www.fsec.or.kr

- Financial Security Institute -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:02:5d:6f:3b:3f:47:a0:2f:d5:07:c0:ec:9a:1f:fe was issued on by DigiCert Inc.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Financial Security Institute

Organization: Financial Security Institute
Locality: Yongin-si
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:02:5d:6f:3b:3f:47:a0:2f:d5:07:c0:ec:9a:1f:fe
Serial Number (int): 1341507666257280365892853876800495614
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e0:13:68:71:fe:a4:08:e5:dd:bb:b6:5f:47:0c:e2:3d:3c:e4:79:a6
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 6c:92:f8:fd:4a:2a:e4:72:8f:85:c8:16:e3:77:af:ee:5d:a0:d8:33
Fingerprint (sha256): 07:e5:a8:e3:87:d5:c3:7e:45:9a:2d:fb:47:00:f6:57:fa:65:9f:43:a6:68:80:0e:f8:1d:84:0a:b3:1d:8b:c4

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.fsec.or.kr

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fsec.or.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fsec.or.kr
fsec.or.kr
fsb.or.kr
partner.directdb.co.kr
www.cretopew.com
www.kreport.co.kr
ssl.koreanre.co.kr
www.kedtcb.com
ir.idbins.com
www.realtop.co.kr
bank.daishin.com
www.cretop.com
www.idb-ins.com
loan.daishin.com
www.fsb.or.kr
www.educar.co.kr
www.idbins.com
www.hanwhalife.com
certify.fsb.or.kr
www.cretopfn.co.kr
www.cretopfn.com
www.cretopew.co.kr
www.cretop.co.kr
www.findsystem.co.kr
www.directdb.co.kr
stockloan.daishin.com

Other certificates including the domain name fsec.or.kr

(limited to 100 certificates)
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
medu.fsec.or.kr
medu.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
medu.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
mail.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
kms.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
malware.fsec.or.kr
www.fsec.or.kr
malware.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
data.fsec.or.kr
www.fsec.or.kr
*.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
kms.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
kms.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
data.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
*.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
medu.fsec.or.kr
regtech.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr

Certificate

The complete raw certificate details for www.fsec.or.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIQAQJdbzs/R6Av1QfA7Jof/jANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTE3MTIxMTAwMDAwMFoXDTE5MDIwNjEyMDAwMFowYTELMAkGA1UEBhMCS1Ix
EjAQBgNVBAcTCVlvbmdpbi1zaTElMCMGA1UEChMcRmluYW5jaWFsIFNlY3VyaXR5
IEluc3RpdHV0ZTEXMBUGA1UEAxMOd3d3LmZzZWMub3Iua3IwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDiMWqIM8IZKVG4Hh09RcE0HpKEwR8xqr3tPo6H
DutNA0l03VyZUlU88vhbJVUpoRrDYxGMDfGPbahNkVf2aJHHMkGhWuBsZ7w1CWMe
yrNrIMzwRhGXVZomZek1HvOBEZsymK6bCuAu8JwzShRZSV0xqY7++5ZuzkTkVEHq
83U5xsQI1OSFUUcMMSh6+SVU5RVuEFPOOUoMXikPjuiEsxWV6z1zF5tQh2RuWQXL
3ijl09H1HmzJfTfNFh4uI7wncjXuPt2WeqJiX/mWyXFYI1Cj3U3yJg2Ll2vKolT/
TVG/vjCRrPs3asTPTGU81HNyNk9IgLmprDts/EQ4Eps2JsU5AgMBAAGjggN/MIID
ezAfBgNVHSMEGDAWgBSUT9Rdi+Sk4qaA/v3Y+QDvo74CVzAdBgNVHQ4EFgQU4BNo
cf6kCOXdu7ZfRwziPTzkeaYwggHhBgNVHREEggHYMIIB1IIOd3d3LmZzZWMub3Iu
a3KCCmZzZWMub3Iua3KCCWZzYi5vci5rcoIWcGFydG5lci5kaXJlY3RkYi5jby5r
coIQd3d3LmNyZXRvcGV3LmNvbYIRd3d3LmtyZXBvcnQuY28ua3KCEnNzbC5rb3Jl
YW5yZS5jby5rcoIOd3d3LmtlZHRjYi5jb22CDWlyLmlkYmlucy5jb22CEXd3dy5y
ZWFsdG9wLmNvLmtyghBiYW5rLmRhaXNoaW4uY29tgg53d3cuY3JldG9wLmNvbYIP
d3d3LmlkYi1pbnMuY29tghBsb2FuLmRhaXNoaW4uY29tgg13d3cuZnNiLm9yLmty
ghB3d3cuZWR1Y2FyLmNvLmtygg53d3cuaWRiaW5zLmNvbYISd3d3LmhhbndoYWxp
ZmUuY29tghFjZXJ0aWZ5LmZzYi5vci5rcoISd3d3LmNyZXRvcGZuLmNvLmtyghB3
d3cuY3JldG9wZm4uY29tghJ3d3cuY3JldG9wZXcuY28ua3KCEHd3dy5jcmV0b3Au
Y28ua3KCFHd3dy5maW5kc3lzdGVtLmNvLmtyghJ3d3cuZGlyZWN0ZGIuY28ua3KC
FXN0b2NrbG9hbi5kYWlzaGluLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9j
ZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcmwwTAYDVR0gBEUw
QzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl
cnQuY29tL0NQUzAIBgZngQwBAgIwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzAB
hhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDov
L2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwCQYD
VR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ViaoM3yNxOqy4V8BEWNJZytRFWkhSipwFh/qGKe4c9BSqMheoV4H5ANKs5CjJPCV
c6dSmaSpfKTicWJGfTFssmB4h6AwfjMeB7Rl2qpnaMO1NkuJfKqToe39D5nv0zeQ
eeicTSZgvdIocphmweSC/o/XDVc/W4JOneClTbXx0QqEQOKjLCAsT6Uqmjv8TTOt
BG/0P2f3pKXcmdqd9vycpbj4JvbVXK8+5QI++W9poZRXoWS6deRClH8204CuOXGx
fOYT0xiTTYVvWeRhdYZPMiOCBZXnUOKH/GV1rwU9inr/XX3//RRX8V3HpiWm/5Pt
/oAE3KN9PvWfsBvdYVLu9A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jFqiDPCGSlRuB4dPUXB
NB6ShMEfMaq97T6Ohw7rTQNJdN1cmVJVPPL4WyVVKaEaw2MRjA3xj22oTZFX9miR
xzJBoVrgbGe8NQljHsqzayDM8EYRl1WaJmXpNR7zgRGbMpiumwrgLvCcM0oUWUld
MamO/vuWbs5E5FRB6vN1OcbECNTkhVFHDDEoevklVOUVbhBTzjlKDF4pD47ohLMV
les9cxebUIdkblkFy94o5dPR9R5syX03zRYeLiO8J3I17j7dlnqiYl/5lslxWCNQ
o91N8iYNi5dryqJU/01Rv74wkaz7N2rEz0xlPNRzcjZPSIC5qaw7bPxEOBKbNibF
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1341507666257280365892853876800495614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yongin-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Financial Security Institute'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fsec.or.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28554224929556101856665166772899844317782994578373349466672033800389149409000259142814896475563958944507825007332921403782445208052368649983562227848964316993058349404038229261255644218949848802218310336257560791039449051190288809692269180818279051236336342403447142415552694992326632043023765345766597577954921143079990268256940710694532972927292099681008540897625093566255208323510680459701058547175996905444973562119220974635084234701908457219738496905732787124610627663397468966480870817652654316672949143685584485484964682910104830818446244344375130306017201587138686606675799298491829551371151411472247736943929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0136871fea408e5ddbbb65f470ce23d3ce479a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (472 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsec.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsec.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsb.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.directdb.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretopew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kreport.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.koreanre.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kedtcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.idbins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realtop.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank.daishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idb-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loan.daishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsb.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educar.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idbins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanwhalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify.fsb.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretopfn.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretopfn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretopew.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cretop.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findsystem.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directdb.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockloan.daishin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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