lrm.avigilon.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 07:d7:70:f5:38:e9:cc:69:28:17:81:71:14:41:be:3f was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lrm.avigilon.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:d7:70:f5:38:e9:cc:69:28:17:81:71:14:41:be:3fSerial Number (int): 10423230853468629600835984245229993535
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 69:a6:bd:a0:86:45:6d:1f:dd:d4:f7:1b:0d:f6:5d:01:ed:c2:0b:c9
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 73:df:3d:a7:bd:8a:91:0a:86:9f:0c:12:ca:a3:63:59:b3:c6:18:01
Fingerprint (sha256): 0f:8f:fa:47:b5:ff:4f:1e:58:b9:f5:d7:c9:8c:05:53:2a:06:27:12:c6:f4:04:d5:c2:f2:4b:07:93:ec:13:bf
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate lrm.avigilon.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lrm.avigilon.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lrm.avigilon.com
Other certificates including the domain name avigilon.com
(limited to 100 certificates)
360in1.net
msan2.myabsorb.com
*.cloud.avigilon.com
imperva.com
360stu.net
imperva.com
360stu.net
info.avigilon.com
360in1.net
incapsula.com
msan2.myabsorb.com
incapsula.com
360in1.net
lrm.avigilon.com
na2.alta.avigilon.com
csa.avigilon.com
akamaisecure6.qualtrics.com
blue.avigilon.com
partner.avigilon.com
ers1.avigilon.com
alerts.avigilon.com
exp1-e.avigilon.com
360stu.net
msan2.myabsorb.com
help.avigilon.com
swdp.avigilon.com
msan2.myabsorb.com
msan2.myabsorb.com
mail.avigilon.com
360in1.net
360stu.net
360stu.net
fs.avigilon.com
360stu.net
exp1-e.avigilon.com
alerts.avigilon.com
expressway.avigilon.com
msan2.myabsorb.com
*.blue.avigilon.com
msan2.myabsorb.com
dev.avigilon.com
360stu.net
mail.avigilon.com
hubble.sandbox.alta.avigilon.com
imperva.com
akamaisecure6.qualtrics.com
developer.avigilon.com
akamaisecure6.qualtrics.com
360in1.net
msan2.myabsorb.com
akamaisecure6.qualtrics.com
partners.avigilon.com
360stu.net
360stu.net
eu2.alta.avigilon.com
eu4.alta.avigilon.com
sdt.avigilon.com
ftp.avigilon.com
360stu.net
imperva.com
csa.avigilon.com
cdn.avigilon.com
ers1.avigilon.com
akamaisecure6.qualtrics.com
sdt.avigilon.com
*.avigilon.com
incapsula.com
*.avigilon.com
sdt.avigilon.com
cdn-cms.avigilon.com
imperva.com
developer.avigilon.com
blue.avigilon.com
api.au.cloud.avigilon.com
*.avigilon.com
incapsula.com
msan2.myabsorb.com
hubble.dev.alta.avigilon.com
360stu.net
avigilon.com
incapsula.com
info.avigilon.com
developer.avigilon.com
eu1.aware.ava.uk
api.us.cloud.avigilon.com
hubble.sandbox.alta.avigilon.com
*.cloud.avigilon.com
app.go.avigilon.com
licensing.avigilon.com
akamaisecure6.qualtrics.com
360stu.net
hubble.sandbox.alta.avigilon.com
msan2.myabsorb.com
imperva.com
akamaisecure6.qualtrics.com
imperva.com
360in1.net
msan2.myabsorb.com
imperva.com
sftp.avigilon.com
msan2.myabsorb.com
*.cloud.avigilon.com
imperva.com
360stu.net
imperva.com
360stu.net
info.avigilon.com
360in1.net
incapsula.com
msan2.myabsorb.com
incapsula.com
360in1.net
lrm.avigilon.com
na2.alta.avigilon.com
csa.avigilon.com
akamaisecure6.qualtrics.com
blue.avigilon.com
partner.avigilon.com
ers1.avigilon.com
alerts.avigilon.com
exp1-e.avigilon.com
360stu.net
msan2.myabsorb.com
help.avigilon.com
swdp.avigilon.com
msan2.myabsorb.com
msan2.myabsorb.com
mail.avigilon.com
360in1.net
360stu.net
360stu.net
fs.avigilon.com
360stu.net
exp1-e.avigilon.com
alerts.avigilon.com
expressway.avigilon.com
msan2.myabsorb.com
*.blue.avigilon.com
msan2.myabsorb.com
dev.avigilon.com
360stu.net
mail.avigilon.com
hubble.sandbox.alta.avigilon.com
imperva.com
akamaisecure6.qualtrics.com
developer.avigilon.com
akamaisecure6.qualtrics.com
360in1.net
msan2.myabsorb.com
akamaisecure6.qualtrics.com
partners.avigilon.com
360stu.net
360stu.net
eu2.alta.avigilon.com
eu4.alta.avigilon.com
sdt.avigilon.com
ftp.avigilon.com
360stu.net
imperva.com
csa.avigilon.com
cdn.avigilon.com
ers1.avigilon.com
akamaisecure6.qualtrics.com
sdt.avigilon.com
*.avigilon.com
incapsula.com
*.avigilon.com
sdt.avigilon.com
cdn-cms.avigilon.com
imperva.com
developer.avigilon.com
blue.avigilon.com
api.au.cloud.avigilon.com
*.avigilon.com
incapsula.com
msan2.myabsorb.com
hubble.dev.alta.avigilon.com
360stu.net
avigilon.com
incapsula.com
info.avigilon.com
developer.avigilon.com
eu1.aware.ava.uk
api.us.cloud.avigilon.com
hubble.sandbox.alta.avigilon.com
*.cloud.avigilon.com
app.go.avigilon.com
licensing.avigilon.com
akamaisecure6.qualtrics.com
360stu.net
hubble.sandbox.alta.avigilon.com
msan2.myabsorb.com
imperva.com
akamaisecure6.qualtrics.com
imperva.com
360in1.net
msan2.myabsorb.com
imperva.com
sftp.avigilon.com
Certificate
The complete raw certificate details for lrm.avigilon.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIQB9dw9TjpzGkoF4FxFEG+PzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMDAzMzEwMDAwMDBaFw0yMTAzMzExMjAwMDBaMBsxGTAXBgNVBAMTEGxybS5h dmlnaWxvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxzjq 2pEsVq23R3+GNsmgJlbspZ5qOboknyt4y2VCxRgi1ehA9RqMjACjEexMawXtgnC9 ik/X8JA/eXNywGwyWXR1tSl50wjWtk9PfYUknHjgNVRzkAN5/7sf+ogFcsFGAbmY y8CM2wQ9r0kv29bBtoabWTMFjFwUdjHb371xBsD6mZv91Yw54zFIcEgdf3jbTsvQ I56wRl2plIt3sfC9GSWjD1gXIUMgesUv9pYCbTcRmq8UEGQzZaRU6qoAu08faUCl 6o1WlhIqXuibupkraqvSsbPKmJw4ttINDdKzWn0SmjIDF+8ozggTIg2BTyMFcxMu flM12g84qH271lwDAgMBAAGjggG1MIIBsTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3 se3yo0MWOJ5sxTAdBgNVHQ4EFgQUaaa9oIZFbR/d1PcbDfZdAe3CC8kwGwYDVR0R BBQwEoIQbHJtLmF2aWdpbG9uLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9j ZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBD MDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGG Gmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8v Y2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1Ud EwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAeW 8qhwjUhlQB4sQD1tFUINBef7cdyjPdIAbHKZ/O+RzFjoZHcSFXuYdaIinGv11KEU TaIDqIRCGmIh4GltDG3TAPtagnZc4XiydF5Cv7RQlXYqVObh11ZRDH/3CKzPa9j4 jv+gg4k4elPlKHJbDZAp926RNzVf0xQ0MJzUvBN9RWqHH9mQhQP42hy9vxUR2K26 cNlQ+H6c0KY3hfFMAyNTbVdxjFXkhqVX8LS1prHhTolLmih4s4j0JUGmaN571VKD dGE8x4gdry5QG3oEg3pPh2osy8f7DnP3bJx8mAHAUN5fhgoyN02us55Zzka2XWk8 310yxIjOg1VVtVwxBiI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mc46tqRLFatt0d/hjbJ oCZW7KWeajm6JJ8reMtlQsUYItXoQPUajIwAoxHsTGsF7YJwvYpP1/CQP3lzcsBs Mll0dbUpedMI1rZPT32FJJx44DVUc5ADef+7H/qIBXLBRgG5mMvAjNsEPa9JL9vW wbaGm1kzBYxcFHYx29+9cQbA+pmb/dWMOeMxSHBIHX94207L0COesEZdqZSLd7Hw vRklow9YFyFDIHrFL/aWAm03EZqvFBBkM2WkVOqqALtPH2lApeqNVpYSKl7om7qZ K2qr0rGzypicOLbSDQ3Ss1p9EpoyAxfvKM4IEyINgU8jBXMTLn5TNdoPOKh9u9Zc AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10423230853468629600835984245229993535 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lrm.avigilon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28375620506549705268991109800591212028804817746332500227455299944424757461124265672023850572821037365536286170273178828893575567126071344339870516991624146726731078098648610749968188636108066435806637776578699951597162039134981147793331821345294228031057195581847284984998222083257598313256428029232347315528783770298260436671141925109944437488351849748153113283612053194871025891293530558209633440747580486356374683680671410627920318875697581272183270995326768150523886050054551339927511051834078088816938832291883036403132246130792579871177756269699130748382478402807338015456655379733881418548645639725783318944771 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 69a6bda086456d1fddd4f71b0df65d01edc20bc9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrm.avigilon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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