turnmetrics-dp.ual.com

- United Airlines Inc -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:82:fd:69:69:7a:9c:b3:fe:92:a4:60:7e:4d:c6:5f was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United Airlines Inc

Organization: United Airlines Inc
Organization unit: Technology
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:82:fd:69:69:7a:9c:b3:fe:92:a4:60:7e:4d:c6:5f
Serial Number (int): 13972418350689629181836379902947739231
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:f2:38:7a:aa:df:34:49:42:e8:2d:96:1d:ec:77:f3:0b:97:23:6f
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 47:34:28:62:f4:78:fe:de:fb:e3:39:42:e9:8b:bc:90:28:6c:6a:11
Fingerprint (sha256): 06:8e:8c:e9:5e:45:0b:84:d5:f0:4c:41:47:26:34:c0:bf:25:52:45:7f:6f:1d:32:8d:25:f4:e8:ba:2a:fa:86

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate turnmetrics-dp.ual.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turnmetrics-dp.ual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turnmetrics-dp.ual.com
turnmetrics-dpauth.ual.com
turnmetrics-dpapi.ual.com

Other certificates including the domain name ual.com

(limited to 100 certificates)
ndccorpdpsvcauth-qa.ual.com
?.ual.com
artifactory.ual.com
usourceqa.ual.com
pilotrecords.ual.com
smtptul.ual.com
sndcapiauth.ual.com
ctmp.ual.com
unitedservices.ual.com
eserviceaerobeta.ual.com
stage.css.ual.com
unitedcargobilling.ual.com
customerwebcid.ual.com
svcgw.qa.aws.united.com
owp.iotqa.ual.com
*.ual.com
aasp-dp-qa.ual.com
cateringportalstage.ual.com
logbook-stg.ual.com
unitedtax.ual.com
ANDCDCXSACSPRI01.ual.com
unitedaccountinquiry.ual.com
resctx.ual.com
collabapiauth.ual.com
unitedclubaims-authsvc.ual.com
rfp.ual.com
vpninp.ual.com
HotelHub.ual.com
Cargo360.ual.com
ndccorpdpsvcauth.ual.com
ebso.ual.com
skyviewtng.stg.cvu.aws.ual.com
insight-mobile.ual.com
ccs-stage.ual.com
ivr-qa.ual.com
lyncdiscover.united.com
*.ual.com
gstarmac.ual.com
iom2-odev.ual.com
ucbadm.preprod.ual.com
stagendc.css.ual.com
prendcapiauth.ual.com
esftpcd.ual.com
cargoivr-sdp.auth.ual.com
mobileres.ual.com
vopcwlf5d3.opc.ual.com
apiportal-qa.ual.com
vpn3.ual.com
owp.msg.ual.com
cargoivr-pdp.auth.ual.com
K2.ual.com
xml.united.com
ustlsttpm001.ual.com
atw.prod.aws.ual.com
ocpmaster.cslaws-nonprod.ual.com
uatpadmin.ual.com
eservicetest.united.com
solace.stg.duz.aws.ual.com
geofence-api-dev.uia.ual.com
mail.ual.com
unitedperksplus.united.com
cargoivr-sdp.auth.ual.com
gndcqadpxdmz01m01.ual.com
svcgw.prd.aws.united.com
agentui2dev.ual.com
unitedservicestools.ual.com
owp.msg.ual.com
turnmetrics-dp.ual.com
wysectx.ual.com
esftwtc.ual.com
usourceqa.ual.com
airporthubops-qa-authsvc.ual.com
vpninp.ual.com
api-qa.united.com
unitedservices.ual.com
techopsservices-gateway.ual.com
vawsstgdpnvaza1m01.ual.com
cargo-iot.dev.ual.com
ccsplus-stg.ual.com
itspeech.ual.com
pinetdpweb.ual.com
ndc-prdfe-ejabberd-f5.ual.com
api.prd.aws.united.com
proderp.ual.com
mdm.ual.com
sndceapiauth1.ual.com
PUALAPISVC2.UAL.COM
pars.ual.com
vawssdpnvaza1m01.ual.com
dp-mobile.ual.com
ebt.dev.ual.com
?.ual.com
*.ual.com
ghpages.ual.com
curbside-dp.ual.com
prodqm.global.ual.com
raven-ext.pdpgw.ual.com
*.ual.com
vpn2.ual.com
svcgw.dev.aws.united.com

Certificate

The complete raw certificate details for turnmetrics-dp.ual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIQCoL9aWl6nLP+kqRgfk3GXzANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTE5MDIxMzAwMDAwMFoXDTIxMDIxMjEyMDAwMFowgYYxCzAJBgNVBAYTAlVT
MREwDwYDVQQIEwhJbGxpbm9pczEQMA4GA1UEBxMHQ2hpY2FnbzEcMBoGA1UEChMT
VW5pdGVkIEFpcmxpbmVzIEluYzETMBEGA1UECxMKVGVjaG5vbG9neTEfMB0GA1UE
AxMWdHVybm1ldHJpY3MtZHAudWFsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3Kw+zUaTzY8Cb5/dXgBoJMFnKKnauoczxzAaRT11j3Z3ayGLaJ
8EjwJCcXAGQ1lMIcyK3Z7yyMBQlyj8+Khsy6BUx9Niuw8BaC7gBcGBHdISSVMaq7
NM4ahtAgD7zZ+rKSl9IqKneEnkevuGQFWWha2xghOwBCqG7PRn7JCIYF/n2TDTtg
vesMwPIpeFaCXdu8RhGh0rgMzaZOhROg0ZjVXg26W84q2dC6RVPdjKQlxX8mnb2t
cStCYr0UB1LSYUVXg/r1Pgc0ePFtkiN9QRpcihaJnklxnIqF97NFceQYnfl9yUrl
6R5qMGjXL2qfIxmvf768rQTgNtrxM8KY2U8CAwEAAaOCAfQwggHwMB8GA1UdIwQY
MBaAFJRP1F2L5KTipoD+/dj5AO+jvgJXMB0GA1UdDgQWBBQH8jh6qt80SULoLZYd
7HfzC5cjbzBYBgNVHREEUTBPghZ0dXJubWV0cmljcy1kcC51YWwuY29tghp0dXJu
bWV0cmljcy1kcGF1dGgudWFsLmNvbYIZdHVybm1ldHJpY3MtZHBhcGkudWFsLmNv
bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1Ry
dXN0VExTUlNBQ0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr
BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw
dgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3Ry
dXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29t
L0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWt15/mQK/Kj67J9IFLIeNR+o+BF
F9PMila3lxJQkym3zpjWI34gCz37+dSJa44siopagdAIX+e4stcvyG2nKpzNcvK0
/Xj7vqQBr/GtS1R4T7CV7Q3+7CDhK1ONX4vp4lIUDoP3a7Z5KgwCrEFw/LBcaXfW
6WbPJ1JDghTrDx//n09GFhGXxJw3a3vbZwKg/TCBC1Q+PgAaOS0ePEj7KLKAlhZB
5ohI1he+r4WbqCR4SI9l4wqDzV7ZjGv2q7SjTAV6elNwSSiolF0+5L+Ao1Rfge3t
+auabICMXZs95XKBld8GUT9DLLoDoLJPIIrd+tkMVKB5UgeyvsazfptNHg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcrD7NRpPNjwJvn91eAG
gkwWcoqdq6hzPHMBpFPXWPdndrIYtonwSPAkJxcAZDWUwhzIrdnvLIwFCXKPz4qG
zLoFTH02K7DwFoLuAFwYEd0hJJUxqrs0zhqG0CAPvNn6spKX0ioqd4SeR6+4ZAVZ
aFrbGCE7AEKobs9GfskIhgX+fZMNO2C96wzA8il4VoJd27xGEaHSuAzNpk6FE6DR
mNVeDbpbzirZ0LpFU92MpCXFfyadva1xK0JivRQHUtJhRVeD+vU+BzR48W2SI31B
GlyKFomeSXGcioX3s0Vx5Bid+X3JSuXpHmowaNcvap8jGa9/vrytBOA22vEzwpjZ
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13972418350689629181836379902947739231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'turnmetrics-dp.ual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23959026950611539908848029876738733165204543086150894573416013187538241924678163422282759062046087889493496744659874308333039284904246819419476309705298222714276651358301432900807802270537056904851406476380795754254517544181366142378997204762352837596729344314654459213869301287698058856051036836563426831310831178406871147947578412070332574547656918724586390531917509458010711204501893347558155161354103953161665401268786420623419632172217809505240829839017186281040451050641588251117232236681074820345495681897283061641572543782635656612995188143456972619488189551235685739275872812597513179284236880412902377969999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07f2387aaadf344942e82d961dec77f30b97236f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnmetrics-dp.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnmetrics-dpauth.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnmetrics-dpapi.ual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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