*.atbank.nl
- Amsterdam Trade Bank N.V. -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 0c:6f:8d:25:97:69:b0:e4:a9:30:85:2a:45:6c:4f:5e was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Amsterdam Trade Bank N.V.
Organization:
Amsterdam Trade Bank N.V.
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:6f:8d:25:97:69:b0:e4:a9:30:85:2a:45:6c:4f:5eSerial Number (int): 16529943698772493303555503251478302558
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 31:11:dc:8d:1b:ce:72:4d:84:26:cd:03:cb:ba:6c:f8:9d:fd:23:03
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 75:50:30:8e:6f:91:cd:2c:4f:4e:da:3d:88:2d:e3:f3:0d:72:c7:5c
Fingerprint (sha256): 12:c0:bb:8f:11:65:e6:bd:62:fb:22:cf:c5:a6:0f:a7:d9:3b:4a:55:a6:7f:c7:ef:c7:fa:05:74:89:d8:ba:27
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate *.atbank.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.atbank.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.atbank.nl
atbank.nl
atbank.nl
Other certificates including the domain name atbank.nl
(limited to 100 certificates)
online.atbank.nl
www.atbank.nl
*.test.atbank.nl
online.atbank.nl
*.atbank.nl
webra.atbank.nl
sts.atbank.nl
fibr.com
atbconnect.atbank.nl
*.atbank.nl
mobile.atbank.nl
fibr.com
*.test.atbank.nl
transfer.atbank.nl
mobile.atbank.nl
portal.atbank.nl
*.test.atbank.nl
transfer.atbank.nl
bdrc.acc.atbank.nl
www.atbank.nl
mdm.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
transfer.atbank.nl
mdm.atbank.nl
*.atbank.nl
online.atbank.nl
mobile.atbank.nl
*.atbank.nl
www.atbank.nl
portal.atbank.nl
www.atbank.nl
fibr.com
remote.atbank.nl
*.test.atbank.nl
webra.atbank.nl
sts.atbank.nl
online.atbank.nl
fibr.com
bdrc.atbank.nl
online.atbank.nl
online.atbank.nl
transfer.atbank.nl
*.acc.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
*.atbank.nl
mail10.atbank.nl
portal.atbank.nl
www.atbank.nl
*.acc.atbank.nl
mobile.atbank.nl
transfer.atbank.nl
*.atbank.nl
atbconnect.atbank.nl
www.atbank.nl
*.test.atbank.nl
online.atbank.nl
*.atbank.nl
webra.atbank.nl
sts.atbank.nl
fibr.com
atbconnect.atbank.nl
*.atbank.nl
mobile.atbank.nl
fibr.com
*.test.atbank.nl
transfer.atbank.nl
mobile.atbank.nl
portal.atbank.nl
*.test.atbank.nl
transfer.atbank.nl
bdrc.acc.atbank.nl
www.atbank.nl
mdm.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
transfer.atbank.nl
mdm.atbank.nl
*.atbank.nl
online.atbank.nl
mobile.atbank.nl
*.atbank.nl
www.atbank.nl
portal.atbank.nl
www.atbank.nl
fibr.com
remote.atbank.nl
*.test.atbank.nl
webra.atbank.nl
sts.atbank.nl
online.atbank.nl
fibr.com
bdrc.atbank.nl
online.atbank.nl
online.atbank.nl
transfer.atbank.nl
*.acc.atbank.nl
portal.atbank.nl
online.atbank.nl
portal.atbank.nl
*.atbank.nl
mail10.atbank.nl
portal.atbank.nl
www.atbank.nl
*.acc.atbank.nl
mobile.atbank.nl
transfer.atbank.nl
*.atbank.nl
atbconnect.atbank.nl
Certificate
The complete raw certificate details for *.atbank.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIQDG+NJZdpsOSpMIUqRWxPXjANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTE4MDQzMDAwMDAwMFoXDTIwMDIwNjEyMDAwMFowczELMAkGA1UEBhMCTkwx FjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxEjAQBgNVBAcTCUFtc3RlcmRhbTEiMCAG A1UEChMZQW1zdGVyZGFtIFRyYWRlIEJhbmsgTi5WLjEUMBIGA1UEAwwLKi5hdGJh bmsubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOmlJt3ziIURl gdkpzb55dLxTqM83epAmw3KgyI+mLINsqPOCu15LJyKxx56QthAbknQkxraqk+lF sxWBnf9jZ64M9fgfhc6SWNqkV2uyT/VWwx7uEFzpnBDzcTLIRR7YmAbmYpC+Dtko uruChAkjf8WhP2Es3jFRuwiCGNHKZx5rnbmo9Q+lfKYCr23Zsy9f/ZxvKBWSoAop 0vDdz6eWwXr89+fkE+5EFOLgh7QERAhpDn1ixgJxIXy+l0Zblnuls9ovl8ppRaxO 7ZoolU/gLQeMdGG9jL0o6DLY5sytHvo4jc+WQtaqmQdvIppuXVOGSeNnRmvnq0c8 L2RTGPN1AgMBAAGjggMqMIIDJjAfBgNVHSMEGDAWgBSUT9Rdi+Sk4qaA/v3Y+QDv o74CVzAdBgNVHQ4EFgQUMRHcjRvOck2EJs0Dy7ps+J39IwMwIQYDVR0RBBowGIIL Ki5hdGJhbmsubmyCCWF0YmFuay5ubDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9j ZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcmwwTAYDVR0gBEUw QzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzAIBgZngQwBAgIwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzAB hhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDov L2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwCQYD VR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYApLkJkLQYWBSHuxOi zGdwCjw1mAT5G9+443fNDsgN3BAAAAFjF42Z9gAABAMARzBFAiEAtquTQNgKm77w vI7jSV6n+D0+dCmfuEkP4QuHYS7ij7oCIBm3nBV311fVT2K78VE0qDkNQyJQ4aKQ 36Qtzo6nwHUGAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFj F42byAAABAMARzBFAiAxjD/z6AZtwbdL9mZLL2aKkWDeGOR6jD3Hog+k8tjvpwIh AIrZqDP9HFJBA5yLcXrb2h7zB1zkKfOtrQoxudLj3XESAHYAu9nfvB+KcbWTlCOX qpJ7RzhXlQqrUugakJZkNo4e0YUAAAFjF42aCAAABAMARzBFAiEAjOwsOWVI+/2j MBCrSY3+649j3o+VhQvRs0lQ8Y/epPMCIEGSN+HJwjtuvORyjQKTG/9eDzt4+fsc TP7gkCFH1bl/MA0GCSqGSIb3DQEBCwUAA4IBAQAQ6v/88Xb4CqeWieLUBiPxaFhA Ftr0Eb4goLxU5VdUukLOzU0m1s6/MZ0rpxh28p0+UeYMSyBZp0t0fLrNQhYyU+iN omr5PFu21L+gmU8k6xpfs65LsCf6YfHU0F9p12Ve3NRMER8zT0AzU5xZQg0x6B1c 6osfiQqqV0/wsuAweDlmxM8geh/PI31AicBHLjVLpcxcxnZJwj/ZVyTy6e8x+uoz VUWHwlxlRRhDynEr6+TAKUalxNXagO9qOeoo+Mj9RmKUo3IdNDxLpPoJsidbwDQS FW1tzSIv5XJG0GIB72JBPM0XQimPqSavGu5T+Ir4Czs+Xes2Hnz842fTTo9B -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jppSbd84iFEZYHZKc2+ eXS8U6jPN3qQJsNyoMiPpiyDbKjzgrteSycisceekLYQG5J0JMa2qpPpRbMVgZ3/ Y2euDPX4H4XOkljapFdrsk/1VsMe7hBc6ZwQ83EyyEUe2JgG5mKQvg7ZKLq7goQJ I3/FoT9hLN4xUbsIghjRymcea525qPUPpXymAq9t2bMvX/2cbygVkqAKKdLw3c+n lsF6/Pfn5BPuRBTi4Ie0BEQIaQ59YsYCcSF8vpdGW5Z7pbPaL5fKaUWsTu2aKJVP 4C0HjHRhvYy9KOgy2ObMrR76OI3PlkLWqpkHbyKabl1ThknjZ0Zr56tHPC9kUxjz dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16529943698772493303555503251478302558 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam Trade Bank N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.atbank.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26538847719099748830262064010601658338082722819759805606960988315159180011158733089309081923464826786206329625812546585081620320899677034752575391593284709447160894520224784487896718984990316606800675199309965274390856190671484150873659954726844604026562709973198272413401740002460726022606876106799417347947896726360222340286505534719728474969187652215456640626311463448274772076488168292592727782730381468242307936447788625592136622887570957027081423453099534328635832995757129857961183844097983373951860389967407089290963509429824435240673950746088151946544627997021179884660852222581983222826216918097565293540213 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3111dc8d1bce724d8426cd03cbba6cf89dfd2303 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atbank.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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