ldaps.bauermedia.co.uk

- Bauer Consumer Media Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:19:93:10:f6:01:56:b4:16:c2:d4:b7:44:31:51:11 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bauer Consumer Media Limited

Organization: Bauer Consumer Media Limited
Organization unit: IT
Locality: Peterborough
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:19:93:10:f6:01:56:b4:16:c2:d4:b7:44:31:51:11
Serial Number (int): 9437386249955049612263702263418147089
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f0:43:59:cd:ee:16:4f:ad:90:eb:79:da:7a:b4:09:56:38:70:92:27
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): cf:20:bb:47:2b:b7:ea:27:82:c8:31:ff:81:94:c2:d1:85:54:da:49
Fingerprint (sha256): 0d:fd:46:1f:58:72:43:75:90:b0:2b:7f:0e:b9:d2:d2:d7:01:2f:1e:84:88:2e:62:18:dd:94:5e:41:aa:d7:e0

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ldaps.bauermedia.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ldaps.bauermedia.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ldaps.bauermedia.co.uk
msadsdmz01.bauer-uk.bauermedia.group

Other certificates including the domain name bauermedia.co.uk

(limited to 100 certificates)
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
sip.bauermedia.co.uk
news.bauermedia.co.uk
mail.bauermedia.co.uk
data.bauermedia.co.uk
lync.bauermedia.co.uk
mediavine.bauermedia.co.uk
data.bauermedia.co.uk
filesharing.bauermedia.co.uk
www.bauermedia.co.uk
mediavine.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
ldaps.bauermedia.co.uk
mail.bauermedia.co.uk
news.bauermedia.co.uk
ldaps.bauermedia.co.uk
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
uat-masterdataservice.bauermedia.co.uk
dse.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lync.bauermedia.co.uk
sip.bauermedia.co.uk
dse.bauermedia.co.uk
bauermedia.co.uk
ldaps.bauermedia.co.uk
creative.bauermedia.co.uk
data.bauermedia.co.uk
dse.thompson-valves.com
rack.bauermedia.co.uk
*.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
nextcloud.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lyncdiscover.bauermedia.co.uk
magazineanddigital.bauermedia.co.uk
bauermedia.co.uk
mail.bauermedia.co.uk
*.bauermedia.co.uk
production.bauercreative.net
filesharing.csaws.bauermedia.co.uk
www.stg.bauermedia.co.uk
careershub.bauermedia.co.uk
mediastorage-lls.bauermedia.co.uk
www.bauermedia.co.uk
radioawards.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
*.bauermedia.co.uk
nextcloud.bauermedia.co.uk
*.data.bauermedia.co.uk
www.bauermedia.co.uk
my.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
bauermedia.co.uk
*.bauermedia.co.uk
myvpn.bauermedia.co.uk
www.bauermedia.co.uk
bauermedia.co.uk
fbhost.bauermedia.co.uk
bauermedia.co.uk
data.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
www.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
mail.bauermedia.co.uk
sip-pbo.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
dse.bauermedia.co.uk
mail.bauermedia.co.uk
myview.bauermedia.co.uk
kibana.csaws.bauermedia.co.uk
*.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
*.data.bauermedia.co.uk
digitalsales.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
*.bauermedia.co.uk
mediavine.bauermedia.co.uk
fbhost.bauermedia.co.uk
www.bauermedia.co.uk
formbuilder.bauermedia.co.uk
nextcloud.bauermedia.co.uk

Certificate

The complete raw certificate details for ldaps.bauermedia.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIQBxmTEPYBVrQWwtS3RDFRETANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDAxMTMwMDAwMDBaFw0yMTAzMTMxMjAwMDBaMHkxCzAJBgNVBAYTAkdCMRUw
EwYDVQQHEwxQZXRlcmJvcm91Z2gxJTAjBgNVBAoTHEJhdWVyIENvbnN1bWVyIE1l
ZGlhIExpbWl0ZWQxCzAJBgNVBAsTAklUMR8wHQYDVQQDExZsZGFwcy5iYXVlcm1l
ZGlhLmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubsAVrDc
TlTHpVRVJqJcf4KfMc4nWAi19QDjfrsG61ImtezkQJmGgiil7dMneVD60OAdzaQM
q+nOq2KgqfXR/s1kj64Ht5EViXHGivsetqhZMAhAzs1GJ0zfhnQ/jkrDrpwvEcMP
nVSSTJYYOWuvK5Oj3gfGWqEj4uxlKoN5qXvDd3VRgIXXkMhzBnCM9vtj3oMH1/yW
XQjY0aMG8HgNn6zfASTDbu1hLfBf5m+kgjvRvHjnxKvodvcn8FzjojXnQ9dhVoqF
SOlVIymdhVUeiMMWuRedOgMuAYPgSanQiyShAgCcrwqdCkVUHN4o0VlW2itmprWd
XOJEWFMoVnijLQIDAQABo4IB4TCCAd0wHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht
8qNDFjiebMUwHQYDVR0OBBYEFPBDWc3uFk+tkOt52nq0CVY4cJInMEcGA1UdEQRA
MD6CFmxkYXBzLmJhdWVybWVkaWEuY28udWuCJG1zYWRzZG16MDEuYmF1ZXItdWsu
YmF1ZXJtZWRpYS5ncm91cDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2Vv
dHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCG
SAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v
Q1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6
Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0
cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABI78dhXMAxV
ECyw6tOdERiIpjZ6XmUM2KHVXJFMZTxjD3YqFvwf/EKyZHZPjRHpFwjdZeiHGkr1
oSKNkFBtYR2DqZVTnnh7G5fN67KT4Qq2qX5qChiR1oo1ifmDLX2NFFyQLZbNv2TK
R7KZRih//YCJjW/4cHcWjnrDmHltsQQ1MBhfuScEuL+cpI1x4b1mZXqKWrY3knxl
N/h3moe+VgSrgm5kp9GVu4EJV+eWRsByky+EKR5sA8eAq6HA1qciLBKvy1ANNm1o
kb8i3PqAe2SBhhArlw9CvXCoYTiT/i8e1NNPV+rOk4LBbWU92y4O/OwEKCKomzOZ
j/r4BhqWCKc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubsAVrDcTlTHpVRVJqJc
f4KfMc4nWAi19QDjfrsG61ImtezkQJmGgiil7dMneVD60OAdzaQMq+nOq2KgqfXR
/s1kj64Ht5EViXHGivsetqhZMAhAzs1GJ0zfhnQ/jkrDrpwvEcMPnVSSTJYYOWuv
K5Oj3gfGWqEj4uxlKoN5qXvDd3VRgIXXkMhzBnCM9vtj3oMH1/yWXQjY0aMG8HgN
n6zfASTDbu1hLfBf5m+kgjvRvHjnxKvodvcn8FzjojXnQ9dhVoqFSOlVIymdhVUe
iMMWuRedOgMuAYPgSanQiyShAgCcrwqdCkVUHN4o0VlW2itmprWdXOJEWFMoVnij
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9437386249955049612263702263418147089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Peterborough'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bauer Consumer Media Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ldaps.bauermedia.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23446300207847314331694248355878493119396736367815614392586906481647941015216632812014036400838077547112342319594037354033265444138484188855788870507738659893359843939167267519525687999189739597874797601013991696915475206718115674201622480174682156297389813549452989674436986163042545726579443070546068492469541186853175335289851957095628371137976054380341953049388412151295435109060832645432284034596560545401820468260184313792396356042570977394917120038477937807278138461783047174665161283371906570676218497200228677175113948427724279986973862496976684300555121045912754150651073382627258782730177260793963602289453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f04359cdee164fad90eb79da7ab4095638709227
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldaps.bauermedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msadsdmz01.bauer-uk.bauermedia.group'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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