39-45.sncf.com

- SOCIÉTÉ NATIONALE SNCF SA -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:c2:1e:90:34:6a:46:52:c9:e8:05:a5:c9:42:db:1b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SOCIÉTÉ NATIONALE SNCF SA

Organization: SOCIÉTÉ NATIONALE SNCF SA
State / Province: Île-de-France
Locality: Saint-Denis
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:c2:1e:90:34:6a:46:52:c9:e8:05:a5:c9:42:db:1b
Serial Number (int): 19617117428909789125190341011041344283
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:b6:5f:bd:c6:e0:85:74:b7:24:dd:60:b8:27:ea:6f:86:e1:b0:41
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 5a:62:c2:a7:5c:33:b3:31:09:95:dc:13:88:1c:ff:6c:97:e4:54:1a
Fingerprint (sha256): 0a:2b:fe:3f:f0:8e:49:36:79:54:6f:e1:50:6d:ef:9a:90:ed:96:48:00:61:13:2d:b0:f6:d0:e6:b5:18:a1:8d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate 39-45.sncf.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 39-45.sncf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

39-45.sncf.com
www.39-45.sncf.com

Other certificates including the domain name sncf.com

(limited to 100 certificates)
connect.sncf.com
*.carmen.sncf.fr
www.programme-voyageur.sncf.com
netkin.eu
evenements.sncf.com
tech.sncf.com
www.webresafret.sncf.com
lebartgv.sncf.com
r.connect.sncf.com
netkin.eu
netkin.eu
recette1.moncompte.sncf.com
mdmvsp.sncf.com
recette1.idpass.sncf.com
*.defi-ingenieurs.sncf.com
*.sncfconnect.com
mdc.sncf.com
acces-authentification.sncf.com
module-photo.sncf.com
candidat.emploi.sncf.com
netkin.eu
reactifs.sncf.com
akamai-san41.exacttarget.com
data.sncf.com
www.margo.sncf.com
www.recherche.sncf.com
piperi.sncf.com
sncf.com
*.fidelite-programme-voyageur.sncf.com
pmad.reseau.sncf.com
www.ter.sncf.com
ressources.data.sncf.com
sncf.com
epublimmo.sncf
tech.sncf.com
moncompte.sncf.com
netkin.eu
module-photo.sncf.com
accessibilite.sncf.com
collection80.sncf.com
www.nouveau.sncf.com
www.candidat.emploi.sncf.com
admins.voyages-sncf.com
emploi.sncf.com
*.collaboratif.sncf.com
espacesferroviaires.sncf.com
e-livre.sncf.com
s2if-gie.sncf.com
goodies.sncf.com
usine.idpass.sncf.com
netkin.eu
netkin.eu
info.portailentreprises.sncf.com
39-45.sncf.com
evenements.sncf.com
recette2.lesinfos.sncf.com
secure.analytics.voyages-sncf.com
e-livre.sncf.com
formulaire.vsct.fr
netkin.eu
*.fret.sncf.com
services.idpass.sncf.com
www.programmefid.com
recette1.info-voyageurs.sncf.com
pro-adhesion.sncf.com
www.portailentreprises.sncf.com
multimedia.sncf.com
int1-tictac.sncf.com
info.portailentreprises.sncf.com
www.candidat.emploi.sncf.com
trophees.sncf.com
abonnement.voyages-sncf.com
tech.sncf.com
netkin.eu
www.programme-voyageur.sncf.com
recette1.info-voyageurs.sncf.com
e-livre.sncf.com
publimmo.sncf.com
netkin.eu
prosynapses.sncf.com
idpass.sncf.com
e-consultations.sncf.com
accessibilite.sncf.com
www.budget.sncf.com
mdmsentry.sncf.com
goodies.sncf.com
netkin.eu
*.ter.sncf.com
info.portailentreprises.sncf.com
preprod.digipass.sncf.com
netkin.eu
recette1.ticketing-sncf.vsct.fr
www.srtpf.fr
netkin.eu
recette1.acces-client.sncf.com
www.feria.sncf.com
hapi.sncf.com
lebar.sncf.com
usine.idpass.sncf.com
www.cv.emploi.sncf.com

Certificate

The complete raw certificate details for 39-45.sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjzCCBnegAwIBAgIQDsIekDRqRlLJ6AWlyULbGzANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIzMTAyMDAwMDAwMFoXDTI0MTAyMjIzNTk1OVowezELMAkGA1UEBhMCRlIx
FzAVBgNVBAgMDsOObGUtZGUtRnJhbmNlMRQwEgYDVQQHEwtTYWludC1EZW5pczEk
MCIGA1UECgwbU09DScOJVMOJIE5BVElPTkFMRSBTTkNGIFNBMRcwFQYDVQQDEw4z
OS00NS5zbmNmLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKZk
SCWOv49NRCll3exwLnI6MupZW5mjnQXga9ZZIKY4RpYUVoukJYH8hcv6HBfeJNa0
3520pJJokBgqvz4rm64s/zpnX4FDXYuuY2rY0xe4z1aV12eu/xTVjrZH3J4pY8dp
nqxGEZijFlFVZ6iiwxe/Td3tk5O/pIP/4ib77wVore6Mbwn0c7ZOR0Yy3K9SJ/po
aWAWnA0MO2sdTG5HIFtjPzQu3eOaAK/RQ4GChM82mqYkn7WoaHC/WfRTwrnZQIJ9
h5IUJxQmKag/RkqwiNaMkafeM6U9IGdDHqn+SYKgYCnWLyE8fATaY931d4ZFoZQA
+1GedeR4f0s/Hk7CO7fiyxXzmDNDedUSUNI4FlvOSlmYUOBGYLysOci+5xYLVfIR
Yl5F34pEuCkiqDHbkwhTC/N3Ulw7e9f8bKn+BQfLXiAlf27zVaxVv7JBeUDHaLMH
/JbWdmwhIR7NbHOquEd1AEpqHO3jKE6iVsavMk1kzo42sqiFQFk8EVV3PNzwI3sF
FtsKBCoJLpOXg5YeZLyVzcCpg73ku3rRLTmhbLfeTLVCVy7p90QRilKjRfwBX0bn
uIty8mJfD86IPtaqsKALZxpv/YD0gB2t2jisCcvxpyH+z8MyuhOA4g/ok1MOOjPK
jVH0eBK3QklJqofGd188u2EFtaQmQMW4YmkxxO8ZAgMBAAGjggMoMIIDJDAfBgNV
HSMEGDAWgBSUT9Rdi+Sk4qaA/v3Y+QDvo74CVzAdBgNVHQ4EFgQUk7ZfvcbghXS3
JN1guCfqb4bhsEEwLQYDVR0RBCYwJIIOMzktNDUuc25jZi5jb22CEnd3dy4zOS00
NS5zbmNmLmNvbTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhto
dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRw
Oi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3JsMHYGCCsG
AQUFBwEBBGowaDAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5j
b20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9U
cnVzdFRMU1JTQUNBRzEuY3J0MAwGA1UdEwEB/wQCMAAwggF7BgorBgEEAdZ5AgQC
BIIBawSCAWcBZQB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB
i00sr1gAAAQDAEYwRAIgB5uwcpKq1VgFm0OinS5wzzeiNciPwgZjmg0Y9TjIUt8C
IEP6mfs1m/WAdS6usXdT6neK2fEvMs0Yso00lTy5uMCwAHUASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGLTSyvGgAABAMARjBEAiACi2amfc+L3FKf
50TygIi/68OV5eoVeZQ8rbFDpowynQIgL4OI0y69FToast+czDxEs0b7nmwvFpaS
xGO2xVaptvwAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYtN
LK9hAAAEAwBGMEQCIH8rCqjw0oay6DUSNBqIRvOWq1E17LIhI0lt1ArdI5qjAiAl
9PNmzta5DYYKpEowkb0+z15VeHQovb8X2NxX2GasnDANBgkqhkiG9w0BAQsFAAOC
AQEAD3vq2JXri2DLuSvtJEZVJSMjIG+M1CFCrgBeanQB2Dyf5NYwj0BPSAhanpMJ
Z8Ksdd53OKhkKg2XvuG2WcD4QXyTNoarhhsrfutqIXboe9QyUmeVUdFhX7uRiX4Y
bOK4uchx8q9t+jPbY8xoxZNp0m7q7Z6/erX//wmqqmnbmc1DXaLAoLYvDOBt9WIk
t8e85/hdtl20ICJpNtLD9JIdTWXpWu8MsniJJ0LARRx8lAXQl3UPJvwk3bdI4yH5
A7BCAdNqpV6/MPobo9f7Jmspx3HU+0PbObfERUBa0H7R8NJHElA58W4Vt5uTfc0E
8eYa846GyWIs2WoFc0SQKl14Wg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19617117428909789125190341011041344283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Denis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SOCIÉTÉ NATIONALE SNCF SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '39-45.sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678819017418971861565759199790207959478326925422850803477213631469781464040036616677489054632926441557047529772574806527535838398533118856507012767653342774123053051163019473740138343161614382429743255918373430017567090534284540226562593608870610324408722155865612239817961541048740160595776108142493084231651614769150589356459156466943538223637247863942099752702297350331234542934073992938964600193640919312519425579077950645175682055353217526956633629780878218020615883467545204379783713789709206316108109628468302081823929727460297283028876550121266287036926137770474647866013542045959083920268900938121647076973935982782600813803629939701815338367712268461074199626551510287460889263522688382012977156445238930144391362780915904609845374489058883281031148897646523802737358391299745353203793731147954145230549987794561041508939910835110639126971050577526624095014592591696382002784052851887367790610462912329096668754267479163653663463737995083680805318143574304840479842396770193201302499041590419641747296085844992927184694888278567822113447107094019015234096933908217710721782356113041935423648806535759542781997648414396130015816719641771714264436813999703757981923604903090493287147958312939876229013111005772494663359721241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93b65fbdc6e08574b724dd60b827ea6f86e1b041
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '39-45.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.39-45.sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							016500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4d2caf5800000403004630440220079bb07292aad558059b43a29d2e70cf37a235c88fc206639a0d18f538c852df022043fa99fb359bf580752eaeb17753ea778ad9f12f32cd18b28d34953cb9b8c0b000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b4d2caf1a00000403004630440220028b66a67dcf8bdc529fe744f28088bfebc395e5ea1579943cadb143a68c329d02202f8388d32ebd153a1ab2df9ccc3c44b346fb9e6c2f169692c463b6c556a9b6fc007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4d2caf61000004030046304402207f2b0aa8f0d286b2e83512341a8846f396ab5135ecb22123496dd40add239aa3022025f4f366ced6b90d860aa44a3091bd3ecf5e55787428bdbf17d8dc57d866ac9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f7bead895eb8b60cbb92bed244655252323206f8cd42142ae005e6a7401d83c9fe4d6308f404f48085a9e930967c2ac75de7738a8642a0d97bee1b659c0f8417c933686ab861b2b7eeb6a2176e87bd43252679551d1615fbb91897e186ce2b8b9c871f2af6dfa33db63cc68c59369d26eeaed9ebf7ab5ffff09aaaa69db99cd435da2c0a0b62f0ce06df56224b7c7bce7f85db65db420226936d2c3f4921d4d65e95aef0cb278892742c0451c7c9405d097750f26fc24ddb748e321f903b04201d36aa55ebf30fa1ba3d7fb266b29c771d4fb43db39b7c445405ad07ed1f0d247125039f16e15b79b937dcd04f1e61af38e86c9622cd96a057344902a5d785a