gifts.mdanderson.org
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 02:9c:f3:c4:0b:c8:9e:9a:b3:d8:4f:99:ec:90:4a:c9 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=gifts.mdanderson.org
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:9c:f3:c4:0b:c8:9e:9a:b3:d8:4f:99:ec:90:4a:c9Serial Number (int): 3473398459401674267201356861000403657
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 59:e5:d6:a3:e3:69:96:87:da:ac:31:14:2f:9a:3f:7c:0a:70:5f:27
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): ac:79:b8:60:a5:d3:e9:25:f8:42:ab:3b:14:c9:bc:3d:d3:d9:6f:39
Fingerprint (sha256): 0a:bf:21:93:8a:80:ed:79:88:83:2e:32:f8:4e:55:df:92:87:21:ad:2b:e9:7e:1f:df:eb:b6:c4:c5:8e:22:7c
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate gifts.mdanderson.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gifts.mdanderson.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gifts.mdanderson.org
Other certificates including the domain name mdanderson.org
(limited to 100 certificates)
icmobile.mdanderson.edu
emmdev.mdanderson.org
tmupdates.mdanderson.org
suag.mdanderson.org
lync.mdanderson.org
mda02plt.mdanderson.org
www3dev.mdanderson.org
mdanderson.org
mailbox.mdanderson.org
mobileaccess.mdanderson.org
iroc.mdanderson.org
spores.mdanderson.org
www.mdanderson.org
1mcintconzoom02.mdanderson.edu
mylinkply.mdanderson.org
men.mdanderson.org
rds.mdanderson.org
collaborate.mdanderson.org
www2dev.mdanderson.org
careers.mdanderson.org
isapp07sv01.mdanderson.org
test.mdanderson.org
rmx.mdanderson.org
dcdwliacucapp.mdanderson.org
my.mdanderson.org
roadstest.mdanderson.edu
dopwldibrainlab.mdanderson.edu
cge.mdanderson.org
ccgfamilyhistory.mdanderson.edu
rds.mdanderson.org
enroll-device.mdanderson.edu
lyncdcg.mdanderson.org
mobilemaildev.mdanderson.org
medhistorynp.mdanderson.org
webscheduler1.mdanderson.org
prodsp2013.mdanderson.edu
shib-staging.mdanderson.org
gifts.mdanderson.org
livestreaming.mdanderson.org
www3dev.mdanderson.org
atthetable.mdanderson.org
zoom.mdanderson.org
www3.mdanderson.org
atthetable.mdanderson.org
zebrafisharchievemanager.mdanderson.org
aspera-staging.mdanderson.org
access.mdanderson.org
pct.mdanderson.org
aware-phenotype-stage.mdanderson.org
men2.mdanderson.org
d1pwlipcttbcrc.mdanderson.edu
stats-ssl.mdanderson.org
shib.mdanderson.org
ippvip.mdanderson.org
ehricmychstga01.mdanderson.edu
ehrcarelnkrbld1.mdanderson.edu
pocdsk.mdanderson.org
isapp08pv01.mdanderson.org
ehrmychrbld1.mdanderson.edu
support.mdanderson.org
dcgintconzoom01.mdanderson.edu
webapp.mdanderson.org
vsupport.mdanderson.org
www3.mdanderson.org
mobileaccessdev.mdanderson.org
rds.mdanderson.org
tmupdates.mdanderson.org
pct.mdanderson.org
www2.mdanderson.org
etwscpb.mdanderson.org
dcdwlibcapp.mdanderson.org
alertustest.mdanderson.org
rpad1.mdanderson.org
jamfmdm2.mdanderson.org
ediweba-dev-v03.mdanderson.edu
iccareeverywhere.mdanderson.edu
rpad1.mdanderson.org
ftps.mdanderson.org
isapp08pv01.mdanderson.org
emmdev.mdanderson.org
san-35-s12.tlsprovisioning.exacttarget.com
shop.mdanderson.org
study.mdanderson.org
mailbox.mdanderson.org
test-vpn-router.mdanderson.org
skypeedge.mdanderson.edu
canvas.mdanderson.org
splunk01-stage.mdanderson.edu
chimera.mdanderson.org
zoom.mdanderson.org
ehricmobbkr1.mdanderson.edu
ivew.mdanderson.org
hsw.mdanderson.edu
ccgfamilyhistory.mdanderson.org
rpa.mdanderson.org
xtend.mdanderson.org
www.mdanderson.org
collaborate.mdanderson.org
myprojects.mdanderson.org
dopwldibrainlab.mdanderson.edu
emmdev.mdanderson.org
tmupdates.mdanderson.org
suag.mdanderson.org
lync.mdanderson.org
mda02plt.mdanderson.org
www3dev.mdanderson.org
mdanderson.org
mailbox.mdanderson.org
mobileaccess.mdanderson.org
iroc.mdanderson.org
spores.mdanderson.org
www.mdanderson.org
1mcintconzoom02.mdanderson.edu
mylinkply.mdanderson.org
men.mdanderson.org
rds.mdanderson.org
collaborate.mdanderson.org
www2dev.mdanderson.org
careers.mdanderson.org
isapp07sv01.mdanderson.org
test.mdanderson.org
rmx.mdanderson.org
dcdwliacucapp.mdanderson.org
my.mdanderson.org
roadstest.mdanderson.edu
dopwldibrainlab.mdanderson.edu
cge.mdanderson.org
ccgfamilyhistory.mdanderson.edu
rds.mdanderson.org
enroll-device.mdanderson.edu
lyncdcg.mdanderson.org
mobilemaildev.mdanderson.org
medhistorynp.mdanderson.org
webscheduler1.mdanderson.org
prodsp2013.mdanderson.edu
shib-staging.mdanderson.org
gifts.mdanderson.org
livestreaming.mdanderson.org
www3dev.mdanderson.org
atthetable.mdanderson.org
zoom.mdanderson.org
www3.mdanderson.org
atthetable.mdanderson.org
zebrafisharchievemanager.mdanderson.org
aspera-staging.mdanderson.org
access.mdanderson.org
pct.mdanderson.org
aware-phenotype-stage.mdanderson.org
men2.mdanderson.org
d1pwlipcttbcrc.mdanderson.edu
stats-ssl.mdanderson.org
shib.mdanderson.org
ippvip.mdanderson.org
ehricmychstga01.mdanderson.edu
ehrcarelnkrbld1.mdanderson.edu
pocdsk.mdanderson.org
isapp08pv01.mdanderson.org
ehrmychrbld1.mdanderson.edu
support.mdanderson.org
dcgintconzoom01.mdanderson.edu
webapp.mdanderson.org
vsupport.mdanderson.org
www3.mdanderson.org
mobileaccessdev.mdanderson.org
rds.mdanderson.org
tmupdates.mdanderson.org
pct.mdanderson.org
www2.mdanderson.org
etwscpb.mdanderson.org
dcdwlibcapp.mdanderson.org
alertustest.mdanderson.org
rpad1.mdanderson.org
jamfmdm2.mdanderson.org
ediweba-dev-v03.mdanderson.edu
iccareeverywhere.mdanderson.edu
rpad1.mdanderson.org
ftps.mdanderson.org
isapp08pv01.mdanderson.org
emmdev.mdanderson.org
san-35-s12.tlsprovisioning.exacttarget.com
shop.mdanderson.org
study.mdanderson.org
mailbox.mdanderson.org
test-vpn-router.mdanderson.org
skypeedge.mdanderson.edu
canvas.mdanderson.org
splunk01-stage.mdanderson.edu
chimera.mdanderson.org
zoom.mdanderson.org
ehricmobbkr1.mdanderson.edu
ivew.mdanderson.org
hsw.mdanderson.edu
ccgfamilyhistory.mdanderson.org
rpa.mdanderson.org
xtend.mdanderson.org
www.mdanderson.org
collaborate.mdanderson.org
myprojects.mdanderson.org
dopwldibrainlab.mdanderson.edu
Certificate
The complete raw certificate details for gifts.mdanderson.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgIQApzzxAvInpqz2E+Z7JBKyTANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMTAwMjAwMDAwMFoXDTI0MTAwMTIzNTk1OVowHzEdMBsGA1UEAxMUZ2lm dHMubWRhbmRlcnNvbi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX1GpckoP8TyjlT95sQIR299+h9EbaMPq1rxt0PeQh767mju4Wn2Gjxa5zQFmm ZrIVCN7kvn0nKiiYsJcZFyM+65UsmLpgBaW5mq1c9DUAtIi996IFqpJWeWWF/wZS FtY2PUl8iHWqpDb7a5pxUVaZGavfxoWsXQ7NDMZAkDetZfc/d7aDbFcuz6c2oMGF KVkczX0Mz3KnoMJ/JeHLdU8GOU1JysUb/vd8RSw8Nk8zmV9WSv9Dln6BZuSh3JNI pofKf5ZzjAbbEvjs+xybJg0564+zj4IewS06PfGAmhc/yxWnVwE7Nf0iGkFUqdah v+PXBxlwWOY/h9sWBdYiogVpAgMBAAGjggMcMIIDGDAfBgNVHSMEGDAWgBSUT9Rd i+Sk4qaA/v3Y+QDvo74CVzAdBgNVHQ4EFgQUWeXWo+NplofarDEUL5o/fApwXycw HwYDVR0RBBgwFoIUZ2lmdHMubWRhbmRlcnNvbi5vcmcwPgYDVR0gBDcwNTAzBgZn gQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BT MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw PwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1 c3RUTFNSU0FDQUcxLmNybDB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGGGmh0 dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2Fj ZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNydDAMBgNVHRMB Af8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDuzdBk1dsazsVct520 zROiModGfLzs3sNRSFlGcR+1mwAAAYrwv3guAAAEAwBHMEUCIQDW+uxtWsIoHAkc drs5UWEUZRMf8Kw6mL+Nls3xQh/WMgIgGZsXqGJT+MgQhA3q6pryqcjVcPLZnEJ3 SFmkHESa2n0AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYrw v3gBAAAEAwBHMEUCIFFYwc6Z1xbQr6XyhYwX5Fx/lxP6Ikau4SkS6eOrGgAqAiEA wLRslujVt1RjV6x1x2T+cM+C6w3BEEpPnE108+CXu88AdQA/F0tP1yJHWJQdZRyE vg0S7ZA3fx+FauvBvyiF7PhkbgAAAYrwv3gZAAAEAwBGMEQCIHOVTCPLlP3qhwAS YeOS8kVchGSB0zB1eeD7OwfUTEPPAiAp+hXhcDsdyxgQxKKPFGBKja1XLMjDWq0Y T2e60UtxgjANBgkqhkiG9w0BAQsFAAOCAQEAbBzuKN02ESTCRLxdRnMEwBT6Z/jS /JXtpAzU2EecJyengiBVHrCFkf2hsRqamQ1g5A9oPpTlKWfLWM/+GHKjEe2lS4IW ftVvmnyiji6NVtfkuBc6fxlTMUKTNAbBX0jbGsGY+mNhPp2TQfZeCyyS61/GF/FO mFKQ4BnzD0ijZeJXuWXXXnh+JbgSc1alwwCgaIxyJpGFC07A+y8+YmFQn1NQ5f6Q cTm4e0y0o7P0Xkv3KS1yereBRZ9rCkm835MbQ+L3kgg+tdhpN5FrX64T9HpXt3Iw ZFUcR58J/J6Xel9KRQCHWur/FKFyZKCugj6Xs3I9NC/gW/tOw1jYz1PVGw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19RqXJKD/E8o5U/ebECE dvffofRG2jD6ta8bdD3kIe+u5o7uFp9ho8Wuc0BZpmayFQje5L59JyoomLCXGRcj PuuVLJi6YAWluZqtXPQ1ALSIvfeiBaqSVnllhf8GUhbWNj1JfIh1qqQ2+2uacVFW mRmr38aFrF0OzQzGQJA3rWX3P3e2g2xXLs+nNqDBhSlZHM19DM9yp6DCfyXhy3VP BjlNScrFG/73fEUsPDZPM5lfVkr/Q5Z+gWbkodyTSKaHyn+Wc4wG2xL47PscmyYN OeuPs4+CHsEtOj3xgJoXP8sVp1cBOzX9IhpBVKnWob/j1wcZcFjmP4fbFgXWIqIF aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3473398459401674267201356861000403657 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gifts.mdanderson.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27245981542381556870659850399411044433598344237085081583163226370870789292026500498668459803297685368910878138924358076983142425495607327898985277285086879715124088857104223036465318767707940929360603130421860671480131235323848145552788128465219899374911764416940226458618544966280334932636610785620103398969518884033815337862307394613707589175408862550432885492858190796839615333410098346728880276063938084131033782475706993046607383327050399880149441853013703346392398187415989599974843012657270154460917098878591826191312019887764558412338293688027421481985378881874211800966359418628888713121837906584078232192361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 59e5d6a3e3699687daac31142f9a3f7c0a705f27 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.mdanderson.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006c1cee28dd361124c244bc5d467304c014fa67f8d2fc95eda40cd4d8479c2727a78220551eb08591fda1b11a9a990d60e40f683e94e52967cb58cffe1872a311eda54b82167ed56f9a7ca28e2e8d56d7e4b8173a7f19533142933406c15f48db1ac198fa63613e9d9341f65e0b2c92eb5fc617f14e985290e019f30f48a365e257b965d75e787e25b8127356a5c300a0688c722691850b4ec0fb2f3e6261509f5350e5fe907139b87b4cb4a3b3f45e4bf7292d727ab781459f6b0a49bcdf931b43e2f792083eb5d86937916b5fae13f47a57b7723064551c479f09fc9e977a5f4a4500875aeaff14a17264a0ae823e97b3723d342fe05bfb4ec358d8cf53d51b