gmemori-qa.gene.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 09:10:0e:89:c9:09:00:c2:54:c4:e7:97:49:68:32:9e was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gmemori-qa.gene.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:10:0e:89:c9:09:00:c2:54:c4:e7:97:49:68:32:9eSerial Number (int): 12046423582010886567034439468315062942
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c8:ce:4e:f7:95:d4:95:f0:50:a9:8a:bf:9e:bf:e5:d4:aa:f8:3a:b2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 91:4d:9f:45:34:a9:22:ac:32:4d:e7:16:35:93:db:76:94:5d:99:f2
Fingerprint (sha256): 0b:e5:70:3f:a4:d6:55:da:a1:9c:d3:01:dc:a0:1b:e5:6c:99:ec:c5:ed:eb:a0:68:9f:62:06:89:ae:89:2b:35
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate gmemori-qa.gene.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gmemori-qa.gene.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gmemori-qa.gene.com
Other certificates including the domain name gene.com
(limited to 100 certificates)
aem.gene.com
sni.cloudflaressl.com
actnow.gene.com
gcast.gene.com
labintheloop.gene.com
ecd.gene.com
skin.atp.gene.com
partners.gene.com
apsuat.gene.com
brandcenter.gene.com
fmvnav.gene.com
cdn.appstore.gene.com
ecd.gene.com
ecd.gene.com
gworks.gene.com
cad.gene.com
fmvnav-uat.gene.com
learn.gene.com
respwlimss402.gene.com
www.medicalinformation.gene.com
screenshots.gene.com
contractswizuat.gene.com
mcfmvwiz.gene.com
aem.gene.com
foodallergy.gene.com
datatools.gene.com
mld.atp.gene.com
gcampaign.gene.com
mx.gene.com
datatools.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
dnacloud-dev.gene.com
mx-uat.gene.com
ptddt.gene.com
pi-pd-pivision.gene.com
r32web.sap.roche.com
dev-screenshots.gene.com
aem.gene.com
csu1.gene.com
ltd.atp.gene.com
qlikprd.gene.com
ptddt.gene.com
qlikprd.gene.com
sni.cloudflaressl.com
aem.gene.com
cad.gene.com
atp.gene.com
vpn.range.roche.net
gmemori.gene.com
cad-dev.gene.com
prescientstatic.gene.com
aem.gene.com
sni.cloudflaressl.com
logmycommute-dev.gene.com
gride-hff.gene.com
*.gene.com
thestudio.gene.com
epicxcontent.gene.com
contractswizuat.gene.com
pwsm-uat.gene.com
aem.gene.com
*.dev2.converge.gene.com
extsimsval.gene.com
staging.atp.gene.com
*.genehub-sandbox.gene.com
nutropin.atp.gene.com
ecdsolr-dev.gene.com
aem.gene.com
learn-uat.gene.com
mta-sts.gene.com
mss.gene.com
gmemorisolr-qa.gene.com
reswebappprd303.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
her2.atp.gene.com
cdn.appstore.gene.com
gmemori-qa.gene.com
resmsgprd.gene.com
aem.gene.com
mx-uat.gene.com
*.gene.com
*.tst.grml.gene.com
feedback.gene.com
10-36-6-208-gredcloud.gene.com
giohubuat.gene.com
*.gene.com
epicxcontent.gene.com
t-s.gene.com
aem.gene.com
ccp1pweb.ccp1.gene.com
logmycommute.gene.com
logmycommute-dev.gene.com
reswebappprd301.gene.com
giohubuat.gene.com
contractswizuat.gene.com
sni.cloudflaressl.com
developer.gene.com
futurelabplus-network.gene.com
sni.cloudflaressl.com
actnow.gene.com
gcast.gene.com
labintheloop.gene.com
ecd.gene.com
skin.atp.gene.com
partners.gene.com
apsuat.gene.com
brandcenter.gene.com
fmvnav.gene.com
cdn.appstore.gene.com
ecd.gene.com
ecd.gene.com
gworks.gene.com
cad.gene.com
fmvnav-uat.gene.com
learn.gene.com
respwlimss402.gene.com
www.medicalinformation.gene.com
screenshots.gene.com
contractswizuat.gene.com
mcfmvwiz.gene.com
aem.gene.com
foodallergy.gene.com
datatools.gene.com
mld.atp.gene.com
gcampaign.gene.com
mx.gene.com
datatools.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
dnacloud-dev.gene.com
mx-uat.gene.com
ptddt.gene.com
pi-pd-pivision.gene.com
r32web.sap.roche.com
dev-screenshots.gene.com
aem.gene.com
csu1.gene.com
ltd.atp.gene.com
qlikprd.gene.com
ptddt.gene.com
qlikprd.gene.com
sni.cloudflaressl.com
aem.gene.com
cad.gene.com
atp.gene.com
vpn.range.roche.net
gmemori.gene.com
cad-dev.gene.com
prescientstatic.gene.com
aem.gene.com
sni.cloudflaressl.com
logmycommute-dev.gene.com
gride-hff.gene.com
*.gene.com
thestudio.gene.com
epicxcontent.gene.com
contractswizuat.gene.com
pwsm-uat.gene.com
aem.gene.com
*.dev2.converge.gene.com
extsimsval.gene.com
staging.atp.gene.com
*.genehub-sandbox.gene.com
nutropin.atp.gene.com
ecdsolr-dev.gene.com
aem.gene.com
learn-uat.gene.com
mta-sts.gene.com
mss.gene.com
gmemorisolr-qa.gene.com
reswebappprd303.gene.com
anaaistst01.gene.com
sni.cloudflaressl.com
her2.atp.gene.com
cdn.appstore.gene.com
gmemori-qa.gene.com
resmsgprd.gene.com
aem.gene.com
mx-uat.gene.com
*.gene.com
*.tst.grml.gene.com
feedback.gene.com
10-36-6-208-gredcloud.gene.com
giohubuat.gene.com
*.gene.com
epicxcontent.gene.com
t-s.gene.com
aem.gene.com
ccp1pweb.ccp1.gene.com
logmycommute.gene.com
logmycommute-dev.gene.com
reswebappprd301.gene.com
giohubuat.gene.com
contractswizuat.gene.com
sni.cloudflaressl.com
developer.gene.com
futurelabplus-network.gene.com
Certificate
The complete raw certificate details for gmemori-qa.gene.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIQCRAOickJAMJUxOeXSWgynjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODA4MTcwMDAwMDBaFw0yMDA5MTUxMjAwMDBaMB4xHDAaBgNVBAMTE2dtZW1v cmktcWEuZ2VuZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR S5jwa0oMPeURVZuKl4ko2PAG4scOhUBMMqsb3kAqrdKGGsRgOClKqDkFnqXWRBrt Wlmd2cRp35BEVr4vYHGWQZmujGZUDBnEO1Zr42cz4UAR5cMX/ResXVC/5hRlGL1o a702zShYpKNRKRbkSbbK4jJUmETNy0R6M6HgFu8TVu+VODgBEy97BaQKcfmNq9AZ /XbGLUrndjYffTW2KWan7VFxGnbnSnTF6yRmKAIswyFdxjGWRZNYZYDE1pIPJG9o U6NX2ygguLYagvF7wMR8vqfvrMovV8VxOz+xP8AQrqes7HYO0f0kEtquqjjpA6Bz wd66HyVRKjzM51/bhOS9AgMBAAGjggG4MIIBtDAfBgNVHSMEGDAWgBSQWP+wnHWo UVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUyM5O95XUlfBQqYq/nr/l1Kr4OrIwHgYD VR0RBBcwFYITZ21lbW9yaS1xYS5nZW5lLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0 dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNV HSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwJgYIKwYB BQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFo dHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0 MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBABz+mAj/G1nt7/Lom2zN/FQl5Wb/L6wonQMOyuiycHa09teVKH7gGPeHGBOV ehXLF92EsvvMlaBaon6FdoRIz8Emq0WLqok9jK+q6LkCQa6UUAERi21yAHh948Z4 X2mzMmjWIEe7eafsBE5NSTEBuiz7fGfYqhkAtnwaXYnrYRioIQNUpdOlfYSzE0z9 sqssGYhMwtwT1c55BEbG+KcEoQcUlmOuS2b97D0Pw3ia0TdKaflHMVOWE6MB2621 lwxwLVNLPvNBylZeBRDhl0V3qZg9nNy+X/6Q+YHP/66u7bVAsD9XenJbVBSAEpO0 6HNe0Iq7FT6yT3JnUY4JWRgLeRM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UuY8GtKDD3lEVWbipeJ KNjwBuLHDoVATDKrG95AKq3ShhrEYDgpSqg5BZ6l1kQa7VpZndnEad+QRFa+L2Bx lkGZroxmVAwZxDtWa+NnM+FAEeXDF/0XrF1Qv+YUZRi9aGu9Ns0oWKSjUSkW5Em2 yuIyVJhEzctEejOh4BbvE1bvlTg4ARMvewWkCnH5javQGf12xi1K53Y2H301tilm p+1RcRp250p0xeskZigCLMMhXcYxlkWTWGWAxNaSDyRvaFOjV9soILi2GoLxe8DE fL6n76zKL1fFcTs/sT/AEK6nrOx2DtH9JBLarqo46QOgc8Heuh8lUSo8zOdf24Tk vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12046423582010886567034439468315062942 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gmemori-qa.gene.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26421084214358573055354296872552394613699873972317707702401019965933867344119119661079733976884053384142350910421393303534623848241263323096944301357219503792109666595499413815978788292763953310582312639844520977968788876663570712840875474274734797035418732830359433944325029428676327425295727707351305046951694258783505784032112668498055423614559393645912689081025231576257902369788160638177876076866575020385933672667005039494259082776410746248569768375133705205230777896954343913636741584035268669539290401231979628357315646675021947791845413478837457317670045115986309666299795176752924115961579788327309386507453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c8ce4ef795d495f050a98abf9ebfe5d4aaf83ab2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmemori-qa.gene.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001cfe9808ff1b59edeff2e89b6ccdfc5425e566ff2fac289d030ecae8b27076b4f6d795287ee018f7871813957a15cb17dd84b2fbcc95a05aa27e85768448cfc126ab458baa893d8cafaae8b90241ae945001118b6d7200787de3c6785f69b33268d62047bb79a7ec044e4d493101ba2cfb7c67d8aa1900b67c1a5d89eb6118a8210354a5d3a57d84b3134cfdb2ab2c19884cc2dc13d5ce790446c6f8a704a107149663ae4b66fdec3d0fc3789ad1374a69f94731539613a301dbadb5970c702d534b3ef341ca565e0510e1974577a9983d9cdcbe5ffe90f981cfffaeaeedb540b03f577a725b5414801293b4e8735ed08abb153eb24f7267518e0959180b7913