*.talent-alpha.com

- Talent Alpha, Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:ef:52:75:f6:48:f9:a7:71:8b:67:7d:14:d2:35:67 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Talent Alpha, Inc.

Organization: Talent Alpha, Inc.
Organization unit: Platform Team
State / Province: California
Locality: Burlingame
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ef:52:75:f6:48:f9:a7:71:8b:67:7d:14:d2:35:67
Serial Number (int): 3901087444263703188034046855486780775
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 72:1b:91:4d:c4:8a:70:7d:5b:a4:36:4d:cb:3c:f9:46:60:a1:83:e5
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): fb:c7:94:be:26:10:1d:57:f9:72:c6:df:56:c4:48:5e:b2:1a:00:ee
Fingerprint (sha256): 13:1e:d4:9a:99:6e:c0:2a:46:6a:af:e2:a4:71:0a:98:f9:3b:d3:cd:5b:b8:79:78:60:ab:4b:35:e0:f9:02:23

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.talent-alpha.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.talent-alpha.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.talent-alpha.com
talent-alpha.com

Other certificates including the domain name talent-alpha.com

(limited to 100 certificates)
api.steelspace.io
anyhonest.com
*.talent-alpha.com
www.sambender.net
www.entertainmentcoach.com
greeting-ar.stu.yokohama
talent-alpha.com
www.technocratsrobotics.in
beta.ultrahealth.care
signpost.dev
www.ourcardgame.ca
excitation.app
dautubitcoin.com.vn
www.paulinedevine.co.uk
gustavogranado.com.br
7miles.app
cast.koovik.com
dinox.com.co
talent-alpha.com
www.boekdrukken.com
www.repzoapp.com
talent-alpha.com
register.codingbar.ai
app.ecorban.com
talent-alpha.com
dash.mafiasn.com
shiljuuleg.com.au
staging-links.itspaid.com
bethmann.demo.titanbay.com
www.filemark.app
*.talent-alpha.com
redirect-app.heaveness.com
*.talent-alpha.com
doohanigains.com
*.talent-alpha.com
www.terminaltime.se
bluechew.com
festa2022.jiin.media
blog.talent-alpha.com
www.ivanamudron.com
app.v2.truffle.fan
eyecaretownhall.allerganbroadcast.com
order.stulo.co.za
hon-unit-config-test.3dcloud.io
campuskota.com
authcode.app
www.giftofcraft.com
www.privuo.com
*.talent-alpha.com
*.talent-alpha.com
www.privuo.com
www.paligrammar.com
futureclima.ziggu.app
institute.demo.univacity.com
hello.talent-alpha.com
testing.croppaco.com
blog.talent-alpha.com
andrewludwig.me
stage.talent-alpha.com
backoffice-dev.talent-alpha.com
beta.bana.sa
www.send.club
chord.center
app.ecorban.com
elladody.com
www.boomerang.video
navi.urbanhome.app
figmacorp.backpac.co
account-dev.tanto.app
leases.apartmentlist.com
bybtrivia.sqwadhq.com
dev.buzzyphone.co
smart-process.co.jp
egphuketclub.com
talent-alpha.com
mykaraoke.app
www.maydaybt.com
go.shopmaknet.com
bg.shaangor.com
cafe.owl2go.de
www.inon29.com
quality.agungsedayu.com
www.editionsgrandschamps.fr
featureflag.intg.keap.dev
dl.elsa.care
app.test.bitstack.fr
campanha.cart.app.br
mapped.myasoedv.com
prestoplatform.com
www.richardszilagyi.com
*.talent-alpha.com
appy.backslashdemo.com
talent-alpha.com
beewomp.me
gustavogranado.com.br
www.zuplog.com
www.alrtify.co
portfolio.thanatach.net
www.cordotecido.com.br
basaltic.htwhitney.com

Certificate

The complete raw certificate details for *.talent-alpha.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIQAu9SdfZI+adxi2d9FNI1ZzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODExMTkwMDAwMDBaFw0xOTExMTkxMjAwMDBaMIGJMQswCQYDVQQGEwJVUzET
MBEGA1UECBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKQnVybGluZ2FtZTEbMBkGA1UE
ChMSVGFsZW50IEFscGhhLCBJbmMuMRYwFAYDVQQLEw1QbGF0Zm9ybSBUZWFtMRsw
GQYDVQQDDBIqLnRhbGVudC1hbHBoYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDklntmGoQfGgyWBoeh3wvbtczKrNlTDJYJ9BAF5rAjUUkyfFPK
JzRJdxHMHD1KkZU791p1FFDXq+Nyk0HvhoTtt2D7toENIxpG2xQrsUzGnvtPtuXb
8sjO1S3qFnDfI5JKJiK6tTo6Xd4TzteWCfPV8PMLpcyblfLp6WxRms7xEesaqI35
3dVkF2uhGFC/dTjmYRy7hCTsptzJL3MoNwRJGvyxP77YTlqqOV4tmt3FppGjn6td
GyXgazVUnXpw0zcFUmeY8I5xSpf4lSwCW9Dsj4y7mG3hBZgTFfhJZnIVMuYJIviV
t/mqaYUomup9m1j6Mi5xaXsP+0YEE5zaEEelAgMBAAGjggK9MIICuTAfBgNVHSME
GDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUchuRTcSKcH1bpDZN
yzz5RmChg+UwLwYDVR0RBCgwJoISKi50YWxlbnQtYWxwaGEuY29tghB0YWxlbnQt
YWxwaGEuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5j
b20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEB
MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYG
Z4EMAQICMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1
cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3Ry
dXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaO
HtGFAAABZy0pERgAAAQDAEgwRgIhANxKheLB50PQ4pb95v/o2CtFBUHjBeVYadWM
k+oZAY6JAiEA9lXuB/UuBTzlJA8NKfdGm2jKCRmH+/kSWk5nbHNP/XcAdgCHdb/n
WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWctKRHNAAAEAwBHMEUCIQDC
IAD0ofj7ZcRg+UzOzj2LAe5JWgmgzDVrjjGnURJQ4wIgDDV+a+/veJICrutFvJVR
vXqIjIW8FG6HBhEW7P4FVhYwDQYJKoZIhvcNAQELBQADggEBADnj+T/VhgqzRprz
LI+yZZzQ5O52hf3o9Jzs10I4jFPRrK8iOcbE2E6k0O2W3ASz/vtk1N77L0ajtzBP
7AQBzjX8A63Fkidh+41WK6caTPYi7fiBTjpnARbM8Z165W8UxT+RvG3lSxdIiZH8
a0f2DGz9yfCUdcEJ59zaN4z0uwV+FshzZs/0gVIR9KdCvo6RXQ2NsZXBfKCDk0ft
SAhrIZ+Rs6hiAClzazHrhDNkO3HecWDr+o5iSpj19lhj9klyFSGemIyz8fNZxAWg
iC20TNfUijQXRXjBwzSbKBPrGdWcMC0O/m6hIqsbzRwGAuLlPHr4GYOZkrWcpMUV
bWWgH5o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JZ7ZhqEHxoMlgaHod8L
27XMyqzZUwyWCfQQBeawI1FJMnxTyic0SXcRzBw9SpGVO/dadRRQ16vjcpNB74aE
7bdg+7aBDSMaRtsUK7FMxp77T7bl2/LIztUt6hZw3yOSSiYiurU6Ol3eE87Xlgnz
1fDzC6XMm5Xy6elsUZrO8RHrGqiN+d3VZBdroRhQv3U45mEcu4Qk7KbcyS9zKDcE
SRr8sT++2E5aqjleLZrdxaaRo5+rXRsl4Gs1VJ16cNM3BVJnmPCOcUqX+JUsAlvQ
7I+Mu5ht4QWYExX4SWZyFTLmCSL4lbf5qmmFKJrqfZtY+jIucWl7D/tGBBOc2hBH
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3901087444263703188034046855486780775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burlingame'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Talent Alpha, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Platform Team'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.talent-alpha.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28856538985315543430024715704968725972293874878564890513767252186054018981956892152187431805803975405739946363554255504497218410591478291620460741613975174685496724140722326127114194436302681909046883531354040750093996192616391662185543977041318882374370799752697104514916622342040117312424092237913546491822665894949139653699761328692015695396765770251115379222324511039530283713498574097781901235068066312759010655869872865378985674317389782198566907149750945450010245575485543380404759636649974669500275387242019691869539829745174273127175520002615380708775887677856575116843918497778556009548202442059161814452133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							721b914dc48a707d5ba4364dcb3cf94660a183e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talent-alpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talent-alpha.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001672d2911180000040300483046022100dc4a85e2c1e743d0e296fde6ffe8d82b450541e305e55869d58c93ea19018e89022100f655ee07f52e053ce5240f0d29f7469b68ca091987fbf9125a4e676c734ffd770076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001672d2911cd0000040300473045022100c22000f4a1f8fb65c460f94ccece3d8b01ee495a09a0cc356b8e31a7511250e302200c357e6befef789202aeeb45bc9551bd7a888c85bc146e87061116ecfe055616
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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