cdn.appstore.gene.com
- F. Hoffmann-La Roche AG -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0b:04:97:eb:a3:d6:93:3d:dd:f8:c8:38:d6:31:a0:9e was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
F. Hoffmann-La Roche AG
Organization:
F. Hoffmann-La Roche AG
Locality:
Basel
Country: CH
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:04:97:eb:a3:d6:93:3d:dd:f8:c8:38:d6:31:a0:9eSerial Number (int): 14645358454242018222205251568872300702
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b0:a1:4b:5d:40:9c:f0:6a:d7:75:90:c0:29:e7:ee:77:8c:e6:65:88
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): c2:af:d2:b2:ca:95:12:43:00:34:04:43:e8:c1:dc:04:7e:91:5e:1f
Fingerprint (sha256): 0b:de:fc:a1:fe:27:74:e9:de:14:6c:50:4c:ff:29:4a:8b:d5:3a:02:5f:a5:46:d8:10:0b:9c:c2:41:6c:e0:6d
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate cdn.appstore.gene.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.appstore.gene.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
appmanager.gene.com
appzone-ua.gene.com
appzone-ua.roche.com
appzone.gene.com
appzone.roche.com
cdn.appstore.gene.com
appzone-ua.gene.com
appzone-ua.roche.com
appzone.gene.com
appzone.roche.com
cdn.appstore.gene.com
Other certificates including the domain name gene.com
(limited to 100 certificates)
aem.gene.com
sni.cloudflaressl.com
actnow.gene.com
gcast.gene.com
labintheloop.gene.com
ecd.gene.com
skin.atp.gene.com
partners.gene.com
apsuat.gene.com
brandcenter.gene.com
fmvnav.gene.com
cdn.appstore.gene.com
ecd.gene.com
ecd.gene.com
gworks.gene.com
cad.gene.com
fmvnav-uat.gene.com
learn.gene.com
respwlimss402.gene.com
www.medicalinformation.gene.com
screenshots.gene.com
contractswizuat.gene.com
mcfmvwiz.gene.com
aem.gene.com
foodallergy.gene.com
datatools.gene.com
mld.atp.gene.com
gcampaign.gene.com
mx.gene.com
datatools.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
dnacloud-dev.gene.com
mx-uat.gene.com
ptddt.gene.com
pi-pd-pivision.gene.com
r32web.sap.roche.com
dev-screenshots.gene.com
aem.gene.com
csu1.gene.com
ltd.atp.gene.com
qlikprd.gene.com
ptddt.gene.com
qlikprd.gene.com
sni.cloudflaressl.com
aem.gene.com
cad.gene.com
atp.gene.com
vpn.range.roche.net
gmemori.gene.com
cad-dev.gene.com
prescientstatic.gene.com
aem.gene.com
sni.cloudflaressl.com
logmycommute-dev.gene.com
gride-hff.gene.com
*.gene.com
thestudio.gene.com
epicxcontent.gene.com
contractswizuat.gene.com
pwsm-uat.gene.com
aem.gene.com
*.dev2.converge.gene.com
extsimsval.gene.com
staging.atp.gene.com
*.genehub-sandbox.gene.com
nutropin.atp.gene.com
ecdsolr-dev.gene.com
aem.gene.com
learn-uat.gene.com
mta-sts.gene.com
mss.gene.com
gmemorisolr-qa.gene.com
reswebappprd303.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
her2.atp.gene.com
cdn.appstore.gene.com
gmemori-qa.gene.com
resmsgprd.gene.com
aem.gene.com
mx-uat.gene.com
*.gene.com
*.tst.grml.gene.com
feedback.gene.com
10-36-6-208-gredcloud.gene.com
giohubuat.gene.com
*.gene.com
epicxcontent.gene.com
t-s.gene.com
aem.gene.com
ccp1pweb.ccp1.gene.com
logmycommute.gene.com
logmycommute-dev.gene.com
reswebappprd301.gene.com
giohubuat.gene.com
contractswizuat.gene.com
sni.cloudflaressl.com
developer.gene.com
futurelabplus-network.gene.com
sni.cloudflaressl.com
actnow.gene.com
gcast.gene.com
labintheloop.gene.com
ecd.gene.com
skin.atp.gene.com
partners.gene.com
apsuat.gene.com
brandcenter.gene.com
fmvnav.gene.com
cdn.appstore.gene.com
ecd.gene.com
ecd.gene.com
gworks.gene.com
cad.gene.com
fmvnav-uat.gene.com
learn.gene.com
respwlimss402.gene.com
www.medicalinformation.gene.com
screenshots.gene.com
contractswizuat.gene.com
mcfmvwiz.gene.com
aem.gene.com
foodallergy.gene.com
datatools.gene.com
mld.atp.gene.com
gcampaign.gene.com
mx.gene.com
datatools.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
dnacloud-dev.gene.com
mx-uat.gene.com
ptddt.gene.com
pi-pd-pivision.gene.com
r32web.sap.roche.com
dev-screenshots.gene.com
aem.gene.com
csu1.gene.com
ltd.atp.gene.com
qlikprd.gene.com
ptddt.gene.com
qlikprd.gene.com
sni.cloudflaressl.com
aem.gene.com
cad.gene.com
atp.gene.com
vpn.range.roche.net
gmemori.gene.com
cad-dev.gene.com
prescientstatic.gene.com
aem.gene.com
sni.cloudflaressl.com
logmycommute-dev.gene.com
gride-hff.gene.com
*.gene.com
thestudio.gene.com
epicxcontent.gene.com
contractswizuat.gene.com
pwsm-uat.gene.com
aem.gene.com
*.dev2.converge.gene.com
extsimsval.gene.com
staging.atp.gene.com
*.genehub-sandbox.gene.com
nutropin.atp.gene.com
ecdsolr-dev.gene.com
aem.gene.com
learn-uat.gene.com
mta-sts.gene.com
mss.gene.com
gmemorisolr-qa.gene.com
reswebappprd303.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
her2.atp.gene.com
cdn.appstore.gene.com
gmemori-qa.gene.com
resmsgprd.gene.com
aem.gene.com
mx-uat.gene.com
*.gene.com
*.tst.grml.gene.com
feedback.gene.com
10-36-6-208-gredcloud.gene.com
giohubuat.gene.com
*.gene.com
epicxcontent.gene.com
t-s.gene.com
aem.gene.com
ccp1pweb.ccp1.gene.com
logmycommute.gene.com
logmycommute-dev.gene.com
reswebappprd301.gene.com
giohubuat.gene.com
contractswizuat.gene.com
sni.cloudflaressl.com
developer.gene.com
futurelabplus-network.gene.com
Certificate
The complete raw certificate details for cdn.appstore.gene.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2jCCBcKgAwIBAgIQCwSX66PWkz3d+Mg41jGgnjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMDA0MjkwMDAwMDBaFw0yMjA1MzExMjAwMDBaMF8xCzAJBgNVBAYTAkNIMQ4w DAYDVQQHEwVCYXNlbDEgMB4GA1UEChMXRi4gSG9mZm1hbm4tTGEgUm9jaGUgQUcx HjAcBgNVBAMTFWNkbi5hcHBzdG9yZS5nZW5lLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBANqNqUBSeWQo5ATWMRsaIwAjgLLDXPUTQ5D8UeApRyND LACGu82vNjyxucYxgxdFgIhO+k2B9ZLZl1eFc8yYdi0K102JT27mX1RfikbUFb4Z XrylKO0ZmHfKBLNh+UnEbSNhlbdgZbau+/GQsXwF32Hykkc5GGpAqQZWkWaGckhL 7OZqqbE6CSoW4mDUBfZC3Npvz4NFHlco9iGmkx8ZSylqG0OO7sNtbuS80jKBF2Lk 9y8NyOugiS1VQ0MVOc0YKJrfE9uLIPGuuGDtahuvonvaUj6VHVifd53uJLRCLefG SlqAAgHySGWo1HcFjHb8wjQReUtTBHQwn7kU6Qk4PHkCAwEAAaOCA5EwggONMB8G A1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBSwoUtdQJzw atd1kMAp5+53jOZliDCBhQYDVR0RBH4wfIITYXBwbWFuYWdlci5nZW5lLmNvbYIT YXBwem9uZS11YS5nZW5lLmNvbYIUYXBwem9uZS11YS5yb2NoZS5jb22CEGFwcHpv bmUuZ2VuZS5jb22CEWFwcHpvbmUucm9jaGUuY29tghVjZG4uYXBwc3RvcmUuZ2Vu ZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9H ZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB AgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdl b3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3Qu Y29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYB BAHWeQIEAgSCAW8EggFrAWkAdgApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZc JV3HhAAAAXHHJNT6AAAEAwBHMEUCICA1ZxhmJrn3Ba1C9ztqRkoADaGU5/YJYztT C90rbc3UAiEAgYBMglw8kiUsyHWCDGQlw6lcYU6RVnoHN7D9ODzWFOcAdwBRo7D1 /QF5nFZtuDd4jwykeswbJ8v3nohCmg3+1IsF5QAAAXHHJNVcAAAEAwBIMEYCIQD4 1cVd5w4BBsfrHezvGS9mej4UBQR4ydT+CIG1ajMW4QIhAKDI7PxujpmCv06ExuCa M4GE+Zj7AxUN62y6Zvpkve5VAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jw kGKWBvYAAAFxxyTUrgAABAMARzBFAiEAjEunO1XsSzpErn7qsV7FepDCLAHd1cRk ue9thhE0NIUCICkp72StFZDL33ywH5zUYm5R7ND6AOav0fQrvMY5vZmDMA0GCSqG SIb3DQEBCwUAA4IBAQAqYufrwBSuxrtYHlttDLJRFsSYWSaPPOhu6iXxr1As+dKr MEgkENUl4Mxt9voVWGTUEMC2IVzqzv+UTGKWJsZkGh1e174UbmimZXWc9BSRfQQq meonBYIM4Gk1kJRvpa4CxYGWgGMktF2/bBB4Kjb1F9UEABqheWdhzHkzaD/Sy0nH LQTgCsy3c4xS9qRoO4CewaPDQ9B8RKgjsLiA9s+9+Aozc/H5Wa5HjLVaOIedRiIi Qz+IHbiu0T+GxB9k4DOUeg3mP0KnhC30151lslUaDmoFePeY8oxt7YQYoU+rUB1T vQY8qYc1N7nh/wOlgG5rVsr1b9meLKwJRCvHmhSA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o2pQFJ5ZCjkBNYxGxoj ACOAssNc9RNDkPxR4ClHI0MsAIa7za82PLG5xjGDF0WAiE76TYH1ktmXV4VzzJh2 LQrXTYlPbuZfVF+KRtQVvhlevKUo7RmYd8oEs2H5ScRtI2GVt2Bltq778ZCxfAXf YfKSRzkYakCpBlaRZoZySEvs5mqpsToJKhbiYNQF9kLc2m/Pg0UeVyj2IaaTHxlL KWobQ47uw21u5LzSMoEXYuT3Lw3I66CJLVVDQxU5zRgomt8T24sg8a64YO1qG6+i e9pSPpUdWJ93ne4ktEIt58ZKWoACAfJIZajUdwWMdvzCNBF5S1MEdDCfuRTpCTg8 eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14645358454242018222205251568872300702 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-31 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F. Hoffmann-La Roche AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.appstore.gene.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27589806193172613961915475962614841904946186228961784531848826568468558372651806047602438707933178486764169280386766850381602639387336923219391933014920968861814628885981270799408808703735777810928171389207615988177271796292633754455703919027595488633370722430104978863392201704441266041150383506269888133322423741486707003412956035086382072433793171094924107563197675587287993732718146875549323078408895382780772393503762714510315134106928363568328415303297654148999588892790849527081326444971866751838922492862805073336065369487710012941899440824090373151688350464687772085331792553119637752302396267120309126577273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b0a14b5d409cf06ad77590c029e7ee778ce66588 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmanager.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone-ua.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone-ua.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone.gene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appzone.roche.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.appstore.gene.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 01690076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000171c724d4fa00000403004730450220203567186626b9f705ad42f73b6a464a000da194e7f609633b530bdd2b6dcdd402210081804c825c3c92252cc875820c6425c3a95c614e91567a0737b0fd383cd614e700770051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e500000171c724d55c0000040300483046022100f8d5c55de70e0106c7eb1decef192f667a3e14050478c9d4fe0881b56a3316e1022100a0c8ecfc6e8e9982bf4e84c6e09a338184f998fb03150deb6cba66fa64bdee5500760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000171c724d4ae00000403004730450221008c4ba73b55ec4b3a44ae7eeab15ec57a90c22c01ddd5c464b9ef6d861134348502202929ef64ad1590cbdf7cb01f9cd4626e51ecd0fa00e6afd1f42bbcc639bd9983 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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