ad.designweek.co.uk

- Centaur Communications Limited -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 0e:c9:91:21:f3:c7:a5:16:41:88:ad:71:6f:04:99:bd was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centaur Communications Limited

Company registration number: 01595235
Organization: Centaur Communications Limited
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c9:91:21:f3:c7:a5:16:41:88:ad:71:6f:04:99:bd
Serial Number (int): 19655787248922428262632962475447065021
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 88:7b:1b:ac:ba:ce:f5:eb:33:53:8f:34:14:f0:b0:d9:11:3e:9e:17
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 8f:aa:20:96:cb:f1:4c:86:b7:26:04:8f:14:06:97:35:32:d4:ee:76
Fingerprint (sha256): 1d:e4:b5:ee:b9:38:3d:d0:36:f9:d1:05:1c:43:dd:2f:ae:c0:78:8a:a8:0b:7a:69:b6:90:ca:2f:8f:28:d8:67

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate ad.designweek.co.uk

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ad.designweek.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ad.designweek.co.uk
account.creativereview.co.uk
account.econsultancy.com
account.foresightnews.com
account.influencerintelligence.econsultancy.com
account.tpg.centaurmedia.com
ad.marketingweek.com
ad.thelawyer.com
enrol.mba.marketingweek.com
prefs.centaur.co.uk
account.influencerintelligence.com
account.fashionmonitor.com

Other certificates including the domain name designweek.co.uk

(limited to 100 certificates)
ad.designweek.co.uk
*.jobs.designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
jobs.designweek.co.uk
www.marketingweek.com
academyclass.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
*.jobs.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
jobs.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
jobs.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
www.centaur.co.uk
centaurmedia.com
www.centaur.co.uk
econsultancy.com
designweek.co.uk
www.centaur.co.uk
academyclass.designweek.co.uk
awards.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
*.designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
www.centaur.co.uk
*.designweek.co.uk
academyclass.designweek.co.uk
www.centaur.co.uk
academyclass.designweek.co.uk
myaccount.designweek.co.uk
jobs.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
www.centaur.co.uk
awards.designweek.co.uk
www.centaur.co.uk
www.designweek.co.uk
*.designweek.co.uk
ad.designweek.co.uk
www.marketingweek.com
academyclass.designweek.co.uk
designweek.co.uk
www.centaur.co.uk
www.marketingweek.com
designweek.co.uk
ad.designweek.co.uk
jobs.designweek.co.uk
centaurmedia.com
ad.designweek.co.uk
www.centaur.co.uk
jobs.designweek.co.uk
jobs.designweek.co.uk
ad.designweek.co.uk
*.designweek.co.uk
*.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
academyclass.designweek.co.uk
academyclass.designweek.co.uk
designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
econsultancy.com

Certificate

The complete raw certificate details for ad.designweek.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjTCCBnWgAwIBAgIQDsmRIfPHpRZBiK1xbwSZvTANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdHZW9UcnVzdCBFViBSU0EgQ0EgMjAx
ODAeFw0yMDEyMjIwMDAwMDBaFw0yMjAxMjIyMzU5NTlaMIGsMR0wGwYDVQQPDBRQ
cml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysGAQQBgjc8AgEDEwJHQjERMA8GA1UE
BRMIMDE1OTUyMzUxCzAJBgNVBAYTAkdCMQ8wDQYDVQQHEwZMb25kb24xJzAlBgNV
BAoTHkNlbnRhdXIgQ29tbXVuaWNhdGlvbnMgTGltaXRlZDEcMBoGA1UEAxMTYWQu
ZGVzaWdud2Vlay5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOnmkHPxMrR/K5FnAZ5YyPaJnvSB6mo2TVkpq38mfv9BVCNfq5BuyrJ09AJDyp2E
ASMnzCx56VKeoOtrJwGPJoiaeS8cbJiPlGGvOFiBviVUgdoJbPfjBCgKqrh8Tfgq
vGHk87BbwHLsw0TBklW/rUEN08b29fLsYoudvrwmJis1sS2jh+aFi9DyEWOOKxJA
FJhK5bObgfHJKFv11UPwdnreYN988GSiDAhnaRQ3PszykdTXkfAKocpQqfi5PJ+Z
GdgZSqjLvOCVRAWhcOtiBzBGHdczdzgGJ4Kv7d4EW+40G2l7MW54PeZ46tA7PZ3Q
9ArIal5bBSa7UqucoJESm5ECAwEAAaOCA/MwggPvMB8GA1UdIwQYMBaAFMqSZ1Jh
3q78uiIrfxyHTCX7b5lYMB0GA1UdDgQWBBSIexusus716zNTjzQU8LDZET6eFzCC
AV4GA1UdEQSCAVUwggFRghNhZC5kZXNpZ253ZWVrLmNvLnVrghxhY2NvdW50LmNy
ZWF0aXZlcmV2aWV3LmNvLnVrghhhY2NvdW50LmVjb25zdWx0YW5jeS5jb22CGWFj
Y291bnQuZm9yZXNpZ2h0bmV3cy5jb22CL2FjY291bnQuaW5mbHVlbmNlcmludGVs
bGlnZW5jZS5lY29uc3VsdGFuY3kuY29tghxhY2NvdW50LnRwZy5jZW50YXVybWVk
aWEuY29tghRhZC5tYXJrZXRpbmd3ZWVrLmNvbYIQYWQudGhlbGF3eWVyLmNvbYIb
ZW5yb2wubWJhLm1hcmtldGluZ3dlZWsuY29tghNwcmVmcy5jZW50YXVyLmNvLnVr
giJhY2NvdW50LmluZmx1ZW5jZXJpbnRlbGxpZ2VuY2UuY29tghphY2NvdW50LmZh
c2hpb25tb25pdG9yLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9jZHAuZ2Vv
dHJ1c3QuY29tL0dlb1RydXN0RVZSU0FDQTIwMTguY3JsMEsGA1UdIAREMEIwNwYJ
YIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwBwYFZ4EMAQEwdwYIKwYBBQUHAQEEazBpMCYGCCsGAQUFBzABhhpodHRw
Oi8vc3RhdHVzLmdlb3RydXN0LmNvbTA/BggrBgEFBQcwAoYzaHR0cDovL2NhY2Vy
dHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0RVZSU0FDQTIwMTguY3J0MAwGA1UdEwEB
/wQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQApeb7wnjk5IfBWc59jpXfl
vld9nGAK+PlNXSZcJV3HhAAAAXaLPICVAAAEAwBGMEQCIGSzQaU0z25zPTEs6P6L
GELV+oqtTQd6yuzq28ZsLIh6AiANR8EHV1S3ZZYd/lBePYDGeQUyT/e47Xtnd9Mz
N6mHbQB3ACJFRQdZVSRWlj+hL/H3bYbgIyZjrcBLf13Gg1xu4g8CAAABdos8gP4A
AAQDAEgwRgIhAPpDl65MuNuDytrnmvNu+2Rtl7DrbKlYsdKgizIpa/a7AiEAvEtm
Q8Cod9xAVG+qIkiU4CpU3Hg69oK7WwXA442UyU8wDQYJKoZIhvcNAQELBQADggEB
ALB8u1eFS7jkp0+HpRF1eqX9qhIGrJwZX1TdZu0R80a/7x1SdGmbJoRl7vhFuvpH
60E3zFtGiaNcvqxlzmkR4yGJol4iAsBG9gGdLGvXn6C8OBBVI5sVC1uECHS6jFRq
24yu2Y5T0gDPM7wPRyQ0etuCElutNB7wDTNjSh1E1s5oJUSrVUJcGhpn/FaSY2pK
tzqXjTTBOT2WkZ2UcL85Hh90bhsE8O3KIpq8gnfFVUx4hnmXM57GBq9eichrm0y2
2kWu8YI0ofci1S+PePsAe9szxBLTsmpXIMRt6YMeTJz1PIoMJHGyYPRuXoLJvka/
T/sGIVCLOUnDuPX81pXSEX0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eaQc/EytH8rkWcBnljI
9ome9IHqajZNWSmrfyZ+/0FUI1+rkG7KsnT0AkPKnYQBIyfMLHnpUp6g62snAY8m
iJp5LxxsmI+UYa84WIG+JVSB2gls9+MEKAqquHxN+Cq8YeTzsFvAcuzDRMGSVb+t
QQ3Txvb18uxii52+vCYmKzWxLaOH5oWL0PIRY44rEkAUmErls5uB8ckoW/XVQ/B2
et5g33zwZKIMCGdpFDc+zPKR1NeR8AqhylCp+Lk8n5kZ2BlKqMu84JVEBaFw62IH
MEYd1zN3OAYngq/t3gRb7jQbaXsxbng95njq0Ds9ndD0CshqXlsFJrtSq5ygkRKb
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19655787248922428262632962475447065021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01595235'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centaur Communications Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ad.designweek.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29527220535691763534334207056359218741230366830951527866174270556999837348888997744381259659997494863582045268503991356265630436916095012879561701739379172903137336448513377699768204138310238489877485471668542341391463501854825808268323781683877684451403411884065324959287694875959631171512953518041221836834111190706580127086313224131874737174010003700572545229900500077057884450568343687035128806960885651500673961653981935861775206463813133052956017441569507448138524436843183919341717090167275996073258183488175537857141303164370092460762185611859263204272030639112709451331311829633047774381919097395876929379217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							887b1bacbacef5eb33538f3414f0b0d9113e9e17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.designweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.creativereview.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.econsultancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.foresightnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.influencerintelligence.econsultancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.tpg.centaurmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.marketingweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.thelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrol.mba.marketingweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefs.centaur.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.influencerintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.fashionmonitor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001768b3c80950000040300463044022064b341a534cf6e733d312ce8fe8b1842d5fa8aad4d077acaeceadbc66c2c887a02200d47c1075754b765961dfe505e3d80c67905324ff7b8ed7b6777d33337a9876d0077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001768b3c80fe0000040300483046022100fa4397ae4cb8db83cadae79af36efb646d97b0eb6ca958b1d2a08b32296bf6bb022100bc4b6643c0a877dc40546faa224894e02a54dc783af682bb5b05c0e38d94c94f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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