san.ets.org

- Educational Testing Service -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:57:31:5b:f5:7b:d3:cb:8d:4b:b0:cb:19:3a:64:0d was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Educational Testing Service

Organization: Educational Testing Service
State / Province: New Jersey
Locality: Princeton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:57:31:5b:f5:7b:d3:cb:8d:4b:b0:cb:19:3a:64:0d
Serial Number (int): 11086554916778750173058603543885931533
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:33:1a:09:aa:a1:a4:99:85:e9:49:96:5f:3f:dc:9b:f7:a4:e0:f2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f7:34:68:16:5d:9f:c9:3b:20:a8:21:df:63:07:f0:3d:40:cc:d7:f5
Fingerprint (sha256): 09:60:25:ed:56:c4:62:52:9c:54:4f:40:23:26:dd:64:a3:4e:ac:d5:06:e4:98:73:39:eb:06:c3:39:80:2d:ae

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate san.ets.org

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san.ets.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san.ets.org
hiset-prf.ereg.ets.org
toeflstaging.startpractice.com
etsakamaistaging.starttest.com
toefl-prf.ereg.ets.org
win-tss.caltesting.org
toeflcsr-dev.ereg.ets.org
toeflcsr-prf.ereg.ets.org
toefl-dev.ereg.ets.org
win-tss-uat.caltesting.org
grecsr-prf.ereg.ets.org
ppat-prf.ereg.ets.org
wdpibadger-tss-uat-a.caltesting.org
toefl.startpractice.com
tx-tss-uat.caltesting.org
etsakamai.starttest.com
gre-prf.ereg.ets.org
v2-prf.ereg.ets.org
csr-prf.ereg.ets.org
v2-csrext-prf.ereg.ets.org
mopa-prf.ereg.ets.org
gace-prf.ereg.ets.org
wdpibadger-tss-uat.caltesting.org
hisetcsr-prf.ereg.ets.org
tx-tss.caltesting.org

Other certificates including the domain name ets.org

(limited to 100 certificates)
ibt2-cloud-util-test-prod.ets.org
isbd-cdn-test.ets.org
nlp-pilot.ets.org
elpac-help-preview.ets.org
ibt2tc-ts.ets.org
elpac-help-qc.ets.org
cahsee1.ets.org
ibtint-prod.ets.org
one-uat-batchservices-a.ets.org
v2.ereg.ets.org
ibis-ess-perf.ets.org
ereg.ets.org
stnmanager-uat.ets.org
isbd-matchmakerphp-dev.ets.org
ndecore.ets.org
cdd-dev-cft.ets.org
erater-new-test.ets.org
sparkle-0-8-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
www.ets.org
ereg-ext.ets.org
rm.ets.org
eregweb-uat-ext.ets.org
cdd-test.ets.org
criterion28.ets.org
isr-stage.ets.org
eiassoaresponse-dvi.ets.org
erater-new-stage.ets.org
ibtprod-central.ets.org
facets-test.ets.org
fed11g-stg.ets.org
portal-stage.ets.org
cars-dev.ets.org
esc-dev-rest.ets.org
etslnbz28.ets.org
skw.ets.org
toeicrts.ets.org
conda.nlplab-dev.c.ets.org
isr.ets.org
TOEFL-REGISTRATION.ETS.ORG
one-web-a.ets.org
toefl-registration-dev.ets.org
osnlbpi4.ets.org
hostedzone-demo.etstest-innovate001.c-test.ets.org
isbd-cdn-stage.ets.org
api.parcore-dev.ets.org
api.ibis-test.ets.org
rpm-ot.ets.org
store.ets.org
origin-cinnamon.m.ets-plalab-ghe-nonprod.c.ets.org
san.ets.org
etsvln160.etslan.org
ensr-web.ets.org
gatewaycps-stg.ets.org
www.ets.org
nlpservices-stage.ets.org
ensr-ssrs-web-60.ets.org
one-uat-web-a.ets.org
usndcssl3.ets.org
*.ets.org
v2-scoreload.ereg.ets.org
*.ets.org
texasassessment.ets.org
toefl.ereg.ets.org
gace-qc.ets.org
cert-1201-1.etstest-innovate001.c-test.ets.org
rptasys-stg.ets.org
*.ets.org
title2.ets.org
sparkle-0-5-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
sparklite.jr.ets-plalab-ghe-nonprod.c.ets.org
fed11g-stg.ets.org
cbmtd.ets.org
ibt2-speedtest.ets.org
san.ets.org
eias11g-stg.ets.org
authnsvcps3-tst.ets.org
isbd-portal-stage.ets.org
ssrs.ets.org
san.ets.org
vpn.ets.org
tcmservices-dev.ets.org
ibt2-cloud-util.ets.org
san.ets.org
api.parcore-test.ets.org
practice-new.ets.org
gace.more.ets.org
www.ets.org
stnres-int.ets.org
ibtsb.ets.org
conda.nlplab-dev.c.ets.org
origin-criterionng-stage.ets.org
mmai-nvf-mmai-tst-272250.ets-mmai-nonprod.c.ets.org
osn-wspx1.ets.org
acres-dev.ets-acres-nonprod.c.ets.org
ca-toms-help-qc.ets.org
ibt2-dashboard-uat.ets.org
stnfinancial.ets.org
tartine-asr.jbtest.ets-plalab-ghe-nonprod.c.ets.org
mds-services-int.ets.org
origin.parcore-test.ets.org

Certificate

The complete raw certificate details for san.ets.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SooAW884YnqmNkN1wYy
+pQTwiO3r34YvZjWQgRAf7aQ/Sdf/t8fU7Lq6n6h6D70qJ4k+/v8sZo2wCsq1yh/
ApnU4b+RI83mzyeVt/9plTlMdumdiw9oecH/hYoAMI3aMrFTZdf1Z84Cw7Z9I2db
mL3O3MYHPnWzNv81Sf0lThA11eNcR7hUm2A6h2HNbAFg5/vTZKDjcwuUjU6Sdeb5
hKRBc/fZ7LkNSPze06tNdZ7irjBK3RnHhd+dhDyGxaxkep6BcZ8BsySKElCb1kcd
045+TNWSq4cjjJ3iNj9ipAeW6TMpn8B+q2F1ZpUnBE56GcH48lpSzB+2g5SPmdHd
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11086554916778750173058603543885931533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san.ets.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29939266309404978299674027592812142312361251379074993837252276276544509842695295438722047624217324009299619220539410143214297612341307662084670578662691917261694962324498345226018152597823934217463738423163489314214233222877062953270501110086542787590647112903224297710834038630424120420433544128867884259451121337085715394658993589189745285629541359887144832841130762328692249011876337481772696116966748571803292309830067347777981418035694513444302688353164700421502780493247382285180088011055665740105001535325108912632096047112372910124156385854239948040563319872094264420540121824150706127116271952503471455984977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2331a09aaa1a49985e949965f3fdc9bf7a4e0f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (645 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiset-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toeflstaging.startpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsakamaistaging.starttest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toefl-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'win-tss.caltesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toeflcsr-dev.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toeflcsr-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toefl-dev.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'win-tss-uat.caltesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grecsr-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppat-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdpibadger-tss-uat-a.caltesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toefl.startpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tx-tss-uat.caltesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsakamai.starttest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gre-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2-csrext-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mopa-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gace-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdpibadger-tss-uat.caltesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisetcsr-prf.ereg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tx-tss.caltesting.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001622f942a15000004030046304402207bbefdc62918905f67bb05712ce21598bf41dcd0170abffcfed24fb6c05878b302205fbd342d9744ec6c20d9ff1b8c118f7ec3b1e64b84da9a217210b2e4a1f9b4810076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001622f942ba00000040300473045022057448947489fe5a68973570e427da6060dded7a56344722b275298316cf7aa36022100f91ea88703016036753d91b121ac5fe44b19fd79d1ef870cb6dcac53295c6cfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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