simg.ionos.com

- IONOS Inc. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:8f:0a:8e:a1:b4:94:ff:32:48:2d:a2:f3:0c:bb:f7 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

IONOS Inc.

Organization: IONOS Inc.
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:8f:0a:8e:a1:b4:94:ff:32:48:2d:a2:f3:0c:bb:f7
Serial Number (int): 3401168566880822485477241749062335479
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 00:3e:90:04:a2:7c:7a:06:c4:f5:c7:84:48:d2:5e:a2:0f:a6:61:2c
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 4d:c1:ae:07:c6:0f:c2:d1:71:d1:43:74:fb:df:6f:ff:72:df:af:94
Fingerprint (sha256): 0b:66:5b:91:9a:2b:48:d1:73:be:e5:0d:86:41:6e:e1:8c:6f:bc:7f:c8:c8:9b:a6:d1:e9:99:ba:a0:2e:81:9d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate simg.ionos.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for simg.ionos.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

simg.ionos.com

Other certificates including the domain name ionos.com

(limited to 100 certificates)
ssl.ionos.de
*.cert062.stage.mongodb.de-fkb.ionos.com
api.analyze-eu.ionos.com
r1.m-e9d6cbc3331b1508.mongodb.de-txl.ionos.com
myw5.ionos.com
dcd.ionos.com
partnerportal.ionos.com
backup.ionos.com
ntld-status.ionos.de
pg-77n6h8jrvqg58gpf.postgresql.de-txl.ionos.com
cdn.ionos.de
hidrive.ionos.com
devops.ionos.com
qa.dns.de-txl.ionos.com
pg-hhqovess3o8bupu4.postgresql.de-txl.ionos.com
registrar.ionos.de
ssl.ionos.de
hidrive.ionos.com
xadmin.exchange.1and1.us
passwort.ionos.de
upselling.ionos.de
bf7c540a-69c2-4623-b6c6-311a5f6cb6ef.qa.redis.de-txl.ionos.com
loki.stage42.cluster.ionos.com
1.exchange.1and1.us
myw2.ionos.com
oc.ionos.com
*.cert052.stage.mongodb.de-fkb.ionos.com
dcd.ionos.com
xadmin.exchange2019.ionos.com
laas-rest-api.vnf.stg.cluster.ionos.com
pg-3g4jvjf77mjsm6bn.postgresql.de-txl.ionos.com
postmaster-contact.ionos.de
server-services.ionos.de
login.ionos.de
hidrive-help.ionos.com
vertrag.ionos.de
shop.ionos.com
myw1.ionos.com
api.analyze-us.ionos.com
myw3.ionos.com
location-marketing.ionos.de
ias.ionos.de
screenshot.ionos.com
museum.k8s.cluster.ionos.com
myw1.ionos.com
ftp-fra.ionos.com
auth.registry.k8s.cluster.ionos.com
simg.ionos.com
jobs.ionos.de
r2.m-46051fb525db90e8.mongodb.de-fra.ionos.com
digital-success.ionos.de
login.ionos.de
museum.k8s.cluster.ionos.com
reseller-api.ionos.com
*.b0a2b2c0241e.logging.de-txl.ionos.com
*.m-00419ac6f799f1f2.mongodb.de-fra.ionos.com
ftp-fra.ionos.com
r2.m-9704cc5f2b3e83b6.mongodb.de-fra.ionos.com
cmc.ionos.com
pg-g7ksht3hh9as1hk9.postgresql.de-txl.ionos.com
*.m-f3570c5cf4213848.mongodb.de-fra.ionos.com
myw3.ionos.com
backup.ionos.com
ntld-status.ionos.de
ftp-las.ionos.com
dcd.ionos.com
jobs.ionos.de
*.m-1913f83f044a5178.mongodb.de-txl.ionos.com
ionos.com
emailarchive.ionos.com
IONOS SE
*.m-dce5f2b30ac22b6f.mongodb.de-fra.ionos.com
jobs.ionos.de
*.m-3a6d2fe88d0e4692.mongodb.es-vit.ionos.com
websitebuilder.ionos.com
cmc.ionos.com
analytics.ionos.de
exchange2019.ionos.com
*.onehoster.ionos.com
logo-generator.ionos.com
pg-7jb2eshpk4i6ps4k.postgresql.de-fra.ionos.com
whstatic.ionos.com
xadmin.exchange.1and1.us
pg-kc581dr2ummrc965.postgresql.de-txl.ionos.com
*.m-523852f5230d6d13.mongodb.de-txl.ionos.com
r2.m-356e385b5d1de0d0.mongodb.de-fra.ionos.com
*.m-9a35053173df9b7b.mongodb.de-fra.ionos.com
*.onehoster.ionos.com
jobs.ionos.de
r2.m-46051fb525db90e8.mongodb.de-fra.ionos.com
ftp-ewr.ionos.com
ipc.help.ionos.com
ionos.com
*.stage.cr.es-vit.ionos.com
*.m-13578c5bb955e91e.mongodb.de-txl.ionos.com
karma.infra.cluster.ionos.com
pixel.ionos.de
digital-success.ionos.de
*.dev-cr.ionos.com
iaas-panel.ionos.com

Certificate

The complete raw certificate details for simg.ionos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbjCCBlagAwIBAgIQAo8KjqG0lP8ySC2i8wy79zANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIzMDkyMDAwMDAwMFoXDTI0MTAwMjIzNTk1OVowaTELMAkGA1UEBhMCVVMx
FTATBgNVBAgTDFBlbm5zeWx2YW5pYTEVMBMGA1UEBxMMUGhpbGFkZWxwaGlhMRMw
EQYDVQQKEwpJT05PUyBJbmMuMRcwFQYDVQQDEw5zaW1nLmlvbm9zLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALMvsDqwNhXpm5JYFNY4YkWjRLHS
uzfZpAeXTtLnNfqzDuOxu5HEMMIGXYVF5/Oj6ch6xtTcpz+mours9Hyh7dwTdPC8
Yiy6PApnoRSUrlZO4qX/FgaVIoGeEXaatLaOAQ0xhDEWNhuCstFqIkCPBlJlQNpB
ttzrwb7SvQrfolxENTaKh/hsAddubduqiviY6bIfKzhOCU+gmJIJDQT7WzlyPni0
Bowir9KdPdN7850aFYQT1UPGaoNYAl8fzrRYDJt3L2UxjYzQC7Xi+RukQrHs90G5
RpLP2TQSQmD8Diw5NBmOEy5qsRm6Ijx0PVzis1OvoCHqJ/M7E5VcdqgXCkqQS8vn
m6YDJ7TnSUq4oyprvMkHoZT94u2HUnWu3gFpAOSxPPu1SbC5f3JQKABj4afP5Vsw
uXWZypqz+ZVusTQiaNOyF3xIveqhwgw53tVRQGQleL03Bg08PQGIRgGU3hieCk2S
a9U18f2py3C9ti/WDWs7l+z/CTFhiTrPz+j5RRCCYInumqh770Z2CyeX2D/2jNbT
lgrFnwUKP12Xd1Gn6+pcU3aYR2av5nQqdnVxchZ5W2BIUfBrYqeh2DFYPGpVONPg
1oKitKRpK1N9n/MaVDA8YrSl5s28YCb5aNKFkL4CoXVbkx22YsKgMZCrHe9QtzYz
d3I3a/eBxi8wmaC/AgMBAAGjggMZMIIDFTAfBgNVHSMEGDAWgBSUT9Rdi+Sk4qaA
/v3Y+QDvo74CVzAdBgNVHQ4EFgQUAD6QBKJ8egbE9ceESNJeog+mYSwwGQYDVR0R
BBIwEIIOc2ltZy5pb25vcy5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggr
BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0
oDKgMIYuaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcx
LmNybDB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMu
Z2VvdHJ1c3QuY29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5nZW90cnVz
dC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNydDAMBgNVHRMBAf8EAjAAMIIBgAYK
KwYBBAHWeQIEAgSCAXAEggFsAWoAdwDuzdBk1dsazsVct520zROiModGfLzs3sNR
SFlGcR+1mwAAAYqx1PJKAAAEAwBIMEYCIQC2b3pf/Ok89xCD5qLy9GVuBfVpv+6d
gT1v57Tg+75nHwIhAJcia78HEBnfgGLAF25Ualvgp9Y7djBdm5nUWGSy2Jj1AHcA
SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGKsdTyaQAABAMASDBG
AiEA3QzlKjWqgZDC4/UHlDWdPt7mP0FVeayc+8bRWaUPnNYCIQCqY27zP7Dr0une
dNbXEHEs0lyyToc9m7RpI4ld5ZTXZAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSF
NL2kPTBI1/urAAABirHU8jsAAAQDAEcwRQIgMpc2xNkaA9bGmuxfGlAaeLfX+gF9
oJe7nLaZNOCp/isCIQCP2TEQB0mJyFnDn9dtU318BuXlUcKQrk7FCM7VbY4xNzAN
BgkqhkiG9w0BAQsFAAOCAQEAKi+bg27Mf/hoKxM5znZ+HHDJO4PVDQuwObc4v4hU
YlI/WRIfpL8SjITNXuH2aP2aNJEvMNxzNPxt/+KTKb9OhN5SyMFIFbp+BFJnUx+R
mYo8AWl2H9QWyd0vreAU9Jf3I8K668zxvPMcQvXY5sNCdHaJUHy2lmKkvg8D5cKj
vbsMvE6ya0e1soB9ZH5HSWoR+mP6qdZ0PxU0uewcz4f2GEwzvgOYOCn7JEqWzYCi
Z8gVvTJ+s/NETVOVojmb9ukkU3zILNA0lX63CQ7pmRmzO1PEDNafiGtM9xckg3mG
0lso8pEQVj8Y8q/zP+LAhf47itrlIn3CYh/b4kFyRcWdRA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3401168566880822485477241749062335479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'simg.ionos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731016255675083564442235333234009234759734309704343179525888363284784079146268429528071838575228962433951973921740285469412804704329733291211672905694209045264102559529164260225933583420967394886279884723066432279568149313164090104997714446221641863854295641067458396972633295624544199605156502757409182707217847723621038693874331524121907550189935675956792520828184481584263487659370384996884278403949397417540089494382654051417484466768596806078964452592262628446913786016845155944323251379422548386557848088864703575295214820234360316927549361721025482552087216628674733729527025493660261617004495261907791429047028602123371693951244662917040157493166590364446752400029087745617063934513709238967792689302764130272193595342170729690459471715960595384500607309609815806798435280447876505674433473993452711247878292271749629153628045074642592554178838055899731962773214645197536532110945776782773087383189217628995285229690095510257691404412480764039569615992350255833672152394852036051188854701028336847499040218586568511776273830480773336911496233971797141138559403179872704552497147120597848667436705651611726920863453496786149446897188803106113766269726173604100294637403127285136644633097979176660491190514301184565116732547263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							003e9004a27c7a06c4f5c78448d25ea20fa6612c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simg.ionos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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