www.lcnb.com
- LCNB National Bank -
Issued by GeoTrust EV RSA CA 2018
About this certificate
This digital certificate with serial number 04:91:7c:e4:5c:45:52:3d:4e:db:01:39:b4:2d:ef:4b was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
LCNB National Bank
Company registration number:
1741623
Organization: LCNB National Bank
Organization: LCNB National Bank
State / Province:
Ohio
Locality: Lebanon
Country: US
Locality: Lebanon
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:91:7c:e4:5c:45:52:3d:4e:db:01:39:b4:2d:ef:4bSerial Number (int): 6072328138995544707255967241168875339
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 67:be:db:71:d1:1e:a7:96:d1:c6:ce:9d:9d:94:81:20:9c:61:cb:c5
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58
Fingerprint (sha1): 78:d9:2f:54:0a:9c:58:2c:17:84:f9:7d:6a:29:ed:e5:f3:dc:97:e8
Fingerprint (sha256): 1c:3f:8a:5a:db:ad:97:97:11:89:3e:2c:53:ee:c1:33:a3:f0:29:c9:48:58:47:ae:c6:69:fd:82:1a:ff:e0:72
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl
Check the revocation status for certificate www.lcnb.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lcnb.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.lcnb.com
lcnb.com
lcnb.com
Other certificates including the domain name lcnb.com
(limited to 100 certificates)
support.psplegal.ca
assist.fusiongroupusa.com
support.psplegal.ca
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
www.lcnb.com
www.lcnb.com
assist.nmrevents.com
start.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
go.lcnb.com
assist.fusiongroupusa.com
mail.lcnb.com
www.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
smc.lcnb.com
www.lcnb.com
www.lcnb.com
assist.smsi.group
assist.fusiongroupusa.com
assist.fusiongroupusa.com
mail.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
assist.fusiongroupusa.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.edgt.com
assist.smsi.group
mail.lcnb.com
www.lcnb.com
mail.lcnb.com
assist.aa-techs.com
help.rubieraproductions.com
assist.smsi.group
smc.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
mail.lcnb.com
*.lcnb.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
support.psplegal.ca
assist.fusiongroupusa.com
assist.fusiongroupusa.com
help.rubieraproductions.com
start.lcnb.com
assist.thebergroup.com
support.psplegal.ca
help.rubieraproductions.com
assist.thebergroup.com
servicedesk.oq8.om
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.aa-techs.com
help.rubieraproductions.com
assist.lcnb.com
assist.aa-techs.com
assist.aa-techs.com
assist.smsi.group
assist.nmrevents.com
www.lcnb.com
assist.fusiongroupusa.com
assist.nmrevents.com
assist.ctp123.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
go.lcnb.com
assist.edgt.com
www.lcnb.com
assist.nmrevents.com
assist.fusiongroupusa.com
support.psplegal.ca
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
www.lcnb.com
www.lcnb.com
assist.nmrevents.com
start.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
go.lcnb.com
assist.fusiongroupusa.com
mail.lcnb.com
www.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
smc.lcnb.com
www.lcnb.com
www.lcnb.com
assist.smsi.group
assist.fusiongroupusa.com
assist.fusiongroupusa.com
mail.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
assist.fusiongroupusa.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.edgt.com
assist.smsi.group
mail.lcnb.com
www.lcnb.com
mail.lcnb.com
assist.aa-techs.com
help.rubieraproductions.com
assist.smsi.group
smc.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
mail.lcnb.com
*.lcnb.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
support.psplegal.ca
assist.fusiongroupusa.com
assist.fusiongroupusa.com
help.rubieraproductions.com
start.lcnb.com
assist.thebergroup.com
support.psplegal.ca
help.rubieraproductions.com
assist.thebergroup.com
servicedesk.oq8.om
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.aa-techs.com
help.rubieraproductions.com
assist.lcnb.com
assist.aa-techs.com
assist.aa-techs.com
assist.smsi.group
assist.nmrevents.com
www.lcnb.com
assist.fusiongroupusa.com
assist.nmrevents.com
assist.ctp123.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
go.lcnb.com
assist.edgt.com
www.lcnb.com
assist.nmrevents.com
Certificate
The complete raw certificate details for www.lcnb.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1TCCBb2gAwIBAgIQBJF85FxFUj1O2wE5tC3vSzANBgkqhkiG9w0BAQ0FADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdHZW9UcnVzdCBFViBSU0EgQ0EgMjAx ODAeFw0yMjA1MzEwMDAwMDBaFw0yMzA1MzEyMzU5NTlaMIG/MRMwEQYLKwYBBAGC NzwCAQMTAlVTMRUwEwYLKwYBBAGCNzwCAQITBE9oaW8xHTAbBgNVBA8MFFByaXZh dGUgT3JnYW5pemF0aW9uMRAwDgYDVQQFEwcxNzQxNjIzMQswCQYDVQQGEwJVUzEN MAsGA1UECBMET2hpbzEQMA4GA1UEBxMHTGViYW5vbjEbMBkGA1UEChMSTENOQiBO YXRpb25hbCBCYW5rMRUwEwYDVQQDEwx3d3cubGNuYi5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDFfg/GgLCa2+2buHNbPsqbufvqRDjH5bSFV4Dp XHuLgh/HpEK2zsAxhil4wuqFyAgWAQ7XQopVnrkJJ7iJpXRepUsYInQca2R3PE3G ionaREZTkApd66ZIIvXwc8GM7Gzezicv4v2nTyJrdI9RPG/e4sNdTQbAnzaVlH9e VQtee4/h+YwiFuWCndquDTDppw+I1Imto6YjX4f6H07EWj3EA25jj6LUtfSrf7lP ysjdsxBvzED8kx6Y4ARa+9JoHpK/gX0fMcC6NYQGS04eF3GZjcsLjnU3AEy0VsUY A+jBY1avDz/vRoifLUfRbs/0EQReJpY2hrtxktRfed80n2SBAgMBAAGjggMoMIID JDAfBgNVHSMEGDAWgBTKkmdSYd6u/LoiK38ch0wl+2+ZWDAdBgNVHQ4EFgQUZ77b cdEep5bRxs6dnZSBIJxhy8UwIQYDVR0RBBowGIIMd3d3LmxjbmIuY29tgghsY25i LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dl b1RydXN0RVZSU0FDQTIwMTguY3JsMEoGA1UdIARDMEEwCwYJYIZIAYb9bAIBMDIG BWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzB3BggrBgEFBQcBAQRrMGkwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2Vv dHJ1c3QuY29tMD8GCCsGAQUFBzAChjNodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5j b20vR2VvVHJ1c3RFVlJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAXwGCisGAQQB 1nkCBAIEggFsBIIBaAFmAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0G vW4AAAGBG+ZDBwAABAMARjBEAiAkq5nLHE5PWj9RHr+UarEpnd+SfAF6bAfiFGHW C2rEYQIgUt8lzK5ozGpU3O0eL2nNHN8uptigzkXOAQ39FZJmglEAdgA1zxkbv7Fs V78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYEb5kM4AAAEAwBHMEUCIEwsv+Hl Lu5iUX+Gt08A5tn86wr/CrW1zOKQk4op7lhYAiEAoE9/j4Xa9RWcaBSxkyndll7F 5ZitwiOQ6BJpu9XvDzgAdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20 mQAAAYEb5kMrAAAEAwBGMEQCIHaqIqWXrnfZVVWOK+IMOutu77mEVFtoNJO+WLCI x4xrAiAy12M1FXzLCVDy7kdHDZlnx0Lo1IXsie9508VccWESNDANBgkqhkiG9w0B AQ0FAAOCAQEArIhKkwzmS80ShdFltqnvmPqlflk56gfPgkaGlpBy6nwuiTHS6etO Z46vhcHM4Br5yTk4XY/pfoa28MeDxahMP76+zwmkFP1dGGYjp0XBMt2V1JzTXsIx H+2G7jag44o8vycwUkySEfCeZCabU2j16DYh0QKVIkVMmYEMLc5d8iG6mwpSADnY x+/iCqPgXQMGKS9Dqfjn8HHsX+mObReANz71/w1LwKd4yY06k+2WL2YDxGZGvA3d VasG+NldkRBg3629dbmfEqtpGDms0rvdZNGAYUBQsp4AGNPWiHnAfg9JriU2j8se 1tO34MigLYbDCgbnOTTmUGVwgRkDjWFbTg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX4PxoCwmtvtm7hzWz7K m7n76kQ4x+W0hVeA6Vx7i4Ifx6RCts7AMYYpeMLqhcgIFgEO10KKVZ65CSe4iaV0 XqVLGCJ0HGtkdzxNxoqJ2kRGU5AKXeumSCL18HPBjOxs3s4nL+L9p08ia3SPUTxv 3uLDXU0GwJ82lZR/XlULXnuP4fmMIhblgp3arg0w6acPiNSJraOmI1+H+h9OxFo9 xANuY4+i1LX0q3+5T8rI3bMQb8xA/JMemOAEWvvSaB6Sv4F9HzHAujWEBktOHhdx mY3LC451NwBMtFbFGAPowWNWrw8/70aIny1H0W7P9BEEXiaWNoa7cZLUX3nfNJ9k gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6072328138995544707255967241168875339 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1741623' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lebanon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LCNB National Bank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lcnb.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24931109381305594310361880896613153134283620261473391779375819340093004174610000964683318858827010073541448808068415252522161963834979871768625211604068452021597156779763870252231191956185596631244476852867753832151792103554178726041928785922925477335241433680758256079531752075856616991820406246385549854153811692708149014371912238621506602308193781026749636480503460747626110001549381080020730807259885002279662000174932588752775139046910604664797746938229015347528163947467231411318366260833911411108062937803902020215282829148810336741229754963221998960200609728324947637555653680035085233801897130512978525774977 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 67bedb71d11ea796d1c6ce9d9d9481209c61cbc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcnb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcnb.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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