uk
pim.newsint.co.uk
feeds.newsint.co.uk
ref.newsint.co.uk
newseccqas.newsint.co.uk
acs.newsint.co.uk
acs.newsint.co.uk
wfh.newsint.co.uk
training-xchange.newsint.co.uk
*.dev.nukcdn.com
pvlomspac03-pim.newsint.co.uk
datafeeds.newsint.co.uk
*.newsint.co.uk
wfh.newsint.co.uk
acs-staging.newsint.co.uk
capi-dev.newsint.co.uk
mogel.dev.newsint.co.uk
*.dev.nukcdn.com
feeds.newsint.co.uk
newseccdev.newsint.co.uk
feeds.newsint.co.uk
*.dev.nukcdn.com
iam.wpng.newsint.co.uk
join.newsint.co.uk
newsint.co.uk
diy.newsint.co.uk
remote.newsint.co.uk
acs.newsint.co.uk
ref.newsint.co.uk
ref.newsint.co.uk
*.stag.nukcdn.com
acs-staging.newsint.co.uk
acs-staging.newsint.co.uk
newserpqasec.newsint.co.uk
join.newsint.co.uk
mogel.newsint.co.uk
feeds.newsint.co.uk
acs.newsint.co.uk
acs-staging.newsint.co.uk
newsportal.newsint.co.uk
newsecc.newsint.co.uk
*.dev.nukcdn.com
adfs1.auth.newsint.co.uk
newserpqasec.newsint.co.uk
*.dev.nukcdn.com
newserpqasec.newsint.co.uk
join.newsint.co.uk
www.newsint.co.uk
stg-chp.newsint.co.uk
www.advertising.newsint.co.uk
www.advertising.newsint.co.uk
remote.newsint.co.uk
newsportalqas.newsint.co.uk
tvlolxaise01.newsint.co.uk
join.newsint.co.uk
tvlolxaise02.newsint.co.uk
secure.newsint.co.uk
acs-staging.newsint.co.uk
chef-prod.newsint.co.uk
acs-staging.newsint.co.uk
*.newsint.co.uk
pim.newsint.co.uk
remote.newsint.co.uk
pvlolxpisn04.newsint.co.uk
*.dev.nukcdn.com
*.nukcdn.com
newserpdev.newsint.co.uk
pvlolxpisn06.newsint.co.uk
join.newsint.co.uk
crmso-staging.newsint.co.uk
*.dev.nukcdn.com
acs.newsint.co.uk
*.newsint.co.uk
ak-crmso-hotfix.se.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
newsportaldev.newsint.co.uk
newskey.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
acs.newsint.co.uk
afp.newsint.co.uk
newseccqas.newsint.co.uk
newserpqasec.newsint.co.uk
feeds.newsint.co.uk
newseccdev.newsint.co.uk
crmso.newsint.co.uk
ref.newsint.co.uk
mogel.dev.newsint.co.uk
acs.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
newserp.newsint.co.uk
acs.newsint.co.uk
chefauto-prod.newsint.co.uk
*.dev.nukcdn.com
join.newsint.co.uk
newserpdevec.newsint.co.uk

Certificate

The complete raw certificate details for acs.newsint.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m96pHlD1qrSOtJGM/lE
41b3APcm4GcbVqRUm9PQvQywS3KUoZahUcngVu5WpYi62MA4k9PRzJ3fxjN6Wlad
dizuaC0Zyc7Lcr0jWYf6CdWVQDvArGDsNM6MADYNNUnRy796z2iS9L5VBzcSuUd8
oxIHuFnky/DbnQSznJ6SVKebRyro6x7TPXmS6XsnvESmagXSUQgLuOeV4McMwOk+
YDtGvCUoL5ZXGwlhvxmT7u91xrrVI1QIe5x9Ko1VwC2+nLOTudaXzYwViSxJ7gfN
2DvhgmztBNKn9jSudkWmUorM8X9G1csf1TSK3Q8fmf5p6lXvrRlhDtG7NlCtwFGH
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16851682550764255890734879873799470738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'News UK and Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PROD_ACS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acs.newsint.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29594735741393066536244492007636256757970442207170921388432826597797985260190569976641308952378207180019103140241025766165887362931631780456943499092621569860757308342425530215287410706295438081190035216563813042959869485316383134902201418838983382446476090519199810044861827638750142315609241189136295696844358408167621617465483950381746217629756965770208983913251268331299059555953544744892237596214568996644797124167072508665691820325340155114457870875489914973316060658633859292340670306555195678051859015721592829669699692075232632698986454015865356669113602045396671563129685802616340701745904165024110178568007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4929d101f714e680f778486ab7c7366f83e91c43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acs.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-live-main.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesundaytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.page3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.0x69416d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capi.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.the-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.the-tls.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.timesmembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.news.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mytimesplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-main.newsint.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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