join.thesun.co.uk

- News Group Newspapers Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:b1:7d:41:31:c1:28:1c:8d:0b:33:0e:7a:09:80:ce was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

News Group Newspapers Ltd

Organization: News Group Newspapers Ltd
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:b1:7d:41:31:c1:28:1c:8d:0b:33:0e:7a:09:80:ce
Serial Number (int): 15543084964024036563939666269393486030
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:40:9d:4f:7e:41:1c:f8:fe:5a:5a:fe:a2:0b:37:43:f6:85:3a:10
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 42:27:fb:8a:b8:9c:77:77:4d:65:03:c6:cf:7a:18:9e:1e:f2:6e:5f
Fingerprint (sha256): 06:76:84:de:5d:69:3c:07:71:12:82:49:76:d2:73:48:8f:05:ed:a6:df:9a:c2:a2:ac:8a:4e:90:97:84:77:40

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate join.thesun.co.uk

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for join.thesun.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

join.thesun.co.uk
join.uat-dreamteamfc.com
join.page3.com
join.staging-dreamteamfc.com
join.staging-thesun.ie
join.uat-thescottishsun.co.uk
join.staging-fabulousmag.co.uk
join.thesun.ie
join.staging-page3.com
join.dreamteamfc.com
join.thescottishsun.co.uk
join.staging-thescottishsun.co.uk
join.uat-fabulousmag.co.uk
join.fabulousmag.co.uk
join.staging-thesun.co.uk
join.uat-page3.com
join.uat-thesun.co.uk
join.uat-thesun.ie

Other certificates including the domain name thesun.co.uk

(limited to 100 certificates)
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
digital-newspaper.thesun.co.uk
iframe.thesun.co.uk
ir.tags.newscgp.com
pixelappcollector.thesun.co.uk
feeds.thesun.co.uk
superdays.thesun.co.uk
uc17.janrainengage.com
promos.thesun.co.uk
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
acs.newsint.co.uk
uc18.janrainengage.com
join.thesun.co.uk
digital-newspaper.thesun.co.uk
acs.newsint.co.uk
hvrhgt.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
promos.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
directory.thesun.co.uk
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
freepress.thesun.co.uk
www2.pugpig.com
promos.thesun.co.uk
racingpredictor.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
pac.thesun.co.uk
dartspredictor.thesun.co.uk
travelcomp.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
favourite.thesun.co.uk
cdn259.talksport.com
travelcompthanks.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
iframe.thesun.co.uk
www2.pugpig.com
favourite.thesun.co.uk
uc18.janrainengage.com
superdays.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
savers-beta.thesun.co.uk
uc18.janrainengage.com
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
freepress.thesun.co.uk
digital-newspaper.thesun.co.uk
link.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
uc17.janrainengage.com
dns-vetting1-jeffg-noah.map.fastly.net
acs.newsint.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
europeanpredictor.thesun.co.uk
savers-beta.thesun.co.uk
superdays.thesun.co.uk
www2.pugpig.com
jobs.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
jobs.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
comps.thesun.co.uk
cricketpredictor.thesun.co.uk
promos.thesun.co.uk
acs.newsint.co.uk
news-www.thesun.co.uk
www2.pugpig.com
account.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
uc17.janrainengage.com
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
directory.thesun.co.uk
superdays.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
travelcompthanks.thesun.co.uk

Certificate

The complete raw certificate details for join.thesun.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX6fPqcVkwje41+66/8t
uMF+Hs5hMf6ToJiufpf5a9zR24SM4G8jqMBosy2Gq8KeZhQPZqrjV2KQz3VSpt5Q
XJt8tQwi4LmPE6W+DGdVlQrxnqd9ZHNl0gilUjV1h/UPWp6AabaA+l4iSr3/UO+C
Qe/IH9t9z4Tx/Njzuzw30j1AFFV1CO8hQpVD/5lw/pWdK7wW83zXTqHeFuBs/eym
RFgTtQhZrUjcaU3WlFqsG2ecUvtUzyftRXlnHgbEWlM7TZZRldYeH79RaQv36QXC
MGhxJSmg8ZvcrqTVwmmq3rJrTJMzlTcHljEQlXmQk1F5JRJFZK9QKXRPnHOPRDZ3
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15543084964024036563939666269393486030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'News Group Newspapers Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'join.thesun.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22406619638884028064895556232236173186279899532064876149075606420316576013092562393248560027105816093952901173155401846160496544803060971742238228865235779677289696804591095299291081495881258571190904543387068542175552974407113808397922042789063815729752639009285366948825293709626577242260975864580388844189868226561129598078794976047321015249887912852962107448567219511441549862806319918464540514192925529780874058923936833561805323069258439066056754342608995953475149549607531639727531648943497330885936173034054780057314386865970944331630772373173974148526972068536224782778232076342059016676077991890025272735591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49409d4f7e411cf8fe5a5afea20b3743f6853a10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.uat-dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.page3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.staging-dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.staging-thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.uat-thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.staging-fabulousmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.staging-page3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.staging-thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.uat-fabulousmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.fabulousmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.staging-thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.uat-page3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.uat-thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.uat-thesun.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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