www.advocare.com
- AdvoCare International, LP -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 05:55:b8:72:89:a6:60:cf:2e:37:9f:00:83:f7:d5:86 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
AdvoCare International, LP
Organization:
AdvoCare International, LP
Organization unit: IT
Organization unit: IT
State / Province:
Texas
Locality: Plano
Country: US
Locality: Plano
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:55:b8:72:89:a6:60:cf:2e:37:9f:00:83:f7:d5:86Serial Number (int): 7091226249878223447005606323772970374
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a4:58:3e:76:4f:6a:23:5e:67:66:5d:e9:cc:a1:8f:d2:ab:54:3e:78
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): a9:06:c8:43:3d:bd:89:34:6d:e5:73:5e:f8:46:46:f6:73:29:b4:b4
Fingerprint (sha256): 2a:64:11:45:c8:b4:6f:23:0c:c4:5c:04:d5:0d:b2:62:b6:32:40:19:91:47:d8:e7:0a:c7:ca:f2:2d:24:79:61
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.advocare.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.advocare.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.advocare.com
advocare.com
advocare.com
Other certificates including the domain name advocare.com
(limited to 100 certificates)
magazin.peak-muenster.de
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
www.hochseescheinkurs.online
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
catalog.sogears.com
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
epaper.glasmarte.at
kataloge.quester.at
*.advocare.com
kiosk.greater.sydney
kiosk.greater.sydney
*.advocare.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
blaetterkatalog.rp-media.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
renew.advocare.com
*.advocare.com
kataloge.quester.at
renew.advocare.com
www.advocare.com
*.advocare.com
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
magazin.peak-muenster.de
kataloge.quester.at
kiosk.greater.sydney
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
kataloge.fuerholz.de
www.advocare.com
kiosk.greater.sydney
www.advocare.com
www.advocare.com
webkiosk.reven.de
kurier.leimbacherdruck.ch
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
www.advocare.com
kataloge.fuerholz.de
*.advocare.com
online.hansestyle.hamburg
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
app.langguth.wine
magazin.wiese-rt.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
kataloge.fuerholz.de
kataloge.quester.at
online.hansestyle.hamburg
kataloge.my-workwear.de
webkiosk.sossenheimer-wochenblatt.de
catalog.sogears.com
berliner-kurier.kiosk.plus
renew.advocare.com
remotemail.advocare.com
spezial.holzschwab.de
webkiosks.sm-sport.de
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
weser-wohnwelt.mediaflip.de
e-paper.moinmoin.de
www.hochseescheinkurs.online
webkiosks.sm-sport.de
webkiosk.wonendoejezo.com
polsteraktuell.mediaflip.de
kataloge.fuerholz.de
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
kataloge.fuerholz.de
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
www.hochseescheinkurs.online
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
catalog.sogears.com
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
epaper.glasmarte.at
kataloge.quester.at
*.advocare.com
kiosk.greater.sydney
kiosk.greater.sydney
*.advocare.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
blaetterkatalog.rp-media.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
renew.advocare.com
*.advocare.com
kataloge.quester.at
renew.advocare.com
www.advocare.com
*.advocare.com
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
magazin.peak-muenster.de
kataloge.quester.at
kiosk.greater.sydney
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
kataloge.fuerholz.de
www.advocare.com
kiosk.greater.sydney
www.advocare.com
www.advocare.com
webkiosk.reven.de
kurier.leimbacherdruck.ch
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
www.advocare.com
kataloge.fuerholz.de
*.advocare.com
online.hansestyle.hamburg
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
app.langguth.wine
magazin.wiese-rt.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
kataloge.fuerholz.de
kataloge.quester.at
online.hansestyle.hamburg
kataloge.my-workwear.de
webkiosk.sossenheimer-wochenblatt.de
catalog.sogears.com
berliner-kurier.kiosk.plus
renew.advocare.com
remotemail.advocare.com
spezial.holzschwab.de
webkiosks.sm-sport.de
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
weser-wohnwelt.mediaflip.de
e-paper.moinmoin.de
www.hochseescheinkurs.online
webkiosks.sm-sport.de
webkiosk.wonendoejezo.com
polsteraktuell.mediaflip.de
kataloge.fuerholz.de
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
kataloge.fuerholz.de
Certificate
The complete raw certificate details for www.advocare.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIQBVW4commYM8uN58Ag/fVhjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODA0MTMwMDAwMDBaFw0xOTA0MTMxMjAwMDBaMHoxCzAJBgNVBAYTAlVTMQ4w DAYDVQQIEwVUZXhhczEOMAwGA1UEBxMFUGxhbm8xIzAhBgNVBAoTGkFkdm9DYXJl IEludGVybmF0aW9uYWwsIExQMQswCQYDVQQLEwJJVDEZMBcGA1UEAxMQd3d3LmFk dm9jYXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhxn6tu /f8Pcfkk/MIkrm9gRyP7C8q4LVnc3FMTweudfIyb7K9yuwvzmyU2rOPM4rS9CqBs vNYwHNVqdNkMY5GI4J1mBMEEb48qQ8TsAKD1BjdZ2HXOt+06nsc+Zyj5D7RJUZzx bzEUrUyZs5MzHgRyruIO83r6Mu0ustgIg7Nn9MQ8xOviqLJexTXcOzy4nEXg8JvX XCnq7wcnSSvkejKwoeIBPa9SxE7Jto+7WqPQVfxARJFDysdz5KYkSEtnLVVwno1j HChIQIsk8RgFXEyJ+wci0o0zWA0OoKyiw1zw8sLMN3Qf6RcYHYu3dBvUDh9TfaZu +1xzwlhC7xPWCyUCAwEAAaOCAcMwggG/MB8GA1UdIwQYMBaAFJBY/7CcdahRVHex 7fKjQxY4nmzFMB0GA1UdDgQWBBSkWD52T2ojXmdmXenMoY/Sq1Q+eDApBgNVHREE IjAgghB3d3cuYWR2b2NhcmUuY29tggxhZHZvY2FyZS5jb20wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOg MaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5j cmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdQYIKwYBBQUHAQEEaTBn MCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEF BQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0Ey MDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQB3MHcXWxTfs9T/iSIgwU2cWFjhJgrdmsjV+Wf0aAOacnRg7sBm 6gAvcU7gZrKg9cDhdSqVfbsO094Dp0GfIcQchvdcR52vW/nAzG0x3vRUv8vCI9Nn VZ9mzeUKikL9s/qOp6Hxhe9tsWaU8bD4barHUcndILVz03EqE8RVDAm9Zeqg8Dpy EXEns4w+gmYUdF3iY2z980i3ds5JMub3skj/Jwh6F8et4Iadw2VjShufPM2Tvcvy TxTstsAUU2bNbe6czgOlLqZJ75k/8U9mZ82s3//zwqQo8P4zphxSIYN4lDWI6fzt Ks0DI1cwA2ha3yHqZzbuPYp0rzzfTd8yMBgu -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HGfq279/w9x+ST8wiSu b2BHI/sLyrgtWdzcUxPB6518jJvsr3K7C/ObJTas48zitL0KoGy81jAc1Wp02Qxj kYjgnWYEwQRvjypDxOwAoPUGN1nYdc637Tqexz5nKPkPtElRnPFvMRStTJmzkzMe BHKu4g7zevoy7S6y2AiDs2f0xDzE6+Kosl7FNdw7PLicReDwm9dcKervBydJK+R6 MrCh4gE9r1LETsm2j7tao9BV/EBEkUPKx3PkpiRIS2ctVXCejWMcKEhAiyTxGAVc TIn7ByLSjTNYDQ6grKLDXPDywsw3dB/pFxgdi7d0G9QOH1N9pm77XHPCWELvE9YL JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7091226249878223447005606323772970374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plano' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AdvoCare International, LP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.advocare.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29343316691602963770993973466701957688228759761096294989351411982648325039852909259319473281395328900594057045558903049904106253109370294770654807886417388304191319628391010749074342189738816582326697589899394265699463804632944075317112433252468259523950404214333520885574606223797328803007858702989872042408897544293234148484958426915361248653055043536263255752660080921930113825676964639671736648091892053230333986018923755720233098075027549121464334677016915744837798630793059569181778328652829552574127168064052901022149492776185209737755831625717995879522154375434560600122696608335243539758642305330634531670821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a4583e764f6a235e67665de9cca18fd2ab543e78 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advocare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocare.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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