ggc-recruit-apply.gabest.usg.edu

- Board of Regents of the University System of Georgia -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 0e:4b:ff:90:8a:9f:d7:2f:a6:c1:04:83:f2:a2:93:40 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Board of Regents of the University System of Georgia

Company registration number: Government Entity
Organization: Board of Regents of the University System of Georgia
Organization unit: ITS
State / Province: Georgia
Locality: Athens
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:4b:ff:90:8a:9f:d7:2f:a6:c1:04:83:f2:a2:93:40
Serial Number (int): 19003797671585434271286830294450213696
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 85:f3:7c:41:a3:57:47:a1:79:f1:67:e4:c5:c5:38:c7:55:79:c4:a7
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): c8:e4:16:5a:41:9d:3e:db:74:06:bc:96:c6:48:1a:8e:69:4c:9e:ef
Fingerprint (sha256): 29:89:a6:ea:d2:ac:eb:7d:10:ea:7e:8e:ab:ce:c5:c7:10:3a:09:88:5e:cb:33:ad:eb:7c:30:7f:ae:06:2d:57

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate ggc-recruit-apply.gabest.usg.edu

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ggc-recruit-apply.gabest.usg.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ggc-recruit-apply.gabest.usg.edu
ggc-recruit-pg.gabest.usg.edu
start.ggc.edu
ggc-recruit-admin.gabest.usg.edu
recruiter.ggc.edu
recruiterws.ggc.edu

Other certificates including the domain name usg.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
statuspage.io
statuspage.io
statuspage.io
gil.uga.edu
spexternal.bor.usg.edu
*.proxygsu-sbul.galileo.usg.edu
epay.usg.edu
filestest.usg.edu
ap1.bor.usg.edu
statuspage.io
idp-demo-prod.bor.usg.edu
gil.uga.edu
jirafeau.galileo.usg.edu
*.hprod.onehcm.usg.edu
www.usg.edu
elver.adm.usg.edu
giluc.usg.edu
gitlab.usg.edu
*.proxygsu-dal1.galileo.usg.edu
ocs-prod-cwa.uso.bor.usg.edu
statuspage.io
statuspage.io
statuspage.io
asurams.gabest.usg.edu
statuspage.io
statuspage.io
*.onehcm.usg.edu
blog.dlg.galileo.usg.edu
oer.galileo.usg.edu
statuspage.io
*.proxygsu-psnd.galileo.usg.edu
dlg.usg.edu
*.proxygsu-gwt1.galileo.usg.edu
statuspage.io
gil.usg.edu
*.fprod.gafirst.usg.edu
statuspage.io
pauth.usg.edu
pauth.usg.edu
adfs.ssc.usg.edu
statuspage.io
statuspage.io
apistatus.pitneybowes.com
apistatus.pitneybowes.com
statuspage.io
bi123.usg.edu
*.dev.usg.edu
*.proxygsu-seff.galileo.usg.edu
ftp.ssc.usg.edu
statuspage.io
statuspage.io
statuspage.io
*.proxygsu-sgai.galileo.usg.edu
statuspage.io
tlsv12-only.bor.usg.edu
exchcas-prod.uso.bor.usg.edu
*.aufdev2.gafirst.usg.edu
*.proxygsu-mac2.galileo.usg.edu
analytics.usg.edu
retiree-info.usg.edu
apps.usg.edu
statuspage.io
ftp.ssc.usg.edu
statuspage.io
www.bor.usg.edu
*.proxygsu-nega.galileo.usg.edu
*.view.usg.edu
apistatus.pitneybowes.com
statuspage.io
www.ssc.usg.edu
statuspage.io
app.usg.edu
ssl.ssc.usg.edu
statuspage.io
access.ssc.usg.edu
sharepoint.ssc.usg.edu
*.gafirst.usg.edu
statuspage.io
apistatus.pitneybowes.com
statuspage.io
emajor.usg.edu
statuspage.io
statuspage.io
gsw.gabest.usg.edu
*.proxygsu-sfor.galileo.usg.edu
statuspage.io
statuspage.io
statuspage.io
apistatus.pitneybowes.com
*.proxygsu-pswf.galileo.usg.edu
statuspage.io
dataviz.usg.edu
statuspage.io
ducs-con.adm.usg.edu
statuspage.io
statuspage.io
statuspage.io
usgtrackit.bor.usg.edu

Certificate

The complete raw certificate details for ggc-recruit-apply.gabest.usg.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MOX/ui2e5MIZv3JKPAv
03Tzynozk1n2qN8XNx4hFYc5KlrYDDiSWQ919o/y9UX8uDdu/s14KFiF7cjbBECI
GKilkF7uyxUA5N5fuKn3mRyaLgfmeK/472ON4JRCq0y2lsq3lt7kg+XGgEgzmdiy
q2h13LzmYTOSkt2ZVMH8h2NgJX4jDM+N3Co8ZPmjl6ZuPa3gO2syL3Mb4twR77IX
e3wIEks6tMj93Yn6H+HkMelGcQRMZmijIv9AgAGt7xoBSIyLk8tihNaNxgo36Y+L
eDU903mjkKSCLm33fyoxyhu160IevcEgiH9sT9f5ng6P6EHbUTHqCu9i4B+hy0ZJ
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19003797671585434271286830294450213696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Athens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Board of Regents of the University System of Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ggc-recruit-apply.gabest.usg.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26858971517493840328174058281451006853601173439261157686697320726739573871496912071997603352690331340655624391486224079421142954898374384251801454693754364023497631563619780379907631054100441207490767771749705885464686982817349916762958315556039845019195886493772617964156002042003837629191889353189460726677137321280073859552381239312069806995021816207973556225235405796704182312172711199626520002185783176919036118744326352555666700958257231834065116924093941062223633196502944801388164861687968441482528462172246709729109092561384294950945298850724985450690662351052225671080176359025621998792441596806076859566379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85f37c41a35747a179f167e4c5c538c75579c4a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggc-recruit-apply.gabest.usg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggc-recruit-pg.gabest.usg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.ggc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggc-recruit-admin.gabest.usg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiter.ggc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiterws.ggc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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