eac.new.de
- NEW AG -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 08:d8:c5:0e:54:89:74:8d:d5:a9:0f:07:1b:a4:13:05 was issued on by DigiCert Inc.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
NEW AG
Organization:
NEW AG
State / Province:
Nordrhein-Westfalen
Locality: Mönchengladbach
Country: DE
Locality: Mönchengladbach
Country: DE
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:d8:c5:0e:54:89:74:8d:d5:a9:0f:07:1b:a4:13:05Serial Number (int): 11759356857771958402946258173526545157
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 17:e3:ac:eb:26:43:df:d1:01:a8:6d:4b:8e:b5:ac:1b:65:72:a2:ce
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): b9:63:a8:19:ab:a7:de:ea:cf:73:64:e1:72:f0:5d:f9:f4:31:5d:9e
Fingerprint (sha256): 23:66:4f:d0:3f:9e:87:46:f2:a2:50:90:e9:3d:8f:19:5c:36:4e:73:ec:0f:33:db:02:b2:48:80:70:3d:44:fc
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate eac.new.de
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for eac.new.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
eac.new.de
oab.new.de
mail1.new.de
mail3.new.de
outlook.new.de
owa.new.de
autodiscover.new.de
eas-legacy.new.de
eas.new.de
ecp.new.de
mail2.new.de
ews.new.de
oab.new.de
mail1.new.de
mail3.new.de
outlook.new.de
owa.new.de
autodiscover.new.de
eas-legacy.new.de
eas.new.de
ecp.new.de
mail2.new.de
ews.new.de
Other certificates including the domain name new.de
(limited to 100 certificates)
revenswan.science
suscripcion.tecnotrust.com
mapp-test.new.de
datenaustausch.new.de
link.marlim.co
www.danier.dev
kuemmern.new.de
intra.grosenia.link
mde-test.new.de
bewerbung.new.de
www.chronofit.net
meeting.vc.new.de
umfrage.new.de
pp.new.de
intranetcms.fibrastorage.com.mx
staging.backoffice.uapplyabroad.com
www.devtuple.in
ticketshop-moebus.new.de
www.estacaometeorologica.com
wimball.com
staging.elearning.kawandasss.com
www.qbila.org
auth.freech.zone
links.clubvtc.com
wdt.new.de
timio.new.de
www.swingdata.app
mapp.new.de
gwatool.veekel.one
kommunalportal.new.de
dynamopro.co
caminointegral.pe
car.indiacost.in
lucidstreamer.com
lumi.rootasjey.dev
mde-test.new.de
*.new.de
www.cbslabuan.com
meine.new.de
donate.tfkhdyt.my.id
mydoc.vip
kommunalportal-dev.new.de
app.ualasribeiro.com.br
bewerbung.new.de
ndes.new.de
www.simpleclub.nl
www.connecttokc.com
mapp.new.de
app.horde.no
www.new-energie.de
laden.new.de
kuemmern.new.de
playcribbage-online.com
meeting.we.new.de
app.betterwise.com
bolanfaq.se
gloryofgodcenter.org
abhisheknairofficial.com
*.apps.new.de
biblegpu.com
dev-sagt-admin.acuizen.com
www.momentum-events.co.za
www.dresez.com
www.burnr.io
eac.new.de
www.newjoshicateringservice.com
ro.test.funeasylearn.com
jsatom.everytale.com
eac.new.de
expe01.new.de
recover-hub.com
www.omnilogic.com.br
victorsandru.com
futureclima.ziggu.app
mde.new.de
svc-test.kukunawa.pl
www.verusperformance.de
samo.apps.new.de
mde-test.new.de
www.new.de
krishnapraneeth.in
ecwid-dev.banked.com
ticketshop-moebus.new.de
www.rogpd.ovh
www.lagoon.chat
admin.lezan.work
kuemmern.new.de
www.rs-protection.at
www.app.gonerocket.com
invite.getinshoot.com
laden.new.de
*.geo.new.de
hmbyye.piticommerce.com
kommunalportal.new.de
www.iotreeminds.com
classroom-components.illuminateed.net
www.361.ventures
new.de
aurypup.com
www.bluetor.io
suscripcion.tecnotrust.com
mapp-test.new.de
datenaustausch.new.de
link.marlim.co
www.danier.dev
kuemmern.new.de
intra.grosenia.link
mde-test.new.de
bewerbung.new.de
www.chronofit.net
meeting.vc.new.de
umfrage.new.de
pp.new.de
intranetcms.fibrastorage.com.mx
staging.backoffice.uapplyabroad.com
www.devtuple.in
ticketshop-moebus.new.de
www.estacaometeorologica.com
wimball.com
staging.elearning.kawandasss.com
www.qbila.org
auth.freech.zone
links.clubvtc.com
wdt.new.de
timio.new.de
www.swingdata.app
mapp.new.de
gwatool.veekel.one
kommunalportal.new.de
dynamopro.co
caminointegral.pe
car.indiacost.in
lucidstreamer.com
lumi.rootasjey.dev
mde-test.new.de
*.new.de
www.cbslabuan.com
meine.new.de
donate.tfkhdyt.my.id
mydoc.vip
kommunalportal-dev.new.de
app.ualasribeiro.com.br
bewerbung.new.de
ndes.new.de
www.simpleclub.nl
www.connecttokc.com
mapp.new.de
app.horde.no
www.new-energie.de
laden.new.de
kuemmern.new.de
playcribbage-online.com
meeting.we.new.de
app.betterwise.com
bolanfaq.se
gloryofgodcenter.org
abhisheknairofficial.com
*.apps.new.de
biblegpu.com
dev-sagt-admin.acuizen.com
www.momentum-events.co.za
www.dresez.com
www.burnr.io
eac.new.de
www.newjoshicateringservice.com
ro.test.funeasylearn.com
jsatom.everytale.com
eac.new.de
expe01.new.de
recover-hub.com
www.omnilogic.com.br
victorsandru.com
futureclima.ziggu.app
mde.new.de
svc-test.kukunawa.pl
www.verusperformance.de
samo.apps.new.de
mde-test.new.de
www.new.de
krishnapraneeth.in
ecwid-dev.banked.com
ticketshop-moebus.new.de
www.rogpd.ovh
www.lagoon.chat
admin.lezan.work
kuemmern.new.de
www.rs-protection.at
www.app.gonerocket.com
invite.getinshoot.com
laden.new.de
*.geo.new.de
hmbyye.piticommerce.com
kommunalportal.new.de
www.iotreeminds.com
classroom-components.illuminateed.net
www.361.ventures
new.de
aurypup.com
www.bluetor.io
Certificate
The complete raw certificate details for eac.new.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIQCNjFDlSJdI3VqQ8HG6QTBTANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTE4MDgyOTAwMDAwMFoXDTIwMTEyMjEyMDAwMFowbDELMAkGA1UEBhMCREUx HDAaBgNVBAgTE05vcmRyaGVpbi1XZXN0ZmFsZW4xGTAXBgNVBAcMEE3Dtm5jaGVu Z2xhZGJhY2gxDzANBgNVBAoTBk5FVyBBRzETMBEGA1UEAxMKZWFjLm5ldy5kZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/+3PZxJa0dCagZQdkMiVjH JDZWZcwFZTiLqrIrcTkl3efY/EYG2zgMypViD5cLLJ9FvpwpPFeXKVEiJU6NQo1j 3abwPFjnFe8MPO/MANPVEyuRUTvu4MVBKgoI1BkwRbXa30N44NUa6SuTX7TVBHOW ZrO24v3Jc8naVZUTPXXMe+Emuk6ln1OyVjyUffCzNEwj3YtNjnG72Q2lj5m29t/y 9jcEDi/1MfZz4y4l0zjn/iAhkypSbpuQDWtW/N7gdE9Ie4x61TC6aAHjRb0h+FYD GVk4F9sd72AfPChHuH4jtVjrUXBGTJQkk7JOwrHxgeUnzyuS8E+4IfUG+9nnKT0C AwEAAaOCAlIwggJOMB8GA1UdIwQYMBaAFJRP1F2L5KTipoD+/dj5AO+jvgJXMB0G A1UdDgQWBBQX46zrJkPf0QGobUuOtawbZXKizjCBtQYDVR0RBIGtMIGqggplYWMu bmV3LmRlggpvYWIubmV3LmRlggxtYWlsMS5uZXcuZGWCDG1haWwzLm5ldy5kZYIO b3V0bG9vay5uZXcuZGWCCm93YS5uZXcuZGWCE2F1dG9kaXNjb3Zlci5uZXcuZGWC EWVhcy1sZWdhY3kubmV3LmRlggplYXMubmV3LmRlggplY3AubmV3LmRlggxtYWls Mi5uZXcuZGWCCmV3cy5uZXcuZGUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2Rw Lmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3JsMEwGA1UdIARFMEMw NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0 LmNvbS9DUFMwCAYGZ4EMAQICMHYGCCsGAQUFBwEBBGowaDAmBggrBgEFBQcwAYYa aHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9j YWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3J0MAkGA1Ud EwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIzz yYz9Ab2fJliHoSIOdwcrBiNsOQzlIVm6P7D5BMEJoYptW9maKdnRK7gUG3NSAXVc s6BIxIqGD2ey+8TilQe7n0rlkVfMFosnc3sdO4mN6siglsx3nHa2QZv4QGn0ajo9 +yqHqJHTSJxlnwbvL88qe66KGNyxyQDkdWfwHC+4XJEsuwdZi4Ud1dCRqE0mdmrX 6Er560GmnCbqd0FD3aiDhiSxJEufja9AMBr/ES28xUVDFMcemmuDDviE4I8SFAQL N+9ZCUSmJeHsg2M1ROA5QT79c4+drVapS02ZN0TRkWn/xgsqfxSsvGPdKHv04dar JO1Vxl6qUGtO+phlRbU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/7c9nElrR0JqBlB2QyJ WMckNlZlzAVlOIuqsitxOSXd59j8RgbbOAzKlWIPlwssn0W+nCk8V5cpUSIlTo1C jWPdpvA8WOcV7ww878wA09UTK5FRO+7gxUEqCgjUGTBFtdrfQ3jg1RrpK5NftNUE c5Zms7bi/clzydpVlRM9dcx74Sa6TqWfU7JWPJR98LM0TCPdi02OcbvZDaWPmbb2 3/L2NwQOL/Ux9nPjLiXTOOf+ICGTKlJum5ANa1b83uB0T0h7jHrVMLpoAeNFvSH4 VgMZWTgX2x3vYB88KEe4fiO1WOtRcEZMlCSTsk7CsfGB5SfPK5LwT7gh9Qb72ecp PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11759356857771958402946258173526545157 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mönchengladbach' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NEW AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eac.new.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24237193944657878799586452730476665560968326905123022571565292245281857020918329728990277889618935695080150768810218900895484676462861183499075494881133107314771109407415287567219820013919722244354722234123252627045377434987575102416163022051763535189108614489137541336531134536019276177377325640942189704552063058793556335297423006150579363236766380934738902515168434533722963446191283612724813938242088937042312198894897816492310580419387525768618533415101696334946119826203351540579621778679291996075851989776181270882767080454032000254829509438291846901816175437783842835964620675413192991994316734524719930747197 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 17e3aceb2643dfd101a86d4b8eb5ac1b6572a2ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eac.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oab.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail3.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eas-legacy.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eas.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecp.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.new.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.new.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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