www.site.nu
Issued by Trust Provider B.V. DV SSL CA - G2
About this certificate
This digital certificate with serial number 36:d6:f9:d0:76:9f:47:0f:66:c7:6c:53:c5:34:04:b4 was issued on by Trust Provider B.V..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.site.nu
Trust Provider B.V.
Organization:
Trust Provider B.V.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 36:d6:f9:d0:76:9f:47:0f:66:c7:6c:53:c5:34:04:b4Serial Number (int): 72894530136272808418593786010340164788
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d8:da:ef:d8:e0:ac:71:71:02:de:e6:62:fa:cf:fc:40:3b:fb:a0:52
Fingerprint (sha1): 4e:24:8f:4f:81:80:d5:39:14:29:bb:59:b4:d5:8b:85:85:6d:74:55
Fingerprint (sha256): 07:b8:89:c2:78:13:68:01:82:01:ef:a7:df:17:71:f1:97:5d:c4:b3:d7:d9:bd:55:aa:ae:5b:82:3c:8c:f2:2b
Issuing Certificate URL: http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt
Revocation information
OCSP Server: http://trustprovider-ocsp.digitalcertvalidation.comCRL Distribution Point: http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl
Check the revocation status for certificate www.site.nu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.site.nu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.site.nu
site.nu
site.nu
Other certificates including the domain name site.nu
(limited to 100 certificates)
eos.pro.site.nu
mail.site.nu
www.site.nu
meet.site.nu
swf.dev.site.nu
www.site.nu
app.comm2me.com
www.norso.app
swechchha.in
yarb.iolace.com
verkeer.dev.site.nu
mail.site.nu
site.nu
site.nu
joshuahemmings.ch
www.ymurugby.com
www.todalacomida.app
verkeer.dev.site.nu
www.torrentseeker.tk
cmsfriesland.dev.site.nu
verkeer.dev.site.nu
pro.site.nu
site.nu
boutiqueincrivel.com
download.site.nu
crv.myet.com
meet.site.nu
site.nu
aceada.dev.site.nu
verkeer.dev.site.nu
yarb.iolace.com
site.nu
vm.dev.site.nu
verkeer.dev.site.nu
d1.site.nu
verkeer.dev.site.nu
pro.site.nu
startdock.dev.site.nu
dev.images.hilizzy.com
gemeente.dev.site.nu
www.site.nu
ace-ada.dev.site.nu
demo.icenow.net
sitenu.pro.site.nu
crv.myet.com
startdock.dev.site.nu
mail.site.nu
swechchha.in
site.nu
crewchiefga.com
swf.dev.site.nu
meet.site.nu
s1.site.nu
gemeente.dev.site.nu
wijn.dev.site.nu
ace-ada.dev.site.nu
ace-ada.dev.site.nu
ace-ada.dev.site.nu
www.todalacomida.app
pro.site.nu
ace-ada.dev.site.nu
www.parked.buzz
startdock.dev.site.nu
startdock.dev.site.nu
www.codecenter.ro
www.parked.buzz
www.site.nu
site.nu
app.comm2me.com
mail.site.nu
site.nu
meet.site.nu
www.torrentseeker.tk
www.codecenter.ro
cmsfriesland.dev.site.nu
swf.dev.site.nu
site.nu
dev.site.nu
site.nu
site.nu
site.nu
download.site.nu
pro.site.nu
site.nu
worknesty.com
site.nu
www.terron.me
agenda.site.nu
getawayparty.com
meet.site.nu
site.nu
ace-ada.dev.site.nu
rodrigo.dev.site.nu
pro.site.nu
dev.images.hilizzy.com
site.nu
s1.site.nu
verkeer.dev.site.nu
getawayparty.com
meinnovations.in
mail.site.nu
www.site.nu
meet.site.nu
swf.dev.site.nu
www.site.nu
app.comm2me.com
www.norso.app
swechchha.in
yarb.iolace.com
verkeer.dev.site.nu
mail.site.nu
site.nu
site.nu
joshuahemmings.ch
www.ymurugby.com
www.todalacomida.app
verkeer.dev.site.nu
www.torrentseeker.tk
cmsfriesland.dev.site.nu
verkeer.dev.site.nu
pro.site.nu
site.nu
boutiqueincrivel.com
download.site.nu
crv.myet.com
meet.site.nu
site.nu
aceada.dev.site.nu
verkeer.dev.site.nu
yarb.iolace.com
site.nu
vm.dev.site.nu
verkeer.dev.site.nu
d1.site.nu
verkeer.dev.site.nu
pro.site.nu
startdock.dev.site.nu
dev.images.hilizzy.com
gemeente.dev.site.nu
www.site.nu
ace-ada.dev.site.nu
demo.icenow.net
sitenu.pro.site.nu
crv.myet.com
startdock.dev.site.nu
mail.site.nu
swechchha.in
site.nu
crewchiefga.com
swf.dev.site.nu
meet.site.nu
s1.site.nu
gemeente.dev.site.nu
wijn.dev.site.nu
ace-ada.dev.site.nu
ace-ada.dev.site.nu
ace-ada.dev.site.nu
www.todalacomida.app
pro.site.nu
ace-ada.dev.site.nu
www.parked.buzz
startdock.dev.site.nu
startdock.dev.site.nu
www.codecenter.ro
www.parked.buzz
www.site.nu
site.nu
app.comm2me.com
mail.site.nu
site.nu
meet.site.nu
www.torrentseeker.tk
www.codecenter.ro
cmsfriesland.dev.site.nu
swf.dev.site.nu
site.nu
dev.site.nu
site.nu
site.nu
site.nu
download.site.nu
pro.site.nu
site.nu
worknesty.com
site.nu
www.terron.me
agenda.site.nu
getawayparty.com
meet.site.nu
site.nu
ace-ada.dev.site.nu
rodrigo.dev.site.nu
pro.site.nu
dev.images.hilizzy.com
site.nu
s1.site.nu
verkeer.dev.site.nu
getawayparty.com
meinnovations.in
Certificate
The complete raw certificate details for www.site.nu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIQNtb50HafRw9mx2xTxTQEtDANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJOTDEcMBoGA1UEChMTVHJ1c3QgUHJvdmlkZXIgQi5WLjEdMBsG A1UECxMURG9tYWluIFZhbGlkYXRlZCBTU0wxKzApBgNVBAMTIlRydXN0IFByb3Zp ZGVyIEIuVi4gRFYgU1NMIENBIC0gRzIwHhcNMTcwMjA2MDAwMDAwWhcNMTgwMjA2 MjM1OTU5WjAWMRQwEgYDVQQDDAt3d3cuc2l0ZS5udTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAPcmgz0AqyMT4AtlrYnEuvSlLWorJVr0sX0w7OzDu1jX 2JPvgomD/sV17pgBtxn81fi2R9/+4sqIriz/GoKs5ri8HV6bTwuJLHqmwFxXirgv W/fAwxHBOrQp1RZC5QQRinNuzNY1olBDu6fb2vm0o6oxG+HM/o03aw5gqin48KmU TQtsurBIQJYciYX9dhztRbd711i2t9RDgDuetMcRs+1Yl3SxroZZV816XASqGc9C 3ROEdrSy+CK4X2JpxDu9ultBvq0ckuE4pT4przgzJUAWMGYt5e7gPquKznzkqNpA 9NKiu+xlUckd9in9vcg/MhuJKFVQyyn4DIbUjOV1l5S1aXUoa1jGmjYm0+zmxLlq +ElT8JkHkzPqSa5OYIELbV724Obtv3Pqp1NfHf9SB0YhWcENLh4/l6guNgDAyEmw OIhG5oaPQPkuDFUocmn+Lrs360DIzSkw4sQpAPcgWI23424ZPz3D72jD7wxNKx9E EDQILEGT+ykXKdwkJWjlhCiQU6SqC4OvLD32Nly7k7j9hwZSks03EYXZNbkyC97Q ZUpUFkiSK/wNXG8OFi2sQ4z1lmI+CbhRD5FBIGkz1n3LVw6k7NMuKVPPlUW/fjH1 /f4kDOVeEMN8HiocPmTSOJ7WE0zPF5TM6SnSNWB2+yo1JTLn/a7aU3EQJCod6qO9 AgMBAAGjggMpMIIDJTAfBgNVHREEGDAWggt3d3cuc2l0ZS5udYIHc2l0ZS5udTAJ BgNVHRMEAjAAMFcGA1UdHwRQME4wTKBKoEiGRmh0dHA6Ly90cnVzdHByb3ZpZGVy LWNybC5kaWdpdGFsY2VydHZhbGlkYXRpb24uY29tL3RydXN0cHJvdmlkZXJnMi5j cmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQIBMIGEMD8GCCsGAQUFBwIBFjNodHRw czovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWww QQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl cy9yZXBvc2l0b3J5L2xlZ2FsMB8GA1UdIwQYMBaAFNja79jgrHFxAt7mYvrP/EA7 +6BSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwgaUGCCsGAQUFBwEBBIGYMIGVMD8GCCsGAQUFBzABhjNodHRwOi8vdHJ1c3Rw cm92aWRlci1vY3NwLmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5jb20wUgYIKwYBBQUH MAKGRmh0dHA6Ly90cnVzdHByb3ZpZGVyLWFpYS5kaWdpdGFsY2VydHZhbGlkYXRp b24uY29tL3RydXN0cHJvdmlkZXJnMi5jcnQwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVoUEKL+AAAE AwBIMEYCIQCFo7i3WHEwcy0LNaunifo6BxuPQqJBDf7oxb/b8R+3igIhANWST7Ja zgi46j/LlrYQRAMSIDvzsYx+qqrFdvPCz+BqAHUApLkJkLQYWBSHuxOizGdwCjw1 mAT5G9+443fNDsgN3BAAAAFaFBCjGAAABAMARjBEAiANHPc591oaBig+cNdYC0H3 wmgstG5xvYTp2pKXSTPBCwIgC0nAm5TVFluvIKDvS6y2RpqctyXeAzLQ0rlCCzrI HawwDQYJKoZIhvcNAQELBQADggEBAFy6G7wGHFKyXDX56YDG69w+/teew6RWaEGh DXqxm8CR4n3Q3XLaNs5V1auTG4I7OnVGDwKbJqG+mkOf/fe7fIqiYCYAG9GO8lHy lgyVUVYIny7RhoSUeWQ+JtbRJZkJn6P69rTJoyKV2B2KNU/1a3+lv5Rhnj6QHLfy 5QOn4Kc7Ojz7unxdNa1cJWy5HJJon+HQRGpAZQrkoR1SAOvUzv/X23bR8yGSrl0r Tp11ZZAzNev7GhoVhl/iyQH/pfYfECpR+PpP54Dh69EufxeZcSGKYc4CySVD7w44 jE/SLjStnUiBeDD42vXLxEYbCVyB0UgCsAkjOq9TWJSPoncORaM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9yaDPQCrIxPgC2WticS6 9KUtaislWvSxfTDs7MO7WNfYk++CiYP+xXXumAG3GfzV+LZH3/7iyoiuLP8agqzm uLwdXptPC4kseqbAXFeKuC9b98DDEcE6tCnVFkLlBBGKc27M1jWiUEO7p9va+bSj qjEb4cz+jTdrDmCqKfjwqZRNC2y6sEhAlhyJhf12HO1Ft3vXWLa31EOAO560xxGz 7ViXdLGuhllXzXpcBKoZz0LdE4R2tLL4IrhfYmnEO726W0G+rRyS4TilPimvODMl QBYwZi3l7uA+q4rOfOSo2kD00qK77GVRyR32Kf29yD8yG4koVVDLKfgMhtSM5XWX lLVpdShrWMaaNibT7ObEuWr4SVPwmQeTM+pJrk5ggQttXvbg5u2/c+qnU18d/1IH RiFZwQ0uHj+XqC42AMDISbA4iEbmho9A+S4MVShyaf4uuzfrQMjNKTDixCkA9yBY jbfjbhk/PcPvaMPvDE0rH0QQNAgsQZP7KRcp3CQlaOWEKJBTpKoLg68sPfY2XLuT uP2HBlKSzTcRhdk1uTIL3tBlSlQWSJIr/A1cbw4WLaxDjPWWYj4JuFEPkUEgaTPW fctXDqTs0y4pU8+VRb9+MfX9/iQM5V4Qw3weKhw+ZNI4ntYTTM8XlMzpKdI1YHb7 KjUlMuf9rtpTcRAkKh3qo70CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 72894530136272808418593786010340164788 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.site.nu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1008285826607168159145671410815654337283829023924570695987162442493504883893011504024960785639635422897316447599984353348007601585234274539135986921105046982915209676006577879292988374559208364530373266369013286872547510750051804743763883220698552158197630181086786785750605171222782300277196307727473164646672203076402680488562611363737524771561787804328818184824622010035750730135446398666110077263720505785984239849449455808754875967187923532273463063149340798388995031764612524052254009321776570610022890319664117489766593178297531959119621677121993607521861383594679682308193001621128836638253919302690886835563868985734903825449883752419182582691427154658647841440070373962592131996639331379429294032083067085640652176899520426595501980412604950407781906150194104044040210159519822317461229065312572320682294178496441686873745529721450674337966731746892458942699740974568523027002698472809432393560676762394050172344117603419546508627765986369639618080735899419313387404708586758089901358663361405307285501575516413654984808854739327700320460548793664839419112309073837109297170510993589148632678373342534212611824988588202778240742321507183421358208824035560697272199873914415902193389604113154336934155088369060998235330094013 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.site.nu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.nu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8daefd8e0ac717102dee662facffc403bfba052 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a1410a2fe000004030048304602210085a3b8b7587130732d0b35aba789fa3a071b8f42a2410dfee8c5bfdbf11fb78a022100d5924fb25ace08b8ea3fcb96b610440312203bf3b18c7eaaaac576f3c2cfe06a007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a1410a318000004030046304402200d1cf739f75a1a06283e70d7580b41f7c2682cb46e71bd84e9da92974933c10b02200b49c09b94d5165baf20a0ef4bacb6469a9cb725de0332d0d2b9420b3ac81dac . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005cba1bbc061c52b25c35f9e980c6ebdc3efed79ec3a4566841a10d7ab19bc091e27dd0dd72da36ce55d5ab931b823b3a75460f029b26a1be9a439ffdf7bb7c8aa26026001bd18ef251f2960c955156089f2ed186849479643e26d6d12599099fa3faf6b4c9a32295d81d8a354ff56b7fa5bf94619e3e901cb7f2e503a7e0a73b3a3cfbba7c5d35ad5c256cb91c92689fe1d0446a40650ae4a11d5200ebd4ceffd7db76d1f32192ae5d2b4e9d7565903335ebfb1a1a15865fe2c901ffa5f61f102a51f8fa4fe780e1ebd12e7f179971218a61ce02c92543ef0e388c4fd22e34ad9d48817830f8daf5cbc4461b095c81d14802b009233aaf5358948fa2770e45a3