www.nationalcaregroup.com
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 0e:25:0d:e2:b5:1b:d6:1f:00:ef:0c:0f:e0:7b:fb:8b was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nationalcaregroup.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:25:0d:e2:b5:1b:d6:1f:00:ef:0c:0f:e0:7b:fb:8bSerial Number (int): 18801588557694625471501473261043841931
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: bb:4c:0c:d3:f4:1b:22:43:71:38:f3:0b:6a:93:30:30:0c:ca:19:e3
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): b4:61:e3:3c:40:3e:c2:f4:0a:96:f4:91:92:df:34:7a:e6:5b:eb:1c
Fingerprint (sha256): 1b:16:27:d2:61:68:93:85:cc:3f:b2:82:a4:a3:a2:fb:96:3a:18:77:41:69:0e:20:4d:d2:c6:1f:f6:92:e7:e1
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate www.nationalcaregroup.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nationalcaregroup.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.nationalcaregroup.com
nationalcaregroup.com
nationalcaregroup.com
Other certificates including the domain name nationalcaregroup.com
(limited to 100 certificates)
servicedesk.weareavidity.com
servicedesk.vretigas.it
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
ictportal.linkfinancial.eu
www.nationalcaregroup.com
helpdesk.bedes.org
aiseait.fuchs.com
nationalcaregroup.com
helpdesk.hambroperks.com
itservicedesk.eldoradogold.com
helpdesk.bedes.org
aiseait.fuchs.com
assist.east-diagnostics.com
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
assist.pentest.partners
helpdesk.actosoft.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
sdp.vdp.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
assist.pentest.partners
assist.pentest.partners
ictportal.linkfinancial.eu
ithelpdesk.archlynk.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
assist.pentest.partners
ithelpdesk.archlynk.com
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
helpdesk.wentworthclub.com
www.nationalcaregroup.com
assist.pentest.partners
helpdesk.wentworthclub.com
itservicedesk.eldoradogold.com
servicedesk.vretigas.it
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.eldoradogold.com
itservicedesk.hertspartnership-ala.gov.uk
nationalcaregroup.com
helpdesk.saviaantjes.be
helpdesk.nationalcaregroup.com
assist.pentest.partners
assist.pentest.partners
sdp.vdp.com
nationalcaregroup.com
www.nationalcaregroup.com
assist.pentest.partners
servicedesk.vretigas.it
helpdesk.hambroperks.com
sdp.vdp.com
www.nationalcaregroup.com
servicedesk.vretigas.it
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
ictportal.linkfinancial.eu
www.nationalcaregroup.com
helpdesk.bedes.org
aiseait.fuchs.com
nationalcaregroup.com
helpdesk.hambroperks.com
itservicedesk.eldoradogold.com
helpdesk.bedes.org
aiseait.fuchs.com
assist.east-diagnostics.com
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
assist.pentest.partners
helpdesk.actosoft.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
sdp.vdp.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
assist.pentest.partners
assist.pentest.partners
ictportal.linkfinancial.eu
ithelpdesk.archlynk.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
assist.pentest.partners
ithelpdesk.archlynk.com
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
helpdesk.wentworthclub.com
www.nationalcaregroup.com
assist.pentest.partners
helpdesk.wentworthclub.com
itservicedesk.eldoradogold.com
servicedesk.vretigas.it
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.eldoradogold.com
itservicedesk.hertspartnership-ala.gov.uk
nationalcaregroup.com
helpdesk.saviaantjes.be
helpdesk.nationalcaregroup.com
assist.pentest.partners
assist.pentest.partners
sdp.vdp.com
nationalcaregroup.com
www.nationalcaregroup.com
assist.pentest.partners
servicedesk.vretigas.it
helpdesk.hambroperks.com
sdp.vdp.com
www.nationalcaregroup.com
Certificate
The complete raw certificate details for www.nationalcaregroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2zCCBcOgAwIBAgIQDiUN4rUb1h8A7wwP4Hv7izANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTE4MDcwNjAwMDAwMFoXDTE5MDcwNjEyMDAwMFowJDEiMCAGA1UEAxMZd3d3 Lm5hdGlvbmFsY2FyZWdyb3VwLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAMAjCcfrKpsUcnbwoPjuy0SoAwg3SB/fXRVjsS2kBjk1KAxLBpZjU0+H 4UczxI7XxYBT6zwotmgWZ9yRKBva7AMwCuAnX2mQ0qDUMq/OAhz4gjXYbCeRGkZi YbULjnFyYaoadI4JjFAnK1Qcny1SSUGqMMPFvxjWJSWEIAEWH5939pj3/J3jkoqZ 5Ww91aNH/BQMwnnLBzC1pPoaNW+2Ckq80XP8NjdiCuKy7rNPg035YSbgeqk6CSpR RKGDd303GxfUMMaKWzA/tKVGfIh1J3uvga+YHJz0Xg7gDF9qSIM6/qE/P4Os/gth ZoKvL0R8gE588WUn6hZzom5lZgdqIxYgH7xukhivQoayXtYr6vXe9CSrSYEj3YAj l2qdrJsy7aC+VocX9+mBXUIUBmggGyyVs/1uzMtehiZKxCCEJIKNb0GHsWN+XcZM yn+0qhPfkYKMKg7Q4bpORb7sJiIEQLQXr8MsZzdL0PdIoIqd+qXn0O39YGRLv9Sb kX0k5P9brZe6Oh++OdJy3vULFmmvKRDTwvE7okRrU9V3/VOtot16Elb3Ll4YffBX H2W63Buwa+heIa062NpnNL4PNL4xslBjc/+v/cWPPE3Fm5bV1E9YAoPK2P4b2Yer LkDjtAkMpFJyPk+Mrpmi6mTSawOx2xPC/G0Sm88wKNkcEh4bqgDlAgMBAAGjggLL MIICxzAfBgNVHSMEGDAWgBSUT9Rdi+Sk4qaA/v3Y+QDvo74CVzAdBgNVHQ4EFgQU u0wM0/QbIkNxOPMLapMwMAzKGeMwOwYDVR0RBDQwMoIZd3d3Lm5hdGlvbmFsY2Fy ZWdyb3VwLmNvbYIVbmF0aW9uYWxjYXJlZ3JvdXAuY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKg MIYuaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNy bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgw JgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD4GCCsGAQUF BzAChjJodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FD QUcxLmNydDAJBgNVHRMEAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA7ku9 t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFkcDMd3gAABAMASDBGAiEA 9/0q5eiiSxLWI/sUWzDdiP0XiwgIOLkxC2CF271AEXMCIQDTU9SRszuUBv2c3dpm 9Z+kz8eSl8rwM174R/GqAO5s+AB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG0 6v9eoIMPAAABZHAzHoEAAAQDAEcwRQIgLlP9PPOcCBL8foKaxhHsM7n0QH1WHJ0B L9LWfKnsL5ECIQDkDadREtOZmW0Vb8QlxKpoPX4V9DwCja7lGEUAuTD+HTANBgkq hkiG9w0BAQsFAAOCAQEAMTL7vqkMmGD2qiZrk8r78DoPYgVqChTbTBwvjxfQvQrC iQUCfVV5VcPkFXuBEuLLCFHG2oMKb5lFOEZpThG2CUsl7plYZziigtRcs+/E7T6t vqWAUA5vcktoAExekEEhrhNxVQCZOAa1Bmq9rlGAiPmoSW6/ESjub3oeCTOhRU3f 9Ewklgr7ohhctqDCdSz0aurXj3LzLlkcbSgIYdmnUZ1AX3/JMg0P/aTXTK4ydJGs IvnSxHqpyiDOLXVHYSY8civYLpdHGqVCjgi59VwkzvEzsvJVNrlyX3gV2UsaO4HZ qVsUMX+1FjMBzu5XGfxKt/aow9PpWEoa6+mC0kXpXg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwCMJx+sqmxRydvCg+O7L RKgDCDdIH99dFWOxLaQGOTUoDEsGlmNTT4fhRzPEjtfFgFPrPCi2aBZn3JEoG9rs AzAK4CdfaZDSoNQyr84CHPiCNdhsJ5EaRmJhtQuOcXJhqhp0jgmMUCcrVByfLVJJ Qaoww8W/GNYlJYQgARYfn3f2mPf8neOSipnlbD3Vo0f8FAzCecsHMLWk+ho1b7YK SrzRc/w2N2IK4rLus0+DTflhJuB6qToJKlFEoYN3fTcbF9QwxopbMD+0pUZ8iHUn e6+Br5gcnPReDuAMX2pIgzr+oT8/g6z+C2Fmgq8vRHyATnzxZSfqFnOibmVmB2oj FiAfvG6SGK9ChrJe1ivq9d70JKtJgSPdgCOXap2smzLtoL5Whxf36YFdQhQGaCAb LJWz/W7My16GJkrEIIQkgo1vQYexY35dxkzKf7SqE9+RgowqDtDhuk5FvuwmIgRA tBevwyxnN0vQ90igip36pefQ7f1gZEu/1JuRfSTk/1utl7o6H7450nLe9QsWaa8p ENPC8TuiRGtT1Xf9U62i3XoSVvcuXhh98FcfZbrcG7Br6F4hrTrY2mc0vg80vjGy UGNz/6/9xY88TcWbltXUT1gCg8rY/hvZh6suQOO0CQykUnI+T4yumaLqZNJrA7Hb E8L8bRKbzzAo2RwSHhuqAOUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18801588557694625471501473261043841931 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nationalcaregroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783850033764501555489530318427979640872018251647030747365100030695012125815704587624372440909471767782666328244889780266094350116612807533841630312943045168624412963790598629311123293038008144051282970864342923493889984325757434644588389908745245202778379955803858130293351935820206301589734393348382593688468268683326855546904325792520097032985160941006955170072703555922843308430999532693202771792338192183097577659055359232019944092398403407527999890014094361311528394859860654812833589622321432304397872278453578456298799382683966036844300888259442947349402583926878137382524489156642925561420877893564091001251992434878790321988073417089628943214312278855517288241803559715370787043260029775948316482390978681793287442004255688839214737722378070263142005459233359892642797084843110946901740432606655518413262133120543005735261061489704198202069872147077630352627776606177625760501602647874507600359246366259022498436506274308611979637876185410194941676575165163117150736675949458038439547155013322281787224858982105576398167878849852871898510338796515135794119114261565264533649956545135446511824400865963477923898194951891713230156916093889143045739835776289310168803302262532475641941654172395755439997206105359051323240743141 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bb4c0cd3f41b22437138f30b6a9330300cca19e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalcaregroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalcaregroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016470331dde0000040300483046022100f7fd2ae5e8a24b12d623fb145b30dd88fd178b080838b9310b6085dbbd401173022100d353d491b33b9406fd9cddda66f59fa4cfc79297caf0335ef847f1aa00ee6cf80076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016470331e81000004030047304502202e53fd3cf39c0812fc7e829ac611ec33b9f4407d561c9d012fd2d67ca9ec2f91022100e40da75112d399996d156fc425c4aa683d7e15f43c028daee5184500b930fe1d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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