*.rt.hub.msg.team

- msg systems AG -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 09:30:33:af:07:d6:01:84:da:33:19:bc:71:94:68:96 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

msg systems AG

Organization: msg systems AG
State / Province: Bayern
Locality: Ismaning
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:30:33:af:07:d6:01:84:da:33:19:bc:71:94:68:96
Serial Number (int): 12213330481517253180961013291329808534
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a2:cf:5c:27:cd:97:22:48:54:b9:d9:33:61:d1:4d:a6:73:7e:bb:33
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): d1:4a:5b:4e:f2:33:41:2f:46:0b:e4:8d:04:5a:99:95:5b:c4:ca:93
Fingerprint (sha256): 29:06:75:e1:79:31:ed:74:1d:cb:75:d8:6a:fb:f2:4a:b0:d8:b8:90:bf:8f:e9:b5:3b:d8:80:e7:2c:3c:05:b3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.rt.hub.msg.team

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rt.hub.msg.team

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rt.hub.msg.team

Other certificates including the domain name msg.team

(limited to 100 certificates)
servicecenter.msg.team
*.automotive.msg.team
*.de.hub.msg.team
*.spielwiese.msg.team
customer.gbc.msg.team
*.awsdev.msg.team
*.spielwiese.msg.team
chatx.xqt.msg.team
*.dnstest.msg.team
*.xt.msg.team
mep.gbp.msg.team
ct-dev.hub.msg.team
support.greendaisycleaningservices.co.uk
zoho.profitroom.com
vote.xt.msg.team
*.gbp.msg.team
*.rt.hub.msg.team
*.dnstest.msg.team
*.spielwiese2.msg.team
support.ethos.ltd
*.dnstest.msg.team
*.dnstest.msg.team
apps.mro.msg.team
*.spielwiese4.msg.team
*.xis.msg.team
airflow-test.zt.msg.team
*.spielwiese.msg.team
*.automotive.msg.team
*.zt.msg.team
minnosphere.com
*.dnstest.msg.team
*.spielwiese4.msg.team
*.publicsector.msg.team
operations.gba.msg.team
minnosphere.com
cd-dev.hub.msg.team
guru.msg.team
*.spielwiese2.msg.team
*.xis.msg.team
guru.msg.team
ai.msg.team
*.spielwiese2.msg.team
*.gbm.msg.team
*.gba.msg.team
*.gbg.msg.team
guru.msg.team
status.msg.team
*.ipw.gbv.msg.team
*.spielwiese3.msg.team
customer.gbc.msg.team
*.spielwiese.msg.team
*.gbl.msg.team
guru.msg.team
desk.locster.fr
aditoapi.bsm.msg.team
*.publicsector.msg.team
*.myapp11.spielwiese.msg.team
*.apps.oc2.msn.msg.team
support.42nerds.com
support.evocion.fr
*.apps.oc2.msn.msg.team
*.msg.team
guru.msg.team
customer-test.gbc.msg.team
chatx.xqt.msg.team
*.gbl.msg.team
*.demo.hds.msg.team
servicecenter.msg.team
guru.msg.team
*.spielwiese2.msg.team
support.fyooz.co.uk
tamara.msg.team
aditoapi.bsm.msg.team
minnosphere.com
zoho.profitroom.com
servicecenter.msg.team
*.gbp.msg.team
*.demo.hds.msg.team
vc-dev.hub.msg.team
training.xt.msg.team
*.demo.hds.hds.msg.team
support.xn--musikverein-grningen-2ec.de
mep.gbp.msg.team
pm-dev.hub.msg.team
guru.msg.team
*.xt.msg.team
*.xt.msg.team
*.dnstest.msg.team
support.tpc-group.com
sd-test.msg.team
*.gbp.msg.team
*.gbv.msg.team
servicecenter.msg.team
*.spielwiese2.msg.team
*.spielwiese4.msg.team
support.crmsocius.co.uk
soporte.esycontrol.com
support.bimequity.dk
*.dnstest.msg.team
minnosphere.com

Certificate

The complete raw certificate details for *.rt.hub.msg.team in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgIQCTAzrwfWAYTaMxm8cZRoljANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIyMTIxMzAwMDAwMFoXDTI0MDEwOTIzNTk1OVowZjELMAkGA1UEBhMCREUx
DzANBgNVBAgTBkJheWVybjERMA8GA1UEBxMISXNtYW5pbmcxFzAVBgNVBAoTDm1z
ZyBzeXN0ZW1zIEFHMRowGAYDVQQDDBEqLnJ0Lmh1Yi5tc2cudGVhbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANvxt62iCqrcrEd4XI0mjVJ+lVl3Q30A
BRFySq1PhK7IQyNl6p9GVgZ+o9HpCs3JwYSyfJ0nR644R+afOiG5G2vih+jBj42Q
4iVsGCKxuWKmYCFDWIzUf1LD2fC5p+MRNtjrsyELKXwmDUD25YIYx/KnleeY/UvN
BuAB+3ZPPLvWI14UWHI6UkJCWIbaqy1N0+fI0tFY7xxsNKoEMqPchBGJ6ZK/WERK
D1WLpf+rIlsLLXtSbKJUyG6htYCwOWyzhq8dUpbx5wGz7nTexxzPNxJIwQUKcZoS
83jYCma+jeN4EmUZ+C8j3Ug2lgelEoZ+cyDg11I/8h4DcoOmNl5jg/ESKTDD0xpE
rfY2isxJ9i9JgmXDuwWNpwCJqFFAlJjfkXhvp2DwfoZnEhQ3H0pyzMp27H3L1bFZ
u0FYequ2SsRkVGVoATnCB5nYzcKKV+A5Is0MCRU6H8Qm5bFX5Vg4nSOQuFkzbe6S
ue9v8m49wN5qmrsvl/+/gEDD1LD0uYCo88c/x5XUyj8cr2CMR3OMI56LyqRxmoio
TnEcT1+m9IZA85a6uO3F09V18vu1+UJap9Qgoi7I+N5TZ73RgbZ5ZKvY8SrXmQEm
TZF1shQZET7lsKMTHayEFUJoSrWbfS6V05F+X1kfNui/Wpf+RKiz4JNsSWs7Ft7F
rK3cQeAehw7dAgMBAAGjggGqMIIBpjAfBgNVHSMEGDAWgBSUT9Rdi+Sk4qaA/v3Y
+QDvo74CVzAdBgNVHQ4EFgQUos9cJ82XIkhUudkzYdFNpnN+uzMwHAYDVR0RBBUw
E4IRKi5ydC5odWIubXNnLnRlYW0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2Rw
Lmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3JsMD4GA1UdIAQ3MDUw
MwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMu
Z2VvdHJ1c3QuY29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5nZW90cnVz
dC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1BtazG3wnEp6MQIxzq/M4
EQ5DUWFh5cGA8ClASQ6zij7dqiofcosuiuLXsPDoFiCEHlieIONx2/OySQp8W57h
OoAVH0SYAw66sBF58H1Dz4HidCv74voAUa7DIn7z9B9Cb3qQFv0gPSZ8flnJE60Y
5yaV8LnfbNprLy6T1X4nb9/cg2SZm91IKc2oga6TIQuq9RYO4mJvq4/HNxu8safj
/ycOd/XXEDT7+X0Xk3y6mRCVZyskxi3pAtYvTimxGcmCzo+bab7md0y0GPNrCIo2
Ib4UhkmootENUgTJchviFDMQy8Shcd+domBiNg5RXyFxOorAJNRj3GpXa4ECoVjA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2/G3raIKqtysR3hcjSaN
Un6VWXdDfQAFEXJKrU+ErshDI2Xqn0ZWBn6j0ekKzcnBhLJ8nSdHrjhH5p86Ibkb
a+KH6MGPjZDiJWwYIrG5YqZgIUNYjNR/UsPZ8Lmn4xE22OuzIQspfCYNQPblghjH
8qeV55j9S80G4AH7dk88u9YjXhRYcjpSQkJYhtqrLU3T58jS0VjvHGw0qgQyo9yE
EYnpkr9YREoPVYul/6siWwste1JsolTIbqG1gLA5bLOGrx1SlvHnAbPudN7HHM83
EkjBBQpxmhLzeNgKZr6N43gSZRn4LyPdSDaWB6UShn5zIODXUj/yHgNyg6Y2XmOD
8RIpMMPTGkSt9jaKzEn2L0mCZcO7BY2nAImoUUCUmN+ReG+nYPB+hmcSFDcfSnLM
ynbsfcvVsVm7QVh6q7ZKxGRUZWgBOcIHmdjNwopX4DkizQwJFTofxCblsVflWDid
I5C4WTNt7pK572/ybj3A3mqauy+X/7+AQMPUsPS5gKjzxz/HldTKPxyvYIxHc4wj
novKpHGaiKhOcRxPX6b0hkDzlrq47cXT1XXy+7X5Qlqn1CCiLsj43lNnvdGBtnlk
q9jxKteZASZNkXWyFBkRPuWwoxMdrIQVQmhKtZt9LpXTkX5fWR826L9al/5EqLPg
k2xJazsW3sWsrdxB4B6HDt0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12213330481517253180961013291329808534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ismaning'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msg systems AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rt.hub.msg.team'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897294087369783489221798835817685958498369572700418009315130425047273865184333300598196595000800480830459894344135694362991483689628607282799718878309268161794337078456355163259829501949305829156989334283564537698434881319943918290153268573972335421930353148219706160425948547077225314343370763937791134453293614161566101524162051843097582329444600021272435161257615810994818985320092793876187255565816550286535262174248871392902140960947645239026620914409953283396716133698473208195874751499100149881298667981608658879925385402757195012399775879023203216426473853258355002126558300138204354945050405962228835339496687480919751543995954639612507550629326265776036135009353048095658909448321209732534559966422102538148842767211686329447626371678583424587869126027284851973715165705723185778136347742061111913809691974389076839114164855429148362207529894181506992480613522668215358426538385732355145240509804055226739167740701571115070707731328794291891993370409117763131398181083613950828042002278597080015741535114084765848902517925530693363545621868601242945487718679523591625681358871365685492284191729838019098229036111397812648965973471321535459129862502545404046489384865160266043426103638023201995653326976733321025928319930077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2cf5c27cd97224854b9d93361d14da6737ebb33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rt.hub.msg.team'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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