grandronde.org

- Confederated Tribes of the Grand Ronde Community -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:23:26:c6:6b:1d:29:c2:22:82:e6:e5:c4:4f:3b:a3 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Confederated Tribes of the Grand Ronde Community

Organization: Confederated Tribes of the Grand Ronde Community
Organization unit: Information Systems
State / Province: Oregon
Locality: Grand Ronde
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:23:26:c6:6b:1d:29:c2:22:82:e6:e5:c4:4f:3b:a3
Serial Number (int): 5499428825079651144262447503397305251
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 30:07:af:e2:59:ce:1d:7b:3c:a2:6f:8b:17:67:df:94:11:8a:00:b2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3c:2a:f0:17:d9:3d:e3:6d:e6:6b:96:1f:7f:76:8c:58:67:b6:f5:18
Fingerprint (sha256): 2a:ee:bf:48:b5:4a:ce:54:6a:ef:fb:58:8b:81:36:08:ef:05:a6:83:06:b0:63:26:7c:c9:82:1d:7f:8a:aa:42

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate grandronde.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandronde.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grandronde.org
www.grandronde.org
autodiscover.thecommunityfund.com
email.grandronde.org
autodiscover.grandronde.org
exchange.grandronde.org
mail.grandronde.org
thecommunityfund.com

Other certificates including the domain name grandronde.org

(limited to 100 certificates)
*.grandronde.org
techstop.ats-inc.com
helpdesk.edmontonstatebank.com
*.grandronde.org
helpdesk.grandronde.org
helpdesk.edmontonstatebank.com
email.grandronde.org
grandronde.org
help.yonkerscontractingco.com
techstop.ats-inc.com
service.upperlinehealth.com
*.grandronde.org
grandronde.org
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
grandronde.org
grandronde.org
help.yonkerscontractingco.com
*.grandronde.org
service.upperlinehealth.com
*.grandronde.org
helpdesk.edmontonstatebank.com
mobile.grandronde.org
helpdesk.grandronde.org
service.upperlinehealth.com
*.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
grandronde.org
helpdesk.grandronde.org
*.grandronde.org
helpdesk.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
weblink.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
email.grandronde.org
helpdesk.edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
grandronde.org
service.upperlinehealth.com
help.yonkerscontractingco.com
grandronde.org
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
weblink.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
grandronde.org
service.upperlinehealth.com

Certificate

The complete raw certificate details for grandronde.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIQBCMmxmsdKcIigublxE87ozANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODA1MTcwMDAwMDBaFw0xOTAxMjAxMjAwMDBaMIGmMQswCQYDVQQGEwJVUzEP
MA0GA1UECBMGT3JlZ29uMRQwEgYDVQQHEwtHcmFuZCBSb25kZTE5MDcGA1UEChMw
Q29uZmVkZXJhdGVkIFRyaWJlcyBvZiB0aGUgR3JhbmQgUm9uZGUgQ29tbXVuaXR5
MRwwGgYDVQQLExNJbmZvcm1hdGlvbiBTeXN0ZW1zMRcwFQYDVQQDEw5ncmFuZHJv
bmRlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJMf7aZljd2
3hWbFz04iIr9hjKB/A8j8MIaaxbJxwwHSuTr7o27uNrAifl/gwX0O2rxZqR4Q1Mt
h3bZ7VWCkHz4k5dHWZ0obRjfkTShqH2BOXvnE6Qy7h41nzUkQ+YRpTJfd4rzl9RY
OMbmmZewF8ftNe7/P/h7DNyTpWJT6mCOeZEG0QWiwZRmFTzed1wjC6XkJeoDOEdm
BaS8m7+Xg+M2UwYkHUP56IXwJoBUq8vnHRSbbNrsh9RLAi8BDaDXnx7sqndpyOpd
lS8f2owpzllS1A0vjI6Ho76weHKHh8l/8Uuf7fipMDYs+nx1v07VPbf9FCkZMZW2
DZoUs0uQhj8CAwEAAaOCA1cwggNTMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKj
QxY4nmzFMB0GA1UdDgQWBBQwB6/iWc4dezyib4sXZ9+UEYoAsjCByQYDVR0RBIHB
MIG+gg5ncmFuZHJvbmRlLm9yZ4ISd3d3LmdyYW5kcm9uZGUub3JngiFhdXRvZGlz
Y292ZXIudGhlY29tbXVuaXR5ZnVuZC5jb22CFGVtYWlsLmdyYW5kcm9uZGUub3Jn
ghthdXRvZGlzY292ZXIuZ3JhbmRyb25kZS5vcmeCF2V4Y2hhbmdlLmdyYW5kcm9u
ZGUub3JnghNtYWlsLmdyYW5kcm9uZGUub3JnghR0aGVjb21tdW5pdHlmdW5kLmNv
bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1Ry
dXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsG
AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1
BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1
c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20v
R2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWNv
9ramAAAEAwBIMEYCIQDmGN4WeFVF6QrWNd5B5lnsIWcS+wjQFN6jLVtqXy4FdQIh
AMdDNtAWYF38O8C1hyqJ0a/Kg6BZAvaYi8YytTBOC+Q4AHUAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFjb/a4IAAABAMARjBEAiATyrmddJ89L2Qx
02QgDUHk6nd08tR9cp55kNnbRDIylwIgEU8ttUHWmHGGXKHpAwyuAi2WncIqlEJg
NC/kK1H89rcwDQYJKoZIhvcNAQELBQADggEBAIX6Y2p8aRmr0OlPn9TbTukA0Fpz
8JeRUH6TD5OBeZXLaSGjHRyEJn6QyBn5YBDcHrVYecMpWPvXQMCy2TngMgPrO8cr
qdMwrydzUNbCPSQ59EYvCNaGhjlN5VNolrYW1qCH2MhFxgP4NXf4zAZP7M1ZFs9Z
KkkaiTiTBfoefues/CeZp40BPBZZmuaEQ6oJk1VML/PeEltvWEPCqP02Bu6RcoBk
4qtBGeTpnCykNRsfX2MJIAvy/r20KLQXsYPkvtZB+Xpq7dpyicI35B/Uqcc9Hmgw
LAhztpUy19FOYp6XJ5/s5JjTUCkle4ETiQNHh2GGYxF9mzxaDXqCEm18r1w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokx/tpmWN3beFZsXPTiI
iv2GMoH8DyPwwhprFsnHDAdK5Ovujbu42sCJ+X+DBfQ7avFmpHhDUy2HdtntVYKQ
fPiTl0dZnShtGN+RNKGofYE5e+cTpDLuHjWfNSRD5hGlMl93ivOX1Fg4xuaZl7AX
x+017v8/+HsM3JOlYlPqYI55kQbRBaLBlGYVPN53XCMLpeQl6gM4R2YFpLybv5eD
4zZTBiQdQ/nohfAmgFSry+cdFJts2uyH1EsCLwENoNefHuyqd2nI6l2VLx/ajCnO
WVLUDS+MjoejvrB4coeHyX/xS5/t+KkwNiz6fHW/TtU9t/0UKRkxlbYNmhSzS5CG
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5499428825079651144262447503397305251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Ronde'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Confederated Tribes of the Grand Ronde Community'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandronde.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20488328408187117420358681235372448454797961184731624251856863003646827523627501199769198159349696628376106665539708951553729013827752380047172348090143318684451397876497331590662706307415162695411116904666750227315774651267196463125821240382343885618964086198124516847013539259797467811223268370190884027287490572349261599310292255809317845985058151014563139458026261169849152853992320125708242155852840385445311592785240422426784019000938709681304198718246249221939820998860628269684440545373359711688540285418243825493517177683110846878459627731801648544061024437494178177005410609490094166052944380783196508292671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3007afe259ce1d7b3ca26f8b1767df94118a00b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thecommunityfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecommunityfund.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001636ff6b6a60000040300483046022100e618de16785545e90ad635de41e659ec216712fb08d014dea32d5b6a5f2e0575022100c74336d016605dfc3bc0b5872a89d1afca83a05902f6988bc632b5304e0be4380075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001636ff6b8200000040300463044022013cab99d749f3d2f6431d364200d41e4ea7774f2d47d729e7990d9db443232970220114f2db541d69871865ca1e9030cae022d969dc22a944260342fe42b51fcf6b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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