onboarding.test.namirial.com

- Namirial S.p.A. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:dc:4d:08:1a:36:a9:25:ab:f6:ef:de:ba:57:43:1f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Namirial S.p.A.

Organization: Namirial S.p.A.
Organization unit: Security Department
State / Province: Marche
Locality: Senigallia
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:4d:08:1a:36:a9:25:ab:f6:ef:de:ba:57:43:1f
Serial Number (int): 6460779679494797887099934744467948319
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f5:4e:fe:a1:20:be:49:08:a9:1d:e4:9d:a6:16:13:94:3f:06:c8:a7
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 4b:16:4c:be:88:84:4a:72:da:b1:dd:55:7e:1d:f6:0e:ed:94:25:58
Fingerprint (sha256): 1e:d6:90:61:03:81:90:05:bc:c2:e2:b3:eb:66:70:5b:80:52:6e:87:2b:55:f5:38:c9:60:a2:5d:d9:45:93:df

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate onboarding.test.namirial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onboarding.test.namirial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onboarding.test.namirial.com

Other certificates including the domain name namirial.com

(limited to 100 certificates)
namirial-recovery-panel.cl.namirial.com
nordiskastatus.mambu.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
payserver.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
status-page.gurado.io
test.process.fwnamfis.namirial.com
*.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
allianz-status.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
*.namirial.com
allianz-status.namirial.com
arkiv.status.geoikt.no
onboarding.test.namirial.com
sm1.namirial.com
mbag-status.namirial.com
arkiv.status.geoikt.no
allianz-status.namirial.com
fchttp.namirial.com
gdprdoxapi.namirial.com
arkiv.status.geoikt.no
nordiskastatus.mambu.com
liveid.test.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
payserver2.namirial.com
*.namirial.com
liveid.test.namirial.com
arkiv.status.geoikt.no
srvtel2.namirial.com
*.namirial.com
mbag-status.namirial.com
arkiv.status.geoikt.no
srvtel2.namirial.com
arkiv.status.geoikt.no
mbag-status.namirial.com
arkiv.status.geoikt.no
paghe.namirial.com
cu.status.jasper.com
*.namirial.com
nordiskastatus.mambu.com
sm3.namirial.com
allianz-status.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
status-page.gurado.io
*.namirial.com
*.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
*.namirial.com
careers.namirial.com
*.namirial.com
srvfsc3.namirial.com
srvise1.namirial.com
status-page.gurado.io
status-page.gurado.io
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
onboarding.test.namirial.com
mbag-status.namirial.com
status-page.gurado.io
*.namirial.com
status-page.gurado.io
nordiskastatus.mambu.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
srvdibase.namirial.com
*.namirial.com
cafconfsal.namirial.com
test.sms.namfis.namirial.com
arkiv.status.geoikt.no
srvtel1.namirial.com
sm1.namirial.com
arkiv.status.geoikt.no
sm3.namirial.com
*.namirial.com
arkiv.status.geoikt.no
srvfsc1.namirial.com
allianz-status.namirial.com
arkiv.status.geoikt.no
allianz-status.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
mbag-status.namirial.com
*.namirial.com
srvtel.namirial.com
arkiv.status.geoikt.no

Certificate

The complete raw certificate details for onboarding.test.namirial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIQBNxNCBo2qSWr9u/euldDHzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTEwMDgwMDAwMDBaFw0yMTEwMDcxMjAwMDBaMIGSMQswCQYDVQQGEwJJVDEP
MA0GA1UECBMGTWFyY2hlMRMwEQYDVQQHEwpTZW5pZ2FsbGlhMRgwFgYDVQQKEw9O
YW1pcmlhbCBTLnAuQS4xHDAaBgNVBAsTE1NlY3VyaXR5IERlcGFydG1lbnQxJTAj
BgNVBAMTHG9uYm9hcmRpbmcudGVzdC5uYW1pcmlhbC5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCkAZNDhf2BwObNmDcXd3MTt1JX2zu+Z4SWz430
puJsPlSykNz9eHXKeKqAN2NLN1wHO4g1IC9bw1/rY/F+i45YTZ6w0GCBMLSFGtHC
oF7smT1AWCBC074hDhi4OcA8BCZkdXz0RIx3d2kzlDqgtsTpFcVuXivD8ajWCGOX
DFuc8t/hX3/RN+M3o8f7hiPstPfBWcYCZL+hYyY8X2dexAf97EHKqEDjgP+2TYN3
blMuGLpC3vdeCMjMh7Z2+RSiqQRp9+Vi/1WDznH2KZ+BBeC0z2NJ6Ig6LLzE10rV
1wnSc3QJJOwEi7gX8ASQMJegq4WxEnM4uT51uze3gAxc5WVfAgMBAAGjggHBMIIB
vTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU9U7+
oSC+SQipHeSdphYTlD8GyKcwJwYDVR0RBCAwHoIcb25ib2FyZGluZy50ZXN0Lm5h
bWlyaWFsLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3Qu
Y29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwB
ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgG
BmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0
dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90
cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwEwYKKwYB
BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIsXNUoe7xm3jyfQ7Lze
IIJBtF3c6ajg8jraWETxch9i2Vt41Il73IWU8pxP125rAOKPsmeckw6tILHFfv6D
EZ0lsG9780U3qL7q7ClBpqgfahjPqtfxALMm8XpQPidsveDGk2UfTJH5v2kMFgSl
R4kxKCuDXvzcmABMBTkLQtp3cIOFqUp3P/c3tu/m8JqPJEq3dXeX5KH2GfmcprnT
bEo2JkTZp59QzaZSkNn8Aq9+lIqLB14yi/1Rp3sO6J74Tt2+wlQA+6s83muj/y6e
UiAPnSm9Uv7i8S0NBKgXVnW4IBFAErO7DH2ZIKfThz0DF4lfV8/1XEBZGl2FaFwC
wWc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAGTQ4X9gcDmzZg3F3dz
E7dSV9s7vmeEls+N9KbibD5UspDc/Xh1yniqgDdjSzdcBzuINSAvW8Nf62PxfouO
WE2esNBggTC0hRrRwqBe7Jk9QFggQtO+IQ4YuDnAPAQmZHV89ESMd3dpM5Q6oLbE
6RXFbl4rw/Go1ghjlwxbnPLf4V9/0TfjN6PH+4Yj7LT3wVnGAmS/oWMmPF9nXsQH
/exByqhA44D/tk2Dd25TLhi6Qt73XgjIzIe2dvkUoqkEafflYv9Vg85x9imfgQXg
tM9jSeiIOiy8xNdK1dcJ0nN0CSTsBIu4F/AEkDCXoKuFsRJzOLk+dbs3t4AMXOVl
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6460779679494797887099934744467948319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marche'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Senigallia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Namirial S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Security Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onboarding.test.namirial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20703858798703795195456542693425372280848213947189653871514444584688590439523361660056727060310733233419725438036822397522240880581488225849723675193111867885265917586232500480502419789204629487307906156119989139793012981337955326852570197102072815048428644622038440489080655148163949754239627471341377972428770066376228286624662734632943973846250391015921337201986996535484325950127784135449551972207804495125184110145056395526574638345409434612668147339743204390171253098771410352250994290793860125750523848038955529025132200088157456316981322986330677632919844159759306101898057126660587710865204825880774259860831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f54efea120be4908a91de49da61613943f06c8a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.test.namirial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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