*.ap.opsecsecurity.com

- OpSec Online, LLC -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:5b:24:e8:e5:89:81:d6:b0:f8:57:c7:c0:fe:96:c1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OpSec Online, LLC

Organization: OpSec Online, LLC
Organization unit: AP
State / Province: Idaho
Locality: Meridian
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:5b:24:e8:e5:89:81:d6:b0:f8:57:c7:c0:fe:96:c1
Serial Number (int): 13765527590693566044702715325339047617
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d1:c8:dd:1a:41:7f:d8:fd:62:ef:66:2b:0a:28:5c:42:66:58:15:5f
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 8e:7e:44:1c:13:b2:3e:65:91:68:e2:6a:be:bd:ce:91:2b:74:5a:0a
Fingerprint (sha256): 26:a5:5b:d7:0d:e4:6b:db:da:f4:22:d2:05:e1:38:d6:42:f1:e5:92:b6:fa:df:ef:0f:04:0b:db:b1:62:a5:38

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.ap.opsecsecurity.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ap.opsecsecurity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ap.opsecsecurity.com

Other certificates including the domain name opsecsecurity.com

(limited to 100 certificates)
*.opsecsecurity.com
www.summitmortgagetraining.com
india.polo-development.com
www.summitmortgagetraining.com
nba.opsecsecurity.com
v2.opsec-monitor.de
5662005255995392-fe4.pantheonsite.io
go.rescuevocations.org
brand.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
www.frailtycertification.com
opsecsecurity.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
gov.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5662005255995392-fe4.pantheonsite.io
*.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
cards.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learn-rto8.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
v2.opsec-monitor.de
5662005255995392-fe4.pantheonsite.io
www.summitmortgagetraining.com
celsiusnetworkstatus.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
info.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
v2.opsec-monitor.de
*.opsecsecurity.com
*.ap.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
secureetagnv.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
helix21.ahacentre.org
brand.opsecsecurity.com
www.summitmortgagetraining.com
5662005255995392-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
info.opsecsecurity.com
www.summitmortgagetraining.com
secureetagwy.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
secureetagnv.opsecsecurity.com
cards.opsecsecurity.com
*.opsecsecurity.com
www.summitmortgagetraining.com
*.opsecsecurity.com
blog.opsecsecurity.com
uspa.polo-development.com
celsiusnetworkstatus.com
*.opsecsecurity.com
*.opsecsecurity.com
celsiusnetworkstatus.com
*.opsecsecurity.com
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5662005255995392-fe4.pantheonsite.io
*.opsecsecurity.com
5662005255995392-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
www.summitmortgagetraining.com
5765606242516992-fe4.pantheonsite.io
5765606242516992-fe4.pantheonsite.io
ap.opsecsecurity.com
learning.potawatomi.org
*.opsecsecurity.com
5765606242516992-fe4.pantheonsite.io

Certificate

The complete raw certificate details for *.ap.opsecsecurity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgIQClsk6OWJgdaw+FfHwP6WwTANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIwMDUxNDAwMDAwMFoXDTIyMDUxNDEyMDAwMFowejELMAkGA1UEBhMCVVMx
DjAMBgNVBAgTBUlkYWhvMREwDwYDVQQHEwhNZXJpZGlhbjEaMBgGA1UEChMRT3BT
ZWMgT25saW5lLCBMTEMxCzAJBgNVBAsTAkFQMR8wHQYDVQQDDBYqLmFwLm9wc2Vj
c2VjdXJpdHkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynI0
n33fXeZJf7r/7MlNPDWVEnAYAfIOIaxC5hX6wb4JnJMPCf3sS0fkmA+kSNh4aJI8
T+wo73NlHjvLe0v124ehcxdRpPf5tcDfhJeMYsMKXhTgNGt8a+hz5grghAlmWQrz
zT+ES4rk0jc5j+Q1WoQ2oo/PD7jS/JZz0qoG3SRwiKuc71yib5ilGJ9FCUsfhgNu
MBxFQv6wr1wENsXMnqwaP4cpljKfu+Y+uV1zcPyrsSxHzdUtF1/qeCMhSEh4f1oG
mEHZu6u09DOvB9tu8fLrNln0eK8O3lNXngHgnYskF1FUu9hS1Q6RWcQQsH4wuHBp
Q/lJE2UMePyxJCJCSQIDAQABo4IDKTCCAyUwHwYDVR0jBBgwFoAUlE/UXYvkpOKm
gP792PkA76O+AlcwHQYDVR0OBBYEFNHI3RpBf9j9Yu9mKwooXEJmWBVfMCEGA1Ud
EQQaMBiCFiouYXAub3BzZWNzZWN1cml0eS5jb20wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5o
dHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3JsMEwG
A1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHYGCCsGAQUFBwEBBGowaDAmBggr
BgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYIKwYBBQUHMAKG
Mmh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEu
Y3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB3AEalVet1
+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABchCRqg0AAAQDAEgwRgIhAOqW
sLKCMyEfiAWfM+ShYEBpHS/CPr3nicW0maeAPG3iAiEA7+9qoL9e2Oafm4jKjC2G
bCOXITqmKwprK6sB/WSnG8sAdQAiRUUHWVUkVpY/oS/x922G4CMmY63AS39dxoNc
buIPAgAAAXIQkaneAAAEAwBGMEQCIBTmjZVqskg3j7uBwDBJd5t/Tk1ZqA92DSjP
Grz+HV7uAiAPc3QOBbrW5Nm+/GsZeCtDW4OqfTFd/HWaI4m/sS7+6wB1AFGjsPX9
AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAABchCRqi0AAAQDAEYwRAIgDvPR
5dXNpMLux5e+ixQUw4kQG90XPZU+4/XTD2GzkbACICGTetptZCnSW5s/S8mO0vmE
EBLEcY8q+IPUALystJpTMA0GCSqGSIb3DQEBCwUAA4IBAQAwbozD1PPDoq3aIz9o
2QbS9PSZS++MTyGTBdouM5p8Z9b98xe5SvgMnd7z5H0PhWjZQaX/ovnjujNDh9oQ
5EdF0HUvqcupXnSHKuT4cY7q5pZpmshCATOqx4FkFir3YzHnUBa7JtXpKuCunl32
VTZ5daepqzAvASJ5VYV2Jq5iSRxH35+5tGv8VO71NxgVzEB/3+sk7v4lnvW4kpCZ
SQe+PuTjBPAWabpL2DoqkZFXwnlO9raGcFSDJe1u9pQA82woNNk/N0esccudw8gw
CmemnIB6Ek9AAhSpC9S/fc7Tyfg1BCEVJ0R/PDfbvRkGvYS9XEmy8GNzH38q99PB
7GFd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynI0n33fXeZJf7r/7MlN
PDWVEnAYAfIOIaxC5hX6wb4JnJMPCf3sS0fkmA+kSNh4aJI8T+wo73NlHjvLe0v1
24ehcxdRpPf5tcDfhJeMYsMKXhTgNGt8a+hz5grghAlmWQrzzT+ES4rk0jc5j+Q1
WoQ2oo/PD7jS/JZz0qoG3SRwiKuc71yib5ilGJ9FCUsfhgNuMBxFQv6wr1wENsXM
nqwaP4cpljKfu+Y+uV1zcPyrsSxHzdUtF1/qeCMhSEh4f1oGmEHZu6u09DOvB9tu
8fLrNln0eK8O3lNXngHgnYskF1FUu9hS1Q6RWcQQsH4wuHBpQ/lJE2UMePyxJCJC
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13765527590693566044702715325339047617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Idaho'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Meridian'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OpSec Online, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ap.opsecsecurity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25556454463072294335062594095379826497495980596062262567393645491052630462780696715751263812591673943798944272120221536073838845921564897137344318940507730830414612255185442551108498586040984311830677580132771223801709306255219227336676846555568633003478450722815079510803192849399777761303905349506391767959558321097506709290966706011520757265574521791233088717454894870589324761007316755153160824930704504705442934401716714023894486280575192554690362246331878459189509651333628639403380243882357916376420269621764882063741325653300051083886070665481089682072703547805913072205163436981767887647930135609100732613193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1c8dd1a417fd8fd62ef662b0a285c426658155f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap.opsecsecurity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001721091aa0d0000040300483046022100ea96b0b28233211f88059f33e4a16040691d2fc23ebde789c5b499a7803c6de2022100efef6aa0bf5ed8e69f9b88ca8c2d866c2397213aa62b0a6b2bab01fd64a71bcb0075002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001721091a9de0000040300463044022014e68d956ab248378fbb81c03049779b7f4e4d59a80f760d28cf1abcfe1d5eee02200f73740e05bad6e4d9befc6b19782b435b83aa7d315dfc759a2389bfb12efeeb00750051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e5000001721091aa2d000004030046304402200ef3d1e5d5cda4c2eec797be8b1414c389101bdd173d953ee3f5d30f61b391b0022021937ada6d6429d25b9b3f4bc98ed2f9841012c4718f2af883d400bcacb49a53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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