iam.felix-schoeller.com
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 08:38:3c:26:06:6c:81:b5:d1:b5:1c:2d:70:54:92:67 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=iam.felix-schoeller.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:38:3c:26:06:6c:81:b5:d1:b5:1c:2d:70:54:92:67Serial Number (int): 10925812547591758559392862661499982439
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 5b:83:7c:3e:a4:0d:98:07:d2:65:4c:fc:33:7a:2e:f6:13:e8:19:77
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 74:7d:4d:b2:3c:e0:b2:22:1c:ee:12:ea:e8:aa:91:f8:1d:ec:87:04
Fingerprint (sha256): 26:5d:56:ae:65:5d:d3:9b:04:af:0d:07:a1:e9:e4:91:d4:5e:ff:a0:69:73:a4:df:1d:62:75:74:46:89:cf:24
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate iam.felix-schoeller.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iam.felix-schoeller.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iam.felix-schoeller.com
Other certificates including the domain name felix-schoeller.com
(limited to 100 certificates)
logon.felix-schoeller.com
erp42.felix-schoeller.com
www.felix-schoeller.com
webapp.felix-schoeller.com
portal.felix-schoeller.com
erp.felix-schoeller.com
sslvpn.felix-schoeller.com
experience-shop.felix-schoeller.com
simplifier-entwicklung.felix-schoeller.com
iam.felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
sslvpn.felix-schoeller.com
crmlivereporting.felix-schoeller.com
mobile.felix-schoeller.com
sip.felix-schoeller.com
www.felix-schoeller.com
felix-schoeller.com
experience-shop.felix-schoeller.com
sip.felix-schoeller.com
karriere.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
www.felix-schoeller.com
webportal.felix-schoeller.com
apps.felix-schoeller.com
www.felix-schoeller.com
simplifier.felix-schoeller.com
apps.felix-schoeller.com
vpn.felix-schoeller.com
mobile.felix-schoeller.com
intranet.felix-schoeller.com
vpn.felix-schoeller.com
www.felix-schoeller.com
kombiverkehr.felix-schoeller.com
edi.felix-schoeller.com
simplifier.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
shop.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
simplifier-test.felix-schoeller.com
*.felix-schoeller.com
felix-schoeller.com
edi-test.felix-schoeller.com
shop.felix-schoeller.com
webportal.felix-schoeller.com
erp.felix-schoeller.com
coa.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
itmon.felix-schoeller.com
karriere.felix-schoeller.com
integration.ideas.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
secgateway.felix-schoeller.com
simplifier-test.felix-schoeller.com
www.felix-schoeller.com
apps.felix-schoeller.com
karriere.felix-schoeller.com
erp.felix-schoeller.com
erp.felix-schoeller.com
felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
logon.felix-schoeller.com
shop.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
connector.felix-schoeller.com
ideas.felix-schoeller.com
felix-schoeller.com
crmlivereporting.felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
webportal.felix-schoeller.com
ideas.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
sslvpn.felix-schoeller.com
karriere.felix-schoeller.com
bewerbung.felix-schoeller.com
sslvpn.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
*.felix-schoeller.com
sip.felix-schoeller.com
erp42.felix-schoeller.com
www.felix-schoeller.com
webapp.felix-schoeller.com
portal.felix-schoeller.com
erp.felix-schoeller.com
sslvpn.felix-schoeller.com
experience-shop.felix-schoeller.com
simplifier-entwicklung.felix-schoeller.com
iam.felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
sslvpn.felix-schoeller.com
crmlivereporting.felix-schoeller.com
mobile.felix-schoeller.com
sip.felix-schoeller.com
www.felix-schoeller.com
felix-schoeller.com
experience-shop.felix-schoeller.com
sip.felix-schoeller.com
karriere.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
www.felix-schoeller.com
webportal.felix-schoeller.com
apps.felix-schoeller.com
www.felix-schoeller.com
simplifier.felix-schoeller.com
apps.felix-schoeller.com
vpn.felix-schoeller.com
mobile.felix-schoeller.com
intranet.felix-schoeller.com
vpn.felix-schoeller.com
www.felix-schoeller.com
kombiverkehr.felix-schoeller.com
edi.felix-schoeller.com
simplifier.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
shop.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
simplifier-test.felix-schoeller.com
*.felix-schoeller.com
felix-schoeller.com
edi-test.felix-schoeller.com
shop.felix-schoeller.com
webportal.felix-schoeller.com
erp.felix-schoeller.com
coa.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
itmon.felix-schoeller.com
karriere.felix-schoeller.com
integration.ideas.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
secgateway.felix-schoeller.com
simplifier-test.felix-schoeller.com
www.felix-schoeller.com
apps.felix-schoeller.com
karriere.felix-schoeller.com
erp.felix-schoeller.com
erp.felix-schoeller.com
felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
logon.felix-schoeller.com
shop.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
connector.felix-schoeller.com
ideas.felix-schoeller.com
felix-schoeller.com
crmlivereporting.felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
webportal.felix-schoeller.com
ideas.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
sslvpn.felix-schoeller.com
karriere.felix-schoeller.com
bewerbung.felix-schoeller.com
sslvpn.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
*.felix-schoeller.com
sip.felix-schoeller.com
Certificate
The complete raw certificate details for iam.felix-schoeller.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIQCDg8JgZsgbXRtRwtcFSSZzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMTIxNDAwMDAwMFoXDTI1MDExMzIzNTk1OVowIjEgMB4GA1UEAxMXaWFt LmZlbGl4LXNjaG9lbGxlci5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCetzzAqQQ3CUIqLaB2liN0K01a5wBKmQndLWJvnU+EBEo/l7XIwl6JEKcx 2HORv8JRcb0ttQR9fS1E9wWgWH001SOYa8kzpyax5F3jA9KH1GzE2MPf/6PkmHxw j+VBHr+warUOvM2OUHJ52OXFrzytN3pG/bsVqzeUmmKWZE9MTl4+yxk07pIMXKiS hgny5h5GwIw70nQZs0fJM19fp7tU6QgNb0aF8hhg0MET1ieU9qTy1lw3bwO5ccQP yRsiLB1JeBy/pmGK+diM0psTgz/DC9BHcuhg+BG6j1YMZEcRG2lVgeEVtNS05Yut qDNTJX84wy9WjhfEU62q/kg7NTeGX4Ic6rJ985HIIdq4LYB56fNHpVDoX+pCxmNz WLHGgMQythSk9f+ECuCYWPpys/XqGJ+YTa7OEUXBjpJLvHbQ9qS/WBGXmnXFBiQk Op+HvQtqRpuWbVrfbPMTZqtv94L4722WxwF3PEUuBwLwJCj3rvjen+9kwa2BsiWi qbFWqKzs+rGc9uGCeVtwD3+OU1YFxNZ+5uixJgy2RNPd6z+5fxeHctvdwHCYv549 ME4LIItaqAv/lldz28g4Yi9BQyLSq4rjrTRUqGNhlY0pRdz8xfRvRzsz9xmjmRm+ YorkJwTHNbQGphRwuHDCi+1XpW702tTFRK7gn9VjHvBNwibmwQIDAQABo4IBszCC Aa8wHwYDVR0jBBgwFoAUlE/UXYvkpOKmgP792PkA76O+AlcwHQYDVR0OBBYEFFuD fD6kDZgH0mVM/DN6LvYT6Bl3MCIGA1UdEQQbMBmCF2lhbS5mZWxpeC1zY2hvZWxs ZXIuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9j ZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcmwwdgYIKwYBBQUH AQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA+ BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0 VExTUlNBQ0FHMS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAN1PkKTL73LPa06M94Sz3njdLLPnaIqPDaU92 PNeUHbyX1NvhNiRAGD91OUNd0cA/BS/cZut2EqEGFKfQ8hMvBrFS52pXgPZO0pkJ JHcQv7x6tXIvqUzrPcmZG0gTi/3Se+uhNWlu16u6o+JCWubF9r1dB9h51X/maWDI bxFswc2l3v7XAZ3ArqUirpfNykRAD1ThDwwLOqw1jY0TfsTKQf18V2b+AFkOzy/n yXdSjzb8JMgqeXpGpnfitPeME4i/oTvSRUw6nHjX8pONft+GObD6L8wkMCFgm9Dq j4Zoy/wNaMQA6lf2d2ew1ZoTiDZaYZ/2tYI9/VrN5qg2Zow/vg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnrc8wKkENwlCKi2gdpYj dCtNWucASpkJ3S1ib51PhARKP5e1yMJeiRCnMdhzkb/CUXG9LbUEfX0tRPcFoFh9 NNUjmGvJM6cmseRd4wPSh9RsxNjD3/+j5Jh8cI/lQR6/sGq1DrzNjlByedjlxa88 rTd6Rv27Fas3lJpilmRPTE5ePssZNO6SDFyokoYJ8uYeRsCMO9J0GbNHyTNfX6e7 VOkIDW9GhfIYYNDBE9YnlPak8tZcN28DuXHED8kbIiwdSXgcv6ZhivnYjNKbE4M/ wwvQR3LoYPgRuo9WDGRHERtpVYHhFbTUtOWLragzUyV/OMMvVo4XxFOtqv5IOzU3 hl+CHOqyffORyCHauC2AeenzR6VQ6F/qQsZjc1ixxoDEMrYUpPX/hArgmFj6crP1 6hifmE2uzhFFwY6SS7x20Pakv1gRl5p1xQYkJDqfh70Lakablm1a32zzE2arb/eC +O9tlscBdzxFLgcC8CQo96743p/vZMGtgbIloqmxVqis7PqxnPbhgnlbcA9/jlNW BcTWfubosSYMtkTT3es/uX8Xh3Lb3cBwmL+ePTBOCyCLWqgL/5ZXc9vIOGIvQUMi 0quK4600VKhjYZWNKUXc/MX0b0c7M/cZo5kZvmKK5CcExzW0BqYUcLhwwovtV6Vu 9NrUxUSu4J/VYx7wTcIm5sECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10925812547591758559392862661499982439 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iam.felix-schoeller.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647503852685490097687308902280253880833838777599674926890052427216681990359368782237414274366803230108981716364221067767477303088395498056287516448110356646100203714064764843597700350177640596961903952337258851126745119624545520381408862157756246310036962648417951304479519954403432917304390103658827644691141882028757785162944580634857778058416235775359759538388681773359427885703689703941213537404334078679882659019641011831571975292215444521878048329056950943889101272813363937664509458404281456118801564068911215887629047090360007619950612212424376032656059086180488091778298448388276560572563017770538924190777606856367418419248075497750062989713952048427148869143268507102270808222747649397076287869602722346687113255310759552597451453837868283922625049414976450017039107397966064405823817222487316536333248838285467552516478311004847141179191914654760926702338791625547032305008353729244653668465284079474567280793490551553676729717707914258165615554580550754002813147775930634926024430556765040776931932686355192779730213129929734559126532991793846376959804460777815358606974129554022926875584870703287380763042913159588638328092804131542535331067613048523763619021364086853647160064917945880823440227777552222258526828291777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5b837c3ea40d9807d2654cfc337a2ef613e81977 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.felix-schoeller.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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