policybazaar.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 02:0a:9f:07:e0:ee:a1:95:c4:3e:d6:f7:a5:23:5b:fc was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=policybazaar.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:0a:9f:07:e0:ee:a1:95:c4:3e:d6:f7:a5:23:5b:fcSerial Number (int): 2713604487492427846299852224254401532
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: da:59:df:3f:00:6d:b9:7a:06:64:0d:1d:76:35:9b:b8:d2:27:c8:05
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 96:8e:fb:59:81:82:ae:3f:ac:f7:ce:25:02:7a:7e:bf:cc:e1:60:e6
Fingerprint (sha256): 07:42:3d:3e:5c:30:6a:e2:ff:34:c4:ac:d1:88:61:79:b2:98:95:10:56:9b:4c:ea:38:e1:f3:59:ba:5b:b3:22
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate policybazaar.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for policybazaar.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
policybazaar.com
www.policybazaar.com
www.policybazaar.com
Other certificates including the domain name policybazaar.com
(limited to 100 certificates)
d.d8u.com
app1.ftrans01.com
policybazaar.com
d.d8u.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
d.d8u.com
d.d8u.com
www.policybazaar.com
delivery.policybazaar.com
www.policybazaar.com
delivery.acuralabs.ai
d.d8u.com
app1.ftrans01.com
*.policybazaar.com
www.policybazaar.com
d.d8u.com
*.policybazaar.com
delivery.thehubpeople.com
delivery.acuralabs.ai
delivery.policybazaar.com
delivery.acuralabs.ai
www.policybazaar.com
www.policybazaar.com
terminsurance.policybazaar.com
delivery.acuralabs.ai
www.policybazaar.com
d.d8u.com
www.policybazaar.com
d.d8u.com
www.policybazaar.com
www.policybazaar.com
*.policybazaar.com
www.policybazaar.com
acc.policybazaar.com
app1.ftrans01.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
d.d8u.com
PB FINTECH LIMITED
d.d8u.com
www.policybazaar.com
www.policybazaar.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
www.policybazaar.com
acc.policybazaar.com
d.d8u.com
delivery.acuralabs.ai
delivery.thehubpeople.com
renewal.policybazaar.com
delivery.acuralabs.ai
*.policybazaar.com
acc.policybazaar.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
d.d8u.com
www.policybazaar.com
d.d8u.com
renewal.policybazaar.com
app1.ftrans01.com
delivery.acuralabs.ai
d.d8u.com
www.policybazaar.com
delivery.acuralabs.ai
PB FINTECH LIMITED
delivery.thehubpeople.com
www.policybazaar.com
d.d8u.com
d.d8u.com
d.d8u.com
delivery.acuralabs.ai
www.policybazaar.com
delivery.thehubpeople.com
delivery.acuralabs.ai
d.d8u.com
acc.policybazaar.com
d.d8u.com
app1.ftrans01.com
delivery.acuralabs.ai
delivery.thehubpeople.com
www.policybazaar.com
d.d8u.com
www.policybazaar.com
d.d8u.com
delivery.acuralabs.ai
d.d8u.com
delivery.acuralabs.ai
d.d8u.com
d.d8u.com
*.policybazaar.com
delivery.acuralabs.ai
app1.ftrans01.com
policybazaar.com
d.d8u.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
d.d8u.com
d.d8u.com
www.policybazaar.com
delivery.policybazaar.com
www.policybazaar.com
delivery.acuralabs.ai
d.d8u.com
app1.ftrans01.com
*.policybazaar.com
www.policybazaar.com
d.d8u.com
*.policybazaar.com
delivery.thehubpeople.com
delivery.acuralabs.ai
delivery.policybazaar.com
delivery.acuralabs.ai
www.policybazaar.com
www.policybazaar.com
terminsurance.policybazaar.com
delivery.acuralabs.ai
www.policybazaar.com
d.d8u.com
www.policybazaar.com
d.d8u.com
www.policybazaar.com
www.policybazaar.com
*.policybazaar.com
www.policybazaar.com
acc.policybazaar.com
app1.ftrans01.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
d.d8u.com
PB FINTECH LIMITED
d.d8u.com
www.policybazaar.com
www.policybazaar.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
www.policybazaar.com
acc.policybazaar.com
d.d8u.com
delivery.acuralabs.ai
delivery.thehubpeople.com
renewal.policybazaar.com
delivery.acuralabs.ai
*.policybazaar.com
acc.policybazaar.com
www.policybazaar.com
www.policybazaar.com
www.policybazaar.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
d.d8u.com
www.policybazaar.com
d.d8u.com
renewal.policybazaar.com
app1.ftrans01.com
delivery.acuralabs.ai
d.d8u.com
www.policybazaar.com
delivery.acuralabs.ai
PB FINTECH LIMITED
delivery.thehubpeople.com
www.policybazaar.com
d.d8u.com
d.d8u.com
d.d8u.com
delivery.acuralabs.ai
www.policybazaar.com
delivery.thehubpeople.com
delivery.acuralabs.ai
d.d8u.com
acc.policybazaar.com
d.d8u.com
app1.ftrans01.com
delivery.acuralabs.ai
delivery.thehubpeople.com
www.policybazaar.com
d.d8u.com
www.policybazaar.com
d.d8u.com
delivery.acuralabs.ai
d.d8u.com
delivery.acuralabs.ai
d.d8u.com
d.d8u.com
*.policybazaar.com
delivery.acuralabs.ai
Certificate
The complete raw certificate details for policybazaar.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIQAgqfB+DuoZXEPtb3pSNb/DANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTEyMTYwMDAwMDBaFw0yMDAxMTUxMjAwMDBaMBsxGTAXBgNVBAMTEHBvbGlj eWJhemFhci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOmIb wRV8S+Ah8ibL+Ovlumjlp9IBw6ZSG+b/ylGYblyk5J03h0RQv5Kvob2aTEwr9foM gRClKEZ7BTtgU32Z6H5vusWx/qv8UAInXv2FJJ39B0QdaSCPhl5i46oPugejsVGO W4eT86NT2OsKXDnTiP40EYcQxuEL9j894PMsJQcn3IhPQsomsoNEExXfQc1bbTHt Wn3ynaIZtbbmoWEDqRobZ9tLWS5McU28JCioa6+xTc8cQOpOoDp5Q2YUUWZJOmXa YSQVCeuiC2AifnsdPKq04eUWhy7lllbDvfOCBeFR5AoOC46ApYPYc91t3FqhL/xB BLVqh96MQTa0B769AgMBAAGjggHLMIIBxzAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3 se3yo0MWOJ5sxTAdBgNVHQ4EFgQU2lnfPwBtuXoGZA0ddjWbuNInyAUwMQYDVR0R BCowKIIQcG9saWN5YmF6YWFyLmNvbYIUd3d3LnBvbGljeWJhemFhci5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNV HR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJT QUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcC ARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYB BQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNv bTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1Ry dXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQC3jYk+RHOy0LjrQHzd1cbKKRNB8suH0K2EKTG6 RiLoI7CDt7Nt/22z/kuNjofuQ+tMfgQ1Nbk2Hwk3EU0/LCwoMepzYCBJQ3ZK1FQ0 brECzMJG4Y37w00EXD9som19uRBQKF1lgPqcmJDZtiSX3zJ4MyaX6eDxkjlsrqZS Zo/GnX087yPzfiibuhsbp6PY4h/zPGPVzqNykgyYkhBy8pX0K2DCsCtAz8Ly2DRL WuDbXRvN1MCVAOJLBi9bbg8RbtZu5Ie49eeAcuHEWf4vds8qKaB4QPq81jIJhOcL JNu1fcsjyIPdWcjwd2Qp3xfk1n0t9QjOGfHReKEmsCb82dZR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDpiG8EVfEvgIfImy/jr 5bpo5afSAcOmUhvm/8pRmG5cpOSdN4dEUL+Sr6G9mkxMK/X6DIEQpShGewU7YFN9 meh+b7rFsf6r/FACJ179hSSd/QdEHWkgj4ZeYuOqD7oHo7FRjluHk/OjU9jrClw5 04j+NBGHEMbhC/Y/PeDzLCUHJ9yIT0LKJrKDRBMV30HNW20x7Vp98p2iGbW25qFh A6kaG2fbS1kuTHFNvCQoqGuvsU3PHEDqTqA6eUNmFFFmSTpl2mEkFQnrogtgIn57 HTyqtOHlFocu5ZZWw73zggXhUeQKDguOgKWD2HPdbdxaoS/8QQS1aofejEE2tAe+ vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2713604487492427846299852224254401532 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'policybazaar.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22246731520708227192064801169291983766517086346076036853158643151665466001989045799703816511519213279775292898071053338112060014740857934358325121576182771510263335250410240126590043884459269240725009141554929733183823193939779868902332149235992039988657167655640491340629241721380699758494854571176422270742462383831090112134743436357847630368685596327246494342935770206711799772289920090211730522081199968835445260164449034873081333340915819412102223971481368016502853626171267382687503547985299473997093824806437620791143152102415415496029730963349970500990569518091787982415794547575464606370730012564549934759613 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) da59df3f006db97a06640d1d76359bb8d227c805 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policybazaar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policybazaar.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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