*.lululemon.com.hk
- Lululemon Athletica Canada inc -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 06:4c:74:f4:d5:52:d9:10:11:22:06:e6:2b:9f:26:81 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Lululemon Athletica Canada inc
Organization:
Lululemon Athletica Canada inc
Organization unit: ecomm
Organization unit: ecomm
State / Province:
British Columbia
Locality: Vancouver
Country: CA
Locality: Vancouver
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:4c:74:f4:d5:52:d9:10:11:22:06:e6:2b:9f:26:81Serial Number (int): 8372354693164283270522854745141356161
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f9:0c:82:c7:d1:9e:ae:52:89:c8:7d:5e:cc:65:da:ab:2e:bd:28:5d
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): c2:92:08:8a:91:b3:40:df:76:61:c1:57:8f:91:a8:ff:48:b9:9a:32
Fingerprint (sha256): 2c:03:20:2d:00:05:6a:3e:ec:93:7d:6a:37:15:51:c1:21:16:80:57:9e:a5:c7:d4:a6:96:68:e4:d7:fd:12:1c
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.lululemon.com.hk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.lululemon.com.hk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.lululemon.com.hk
lululemon.com.hk
lululemon.com.hk
Other certificates including the domain name lululemon.com.hk
(limited to 100 certificates)
lululemon.com
lululemon.com
cdn.lululemon.com.au
cdn.lululemon.com.au
smetrics.lululemon.com.hk
smetrics.lululemon.com.hk
lululemon.com.au
mi.lululemon.com.hk
lululemon.com
smetrics.lululemon.com.hk
lululemon.com
cdn.lululemon.com.au
mi.lululemon.com.hk
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
cdn.lululemon.com.au
stage.lululemon.com
lululemon.com
www.lululemon.com
cdn.lululemon.com.au
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
www.lululemon.com
www.lululemon.com
www.lululemon.com
stage.lululemon.com
lululemon.com.hk
stage.lululemon.com
www.lululemon.com.hk
lululemon.com
stage.lululemon.com
www.lululemon.com
*.lululemon.com.hk
*.lululemon.com.hk
www.lululemon.com
www.lululemon.com
lululemon.com
stage.lululemon.com
www.lululemon.com
www.lululemon.com
lululemon.com
www.lululemon.com
lululemon.com
cdn.lululemon.com.au
cdn.lululemon.com.au
www.lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
lululemon.com.hk
lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
stage.lululemon.com
lululemon.com
lululemon.com
stage.lululemon.com
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
lululemon.com
stage.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
*.lululemon.com.hk
stage.lululemon.com
lululemon.com.hk
lululemon.com
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
mi.lululemon.com.hk
stage.lululemon.com
cdn.lululemon.com.au
lululemon.com
lululemon.com.hk
smetrics.lululemon.com.hk
lululemon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
stage.lululemon.com
stage.lululemon.com
stage.lululemon.com
www.lululemon.com
stage.lululemon.com
lululemon.com
cdn.lululemon.com.au
cdn.lululemon.com.au
smetrics.lululemon.com.hk
smetrics.lululemon.com.hk
lululemon.com.au
mi.lululemon.com.hk
lululemon.com
smetrics.lululemon.com.hk
lululemon.com
cdn.lululemon.com.au
mi.lululemon.com.hk
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
cdn.lululemon.com.au
stage.lululemon.com
lululemon.com
www.lululemon.com
cdn.lululemon.com.au
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
www.lululemon.com
www.lululemon.com
www.lululemon.com
stage.lululemon.com
lululemon.com.hk
stage.lululemon.com
www.lululemon.com.hk
lululemon.com
stage.lululemon.com
www.lululemon.com
*.lululemon.com.hk
*.lululemon.com.hk
www.lululemon.com
www.lululemon.com
lululemon.com
stage.lululemon.com
www.lululemon.com
www.lululemon.com
lululemon.com
www.lululemon.com
lululemon.com
cdn.lululemon.com.au
cdn.lululemon.com.au
www.lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
lululemon.com.hk
lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
stage.lululemon.com
lululemon.com
lululemon.com
stage.lululemon.com
www.lululemon.com
lululemon.com
mi.lululemon.com.hk
lululemon.com
stage.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
*.lululemon.com.hk
stage.lululemon.com
lululemon.com.hk
lululemon.com
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
mi.lululemon.com.hk
www.lululemon.com
mi.lululemon.com.hk
stage.lululemon.com
cdn.lululemon.com.au
lululemon.com
lululemon.com.hk
smetrics.lululemon.com.hk
lululemon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
stage.lululemon.com
stage.lululemon.com
stage.lululemon.com
www.lululemon.com
stage.lululemon.com
Certificate
The complete raw certificate details for *.lululemon.com.hk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIQBkx09NVS2RARIgbmK58mgTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODAyMjgwMDAwMDBaFw0xODExMDkxMjAwMDBaMIGSMQswCQYDVQQGEwJDQTEZ MBcGA1UECBMQQnJpdGlzaCBDb2x1bWJpYTESMBAGA1UEBxMJVmFuY291dmVyMScw JQYDVQQKEx5MdWx1bGVtb24gQXRobGV0aWNhIENhbmFkYSBpbmMxDjAMBgNVBAsT BWVjb21tMRswGQYDVQQDDBIqLmx1bHVsZW1vbi5jb20uaGswggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCo+QzRIXEcmbNK0x2wSl/IISCJ2kwi7bmu4D1Q bWqc4NPMZs2hN4pphMwdfRPlDuA8FZh6gMfUrOYn1VzsyiIHWBBKb/z9HqlmI+/4 H76cWzNoQSmdGgW5K/qqL+lhSQicneiJyADu+41u/DsX2b8yhnZwq819rVvZeLb+ y0wjfswx5gCgSt0l7RO7W9eG7x9G96s15KrD2ys7dQyNjDaXZgVpPx5mTYdndOan Wvh3viD0ASj9XWif/g9LCBxMZ0hmZkLsNuQhvWAzjJIaG1MdSOKB483A/GVO+/V0 q8LNkCYRGTHrOPV25fGmGANnwNvi2p2aMCe6syA+taJ71Bc/AgMBAAGjggHJMIIB xTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU+QyC x9GerlKJyH1ezGXaqy69KF0wLwYDVR0RBCgwJoISKi5sdWx1bGVtb24uY29tLmhr ghBsdWx1bGVtb24uY29tLmhrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5n ZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJ YIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv bS9DUFMwCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0 cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNl cnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIw ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLXcZfes 5zKBVjvavnfKvBb0FxGC1jsA5eQ+88/lRXJyPLDfhIpgFDOrZrP/Jt0ERCVUlZLm UcHVH71PBxmOR1SCRUZfTPaRKECSCny1unxHQIq1OfJTpPLmqKhZJqfiGAKnr/Cq TpNLY3LCbPohciPD3WyVFKzjzxJHbAd7HNZIaB5fW3eoZKYY/YBJFhvGMAmOS8G4 W7hkcYlxWVaSp/rY0+cCN0Gj3Ooz4p7gyIrMiUVScpr6S4E9wK8pGnZUkmBLqxzR I7lSUuto2pq2lDU+GTnL+j4j840+Xl6BKzELcu2pb9/lvrT6v7JdpPtskKxqyo4S SW4Aqm3fK5YALw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPkM0SFxHJmzStMdsEpf yCEgidpMIu25ruA9UG1qnODTzGbNoTeKaYTMHX0T5Q7gPBWYeoDH1KzmJ9Vc7Moi B1gQSm/8/R6pZiPv+B++nFszaEEpnRoFuSv6qi/pYUkInJ3oicgA7vuNbvw7F9m/ MoZ2cKvNfa1b2Xi2/stMI37MMeYAoErdJe0Tu1vXhu8fRverNeSqw9srO3UMjYw2 l2YFaT8eZk2HZ3Tmp1r4d74g9AEo/V1on/4PSwgcTGdIZmZC7DbkIb1gM4ySGhtT HUjigePNwPxlTvv1dKvCzZAmERkx6zj1duXxphgDZ8Db4tqdmjAnurMgPrWie9QX PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8372354693164283270522854745141356161 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lululemon Athletica Canada inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecomm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lululemon.com.hk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21330846399116792859514576704642924442783760766110048790078400435253157893408621504342399762515586835717382958444200836278922279010918634209572009081615408031579682736531424209354843358747854979675156265571872932133476175564143257662716902489964070000649308337724081899449309872498914561325730503783401310058862327832871213197937621533654035573311300145546589242084167510686630216988692503790090767814920000747212294926564853561744272670702518228768907236733829969492888355549879486953791368902958499411721787423996140154758694247609969690118110371186479304322479109185507628042642118457029245461937239382954154923839 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f90c82c7d19eae5289c87d5ecc65daab2ebd285d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lululemon.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lululemon.com.hk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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