otadm.vzw.com

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:b7:59:23:a8:ba:9f:45:6a:85:95:ee:8f:da:df:8b was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=otadm.vzw.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:b7:59:23:a8:ba:9f:45:6a:85:95:ee:8f:da:df:8b
Serial Number (int): 15573506238405455045088621494311509899
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7d:49:d0:32:f5:6a:90:b7:f9:b0:83:4e:ab:cd:a2:c0:e1:0e:0b:55
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 5b:3c:6c:14:78:26:2d:d1:46:21:f8:79:01:b6:2d:47:83:d5:cc:b0
Fingerprint (sha256): 09:ea:25:92:80:3e:85:1c:9a:78:af:69:6e:5b:96:99:7a:c9:39:90:7b:41:f5:5b:c7:01:d2:1d:6a:c7:a3:e8

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate otadm.vzw.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otadm.vzw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otadm.vzw.com
otadm-ae.verizon.com
otadm-iot.vzw.com
otadm-iot-ae.verizon.com
otadm-iot-n.vzw.com
otadm-iot-preprod.verizon.com
otadm-iot-preprod.vzw.com
otadm-iot-preprod-w.vzw.com
otadm-iot-w.vzw.com
otadm-n.vzw.com
otadm-preprod.vzw.com
otadm-preprod-w.vzw.com
otadm-sit.verizon.com
otadm-w.vzw.com

Other certificates including the domain name vzw.com

(limited to 100 certificates)
mobile-sit.vzw.com
selfserve-ppd.vzw.com
businessportals.verizonwireless.com
learningalbum.vzw.com
pp1ms-tdc.vzw.com
selfserve-uat.vzw.com
vcastlive.vzw.com
PSMSADMIN.VZW.COM
web.vma.vzw.com
Cassandra-D3-SSL.vzw.com
locationmanagement.vzw.com
ringbacktones.vzw.com
secure02.lithium.com
lkg07-mediamanager.svcs.verizon.com
scep.familybase.vzw.com
otadm.vzw.com
octes.verizonwireless.com
mediaimages.vzw.com
vstore.vzw.com
sredirect.familybase.vzw.com
emaglab.vzw.com
vzcleanroom.verizon.com
engage.vzw.com
www.verizonquickguide.com
mitestmail2.vzw.com
senaent2.vzw.com
vztube.verizonwireless.com
text.vzw.com
muat1.m.vzw.com
selfserve-euat.vzw.com
locationmanagement.vzw.com
verizonmdm-demo-qa.vzw.com
testglobalnav.vzw.com
fl.vzw.com
2wayssl_scm_to_VLocity.vzw.com
dc3-mediamanagerpc.vzw.com
gems.vzw.com
vzc-stg1-mediamanager-origin.svcs.verizon.com
maa-collector.vzw.com
verizon.com
gems.vzw.com
gems.vzw.com
dc2-mediamanager.vzw.com
rmt-n.vzw.com
rdd.vzw.com
push-dev-e.vzw.com
lcms.learningalbum.vzw.com
2wayssl-scm-to-TCS.vzw.com
sharefile.vzw.com
flstage.vzw.com
secure02.lithium.com
netgeo.vh.eng.vzwcorp.com
vzwlpsstg.vzw.com
auth.learningalbum.vzw.com
dc5-mediamanagerpc.vzw.com
text.vzw.com
coreent2.vzw.com
login.vzw.com
ess.emag.vzw.com
ice.verizonwireless.com
vztube.verizonwireless.com
vzwworkshops.wds.vzw.com
merchmanual.vzw.com
Mail2013mdm1.vzw.com
www.vzw.com
secure02.lithium.com
go.vzw.com
2wayssl-ccpa-to-McAfeeSafeWifi.vzw.com
Cassandra-T3.vzw.com
autodiscover.verizonwireless.com
dc3-mediamanager.verizon.com
JDBC-SSL-Nonprod.vzw.com
lls-dev.vzw.com
2wayssl-scm-to-NetMotion.vzw.com
mivsp-retdev.vzw.com
selfserveapps.vzw.com
udm-pp.vzw.com
mdmcuat.vzw.com
secure02.lithium.com
verizonquickreference.vzw.com
spg.vzw.com
vzwlpsstg.vzw.com
secure02.lithium.com
govzw-qa.vzw.com
solutionslab.vzw.com
lkg06-mediamanager-origin.svcs.verizon.com
ringbacktones.vzw.com
sticache.vzw.com
lls.vzw.com
www.vzw.com
mdmr.vzw.com
rdd-n.vzw.com
enrollnvz-d.vzw.com
vstore.vzw.com
fl.vzw.com
mvs-pp.vzw.com
mobileservices-wsit1.vzw.com
otadm.vzw.com
verizonquickreference-uat.vzw.com
iot.vzw.com

Certificate

The complete raw certificate details for otadm.vzw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIQC7dZI6i6n0VqhZXuj9rfizANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIzMDUwMjAwMDAwMFoXDTI0MDUwMTIzNTk1OVowGDEWMBQGA1UEAxMNb3Rh
ZG0udnp3LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAINUkGC/
qsy16Buf1MzJk/SfDwQ/mmb6boqnXnOLKyBpsbb/NCxnBrNGbDFI+9li8GdDwW2A
2019qCJglxZc20nrYT7TqiXBiBA+Psh0921YFfRSxLYYhrwBtmnh6yF6lq5UYteB
857TfHgzA64TWehkXy4+RxMXDK19oO+T6j0sbDg2OtYUkPISM9fwT42iuQtIEIlx
/j83rUDa3fGwal12A+G87Iznt/qKWdJMZPxUHNezGlHKeXhJrnSEFMTd0xf1Lm1D
e8RWVTo+xh2d1siXfGq+jfEOl4UL92OotNQuNgEHs7YWIbmUwvl+BW8BoKib7N8x
USfcXM57+ztYrQECAwEAAaOCBEYwggRCMB8GA1UdIwQYMBaAFJRP1F2L5KTipoD+
/dj5AO+jvgJXMB0GA1UdDgQWBBR9SdAy9WqQt/mwg06rzaLA4Q4LVTCCAUkGA1Ud
EQSCAUAwggE8gg1vdGFkbS52encuY29tghRvdGFkbS1hZS52ZXJpem9uLmNvbYIR
b3RhZG0taW90LnZ6dy5jb22CGG90YWRtLWlvdC1hZS52ZXJpem9uLmNvbYITb3Rh
ZG0taW90LW4udnp3LmNvbYIdb3RhZG0taW90LXByZXByb2QudmVyaXpvbi5jb22C
GW90YWRtLWlvdC1wcmVwcm9kLnZ6dy5jb22CG290YWRtLWlvdC1wcmVwcm9kLXcu
dnp3LmNvbYITb3RhZG0taW90LXcudnp3LmNvbYIPb3RhZG0tbi52encuY29tghVv
dGFkbS1wcmVwcm9kLnZ6dy5jb22CF290YWRtLXByZXByb2Qtdy52encuY29tghVv
dGFkbS1zaXQudmVyaXpvbi5jb22CD290YWRtLXcudnp3LmNvbTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYw
NKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FH
MS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMHYGCCsGAQUFBwEBBGowaDAmBggrBgEFBQcw
AYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6
Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3J0MAkG
A1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AHb/iD8KtvuVUcJh
zPWHujS0pM27KdxoQgqf5mdMWjp0AAABh95WveAAAAQDAEYwRAIgOOrMUnFK6779
/AiLPaLGJbbbUzFDHKFbdRIqGr7zDVACIBqoVutXZ2P4/7l7VaQI5CX8NjNer+dP
6UEQ2xLO0D1bAHYAc9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGH
3la91AAABAMARzBFAiBImvVZZN4SwvEPzMl8tNTsHuFOinSLFZULXt9dZuGrEAIh
AKHDMs5FGctv5sENC/vdgoBpvo//c5SMvPOr6E0kX4lqAHcASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGH3la9owAABAMASDBGAiEA+QatjMRKl7mV
LFugxOJnwXoOeUK9siJZQpOU4B+GHLgCIQC3YoR2exiqjqenb7TUOP+VTkTNBJlB
oJ841sW6PZJA2TANBgkqhkiG9w0BAQsFAAOCAQEAZxU7b01Qml71fvkm5V0L5JKO
cYP8gGIicP/9E+E0NaqWOLrm5Fd957xAbzgvtVQ1rTFnXrgm0045llmGu1Ic10K7
NhW6HuEQrm9QBEHSjvEFf+lSn0g5Dg0AVZvq8r3JfteXHExJwSieC1DCHjmyCp/4
QCJHY/8+FF/m07PXQcUkYqB4aN8eCHTZB/Uo3NkY2pef6cTlf73iBKiuvNvIxpZd
FyfLJgaVDwwsmitmhwiLiN0OFrF7zSyldSzXWjGCoHqffd8dAB2YO6VBHd0gYd8B
Y4iFNm3O75eCzAk88+5m/Jtsq5RKz/oa9rYeRx/j/xdyVqq2RKs3ElKQ1Bjplw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1SQYL+qzLXoG5/UzMmT
9J8PBD+aZvpuiqdec4srIGmxtv80LGcGs0ZsMUj72WLwZ0PBbYDbTX2oImCXFlzb
SethPtOqJcGIED4+yHT3bVgV9FLEthiGvAG2aeHrIXqWrlRi14HzntN8eDMDrhNZ
6GRfLj5HExcMrX2g75PqPSxsODY61hSQ8hIz1/BPjaK5C0gQiXH+PzetQNrd8bBq
XXYD4bzsjOe3+opZ0kxk/FQc17MaUcp5eEmudIQUxN3TF/UubUN7xFZVOj7GHZ3W
yJd8ar6N8Q6XhQv3Y6i01C42AQezthYhuZTC+X4FbwGgqJvs3zFRJ9xcznv7O1it
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15573506238405455045088621494311509899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otadm.vzw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16578918001433612726516252239946523740707626422724959672925218250313247074629955411465660893896910377173508909226432605348929838295192583945505674251571300388531980623268963635594922601930413269500344059440784015958287751659958962961956105266812384227010372529220749573121527546626383675069027147690473374853373702715261744112106863373072617986232302606567660763046844559902045699218929776019054730511106882903407162471831329714930869963867543225643068111249351640843013944413319682655931834356855719084462530683865603272122225638990850394143234372738836970820461135494887911105624682720177206570782397247315924004097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d49d032f56a90b7f9b0834eabcda2c0e10e0b55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-ae.verizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-iot.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-iot-ae.verizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-iot-n.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-iot-preprod.verizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-iot-preprod.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-iot-preprod-w.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-iot-w.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-n.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-preprod.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-preprod-w.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-sit.verizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otadm-w.vzw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0067153b6f4d509a5ef57ef926e55d0be4928e7183fc80622270fffd13e13435aa9638bae6e4577de7bc406f382fb55435ad31675eb826d34e39965986bb521cd742bb3615ba1ee110ae6f500441d28ef1057fe9529f48390e0d00559beaf2bdc97ed7971c4c49c1289e0b50c21e39b20a9ff840224763ff3e145fe6d3b3d741c52462a07868df1e0874d907f528dcd918da979fe9c4e57fbde204a8aebcdbc8c6965d1727cb2606950f0c2c9a2b6687088b88dd0e16b17bcd2ca5752cd75a3182a07a9f7ddf1d001d983ba5411ddd2061df01638885366dceef9782cc093cf3ee66fc9b6cab944acffa1af6b61e471fe3ff177256aab644ab37125290d418e997