*.fido.ca
- Rogers Communications Canada Inc. -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 09:7c:23:14:fe:3a:41:03:68:5f:12:34:41:a5:b9:7f was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Rogers Communications Canada Inc.
Organization:
Rogers Communications Canada Inc.
State / Province:
Ontario
Locality: Toronto
Country: CA
Locality: Toronto
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:7c:23:14:fe:3a:41:03:68:5f:12:34:41:a5:b9:7fSerial Number (int): 12607608320101556784665299726696298879
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 79:db:17:fd:66:d7:5a:da:05:4b:f7:6d:58:c8:16:31:56:c5:4f:2a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 91:3d:d9:6a:15:92:65:4d:03:ab:c9:53:7b:67:c3:59:f9:c8:13:a1
Fingerprint (sha256): 14:8e:c9:e2:99:62:63:14:cb:94:25:19:20:a0:3c:62:9a:83:d0:53:5d:4a:08:0a:49:17:54:cc:42:2f:eb:13
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.fido.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.fido.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.fido.ca
fido.ca
fido.ca
Other certificates including the domain name fido.ca
(limited to 100 certificates)
secure05.stage.lithium.com
rdqa3.rogers.com
secure05.lithium.com
employeetrial.fido.ca
f01.chtah.com
livesupport.fido.ca
sms.fido.ca
secure05.lithium.com
cpe00fc8d78c183-cm00fc8d78c180.cpe.net.fido.ca
rdidt3.rogers.com
secure05.lithium.com
secure05.stage.lithium.com
rdpet.service.fido.ca
secure05.stage.lithium.com
www.dev10.fido.ca
secure05.lithium.com
oneview.fido.ca
san.rogers.com
qa01-12c.ssp.rogers.com
livesupport.fido.ca
www.fido.ca
offers.fido.ca
livesupport.fido.ca
dev01-rio.fido.ca
rdidt1.rogers.com
ute-prd-web.rogers.com
origin-rdqa4.fido.ca
comm.fido.ca
secure05.stage.lithium.com
uteqa.fido.ca
secure05.stage.lithium.com
utepet.rogers.com
esfpetapi.rogers.com
salescentral.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
*.fido.ca
esfdevapi.rogers.com
ringbacks-staging.urmusic.ca
secure05.stage.lithium.com
qa11.rogers.com
www.qa05.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
rdidt2.rogers.com
myexperience.rogers.com
*.ssp.rogers.com
secure05.stage.lithium.com
vod.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
secure05.lithium.com
f01.chtah.com
salescentral.fido.ca
www.env26.fido.ca
uteqa1.rogers.com
secure05.lithium.com
secure05.stage.lithium.com
akamai-san56.exacttarget.com
cpe00fc8d78c183-cm00fc8d78c180.cpe.net.fido.ca
akamai-san56.exacttarget.com
secure05.stage.lithium.com
dev.fido.ca
secure05.lithium.com
rdidt3.rogers.com
livesupport.fido.ca
secure05.stage.lithium.com
commerce.service.fido.ca
secure05.stage.lithium.com
secure05.lithium.com
rdgidt01atg.rogers.com
vod.fido.ca
www.fido.ca
cexdev-fbrw.fido.ca
secure05.stage.lithium.com
rdqa6.service.fido.ca
rdgqa4atg.rogers.com
esfqaapi.rogers.com
ssp.fido.ca
secure05.lithium.com
secure05.lithium.com
*.fido.ca
myexperience.rogers.com
fido.ca
flarecontest.fido.ca
rdpet.rogers.com
qa11.rogers.com
RINGBACKS-STAGING.URMUSIC.CA
qa.ssp.fido.ca
rdpet.service.fido.ca
rdprdngxunivrsl.rogers.com
rdpet.service.fido.ca
esfqaapi.rogers.com
www.qa07.fido.ca
myexperience.rogers.com
secure05.stage.lithium.com
comm.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
livesupport.fido.ca
rdqa3.rogers.com
secure05.lithium.com
employeetrial.fido.ca
f01.chtah.com
livesupport.fido.ca
sms.fido.ca
secure05.lithium.com
cpe00fc8d78c183-cm00fc8d78c180.cpe.net.fido.ca
rdidt3.rogers.com
secure05.lithium.com
secure05.stage.lithium.com
rdpet.service.fido.ca
secure05.stage.lithium.com
www.dev10.fido.ca
secure05.lithium.com
oneview.fido.ca
san.rogers.com
qa01-12c.ssp.rogers.com
livesupport.fido.ca
www.fido.ca
offers.fido.ca
livesupport.fido.ca
dev01-rio.fido.ca
rdidt1.rogers.com
ute-prd-web.rogers.com
origin-rdqa4.fido.ca
comm.fido.ca
secure05.stage.lithium.com
uteqa.fido.ca
secure05.stage.lithium.com
utepet.rogers.com
esfpetapi.rogers.com
salescentral.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
*.fido.ca
esfdevapi.rogers.com
ringbacks-staging.urmusic.ca
secure05.stage.lithium.com
qa11.rogers.com
www.qa05.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
rdidt2.rogers.com
myexperience.rogers.com
*.ssp.rogers.com
secure05.stage.lithium.com
vod.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
secure05.lithium.com
f01.chtah.com
salescentral.fido.ca
www.env26.fido.ca
uteqa1.rogers.com
secure05.lithium.com
secure05.stage.lithium.com
akamai-san56.exacttarget.com
cpe00fc8d78c183-cm00fc8d78c180.cpe.net.fido.ca
akamai-san56.exacttarget.com
secure05.stage.lithium.com
dev.fido.ca
secure05.lithium.com
rdidt3.rogers.com
livesupport.fido.ca
secure05.stage.lithium.com
commerce.service.fido.ca
secure05.stage.lithium.com
secure05.lithium.com
rdgidt01atg.rogers.com
vod.fido.ca
www.fido.ca
cexdev-fbrw.fido.ca
secure05.stage.lithium.com
rdqa6.service.fido.ca
rdgqa4atg.rogers.com
esfqaapi.rogers.com
ssp.fido.ca
secure05.lithium.com
secure05.lithium.com
*.fido.ca
myexperience.rogers.com
fido.ca
flarecontest.fido.ca
rdpet.rogers.com
qa11.rogers.com
RINGBACKS-STAGING.URMUSIC.CA
qa.ssp.fido.ca
rdpet.service.fido.ca
rdprdngxunivrsl.rogers.com
rdpet.service.fido.ca
esfqaapi.rogers.com
www.qa07.fido.ca
myexperience.rogers.com
secure05.stage.lithium.com
comm.fido.ca
secure05.lithium.com
secure05.stage.lithium.com
livesupport.fido.ca
Certificate
The complete raw certificate details for *.fido.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIQCXwjFP46QQNoXxI0QaW5fzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMzAxMjAwMDAwMDBaFw0yNDAxMjAyMzU5NTlaMHExCzAJBgNVBAYTAkNBMRAw DgYDVQQIEwdPbnRhcmlvMRAwDgYDVQQHEwdUb3JvbnRvMSowKAYDVQQKEyFSb2dl cnMgQ29tbXVuaWNhdGlvbnMgQ2FuYWRhIEluYy4xEjAQBgNVBAMMCSouZmlkby5j YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN1pDQRzrpdoEeSjhqof ktszfLvYHCZcUbLbmpzcI+xIePynU4KqY12l39C8PiPbqPfspHpUfmbDUBpGCcOn 1qborTM9EEcTOtycNcwVPywXZN+8wq+fop8CG/oHqK5ZAr+JziA84mEG3QNQQi0S dbXO6Qx3MKLr9RFp9k1QgGal0KD+5iTK02tYRw2wnNW6MNPcM761H/9rcZ/UO3QY kRRS62DRGr7GXp3Wqj7vlMXeuRfMdCP7kL3EdAQEuIckTKcfOI1OvfgrMreEV3MI 1PGLU46w4LRk2XFe9sUpsW7JCkbLc/nEILL37lxHaZSSPM1FiL/XmW7kMjORU21/ 2QkCAwEAAaOCAxYwggMSMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzF MB0GA1UdDgQWBBR52xf9Ztda2gVL921YyBYxVsVPKjAdBgNVHREEFjAUggkqLmZp ZG8uY2GCB2ZpZG8uY2EwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3Ry dXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwB AgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUG CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H ZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIE ggFuBIIBagFoAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGF zHvTmgAABAMASDBGAiEAzQv9hgX2GeNA4OQA2YANHGCX45g6x/f18iFV+pWD100C IQDIl+C4B8uXnuRrEWlJna8ItLocAjv8mCvxPBVbQCNYBwB2AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABhcx702wAAAQDAEcwRQIhAIxORt24LCl4 H8wPuTq6qRjmZiqznYGbJmkjBSy2kmu8AiB2HxTfhWrE6hMed06LoEvYSrtJBWxy 1okr1G9WeLuaHgB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB hcx7038AAAQDAEYwRAIgPGV4WlVp/RJ/LKcsMtThEvI3qgKFCGVfPxP9euqmDIUC IEi9CQKGwPD/y57vc6F91ubdz64qgz+mU9zEyiCF9tlNMA0GCSqGSIb3DQEBCwUA A4IBAQAuWY/ERLCo/kxafNRjln6CO0Asrto+GpGhdCuxTX3fc1IQsEVnF86/Ciuu 2AhIAol+W4xxIAR8CuI7JI3GmFpagidvJFGJ3fKDdkaCi0WrAdRQrPoX2OBRb9ZZ 9TrxeVokF5FeGtwR5RktDlwmJuNxbDGT/qp2BUhTRWms7RgBwQSGyXj2nPzbXM3y ELduLR4JEbkD6GleqFy9dykAYBCo+i2DXdUNsaOFIa4tNYXBFpY15nvHAfRibN46 2P10XmLwcAQ307wr7c/yCLWy55ttidG0fu8uLsc9XGUdf+dxbcuAuL7mpYpYwrKi +JYNpEforZhEzgdoGHvj2c9y8BQw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WkNBHOul2gR5KOGqh+S 2zN8u9gcJlxRstuanNwj7Eh4/KdTgqpjXaXf0Lw+I9uo9+ykelR+ZsNQGkYJw6fW puitMz0QRxM63Jw1zBU/LBdk37zCr5+inwIb+georlkCv4nOIDziYQbdA1BCLRJ1 tc7pDHcwouv1EWn2TVCAZqXQoP7mJMrTa1hHDbCc1bow09wzvrUf/2txn9Q7dBiR FFLrYNEavsZendaqPu+Uxd65F8x0I/uQvcR0BAS4hyRMpx84jU69+Csyt4RXcwjU 8YtTjrDgtGTZcV72xSmxbskKRstz+cQgsvfuXEdplJI8zUWIv9eZbuQyM5FTbX/Z CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12607608320101556784665299726696298879 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rogers Communications Canada Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fido.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27950467901935562046636653339287141304836504835729400850825029069720627871196998249731492218345619540004408408110118976227550716082548097322985123490317157263218716773554833699721887859119494645257047097946196921360937260301907539828045774783045461458026822665466977398428977793060486211896961193105890601782988374877566791276972417288124909084386614254105565840864956068356776196002070063287650336170590493902803220031846719375711798379917765017952775605556820611978679508462270057795746902077404855191547942070592179876008632122560644239908038453131206607818664542395510766163222667276744561923182560610698150271241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 79db17fd66d75ada054bf76d58c8163156c54f2a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fido.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fido.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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