*.vitalaxis.com

- VitalAxis Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:26:05:6d:fd:d6:b2:2c:5d:d4:8b:22:55:9e:28:06 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VitalAxis Inc

Organization: VitalAxis Inc
State / Province: Maryland
Locality: Rockville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:26:05:6d:fd:d6:b2:2c:5d:d4:8b:22:55:9e:28:06
Serial Number (int): 12160469369165557629033044826577053702
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:66:34:ac:ad:52:b5:2f:5a:bc:6b:d7:6f:e5:d2:9a:77:16:9d:74
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 69:6d:4b:90:43:9a:47:fb:e3:1a:61:74:58:66:4f:c9:61:4d:38:f8
Fingerprint (sha256): 30:47:7c:96:5c:45:16:65:bb:28:20:38:b4:08:74:cc:13:c1:c3:7d:1f:57:23:ab:56:6e:17:a3:bd:24:d2:f3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.vitalaxis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vitalaxis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vitalaxis.com
vitalaxis.com

Other certificates including the domain name vitalaxis.com

(limited to 100 certificates)
support.theperipheralstore.in
accounts.ukbh.co.uk
social.mgi.vn
connect.betterspace360.com
*.vitalaxis.com
insights.muhimmaplatform.com
insights.muhimmaplatform.com
insights.muhimmaplatform.com
insights.muhimmaplatform.com
books.solidtechnics.com
social.mgi.vn
books.sidestreetmedia.cc
insights.muhimmaplatform.com
acc.ts.printo.in
snowanalytics.manageengine.com
connect.macleodmarketinggroup.com
insights.muhimmaplatform.com
insights.muhimmaplatform.com
elixirqcmdmprovidervalidation.vitalaxis.com
acc.ts.printo.in
insights.muhimmaplatform.com
insights.muhimmaplatform.com
acc.ts.printo.in
social.mgi.vn
connect.begoodbooks.com
insights.muhimmaplatform.com
connect.stella-group.com
social.mgi.vn
clients.tcrtechnologies.com
acc.ts.printo.in
reports.maasco.com
social.mgi.vn
insights.muhimmaplatform.com
connect.assa.com.au
insights.identity-solutions.com.au
social.mgi.vn
support.plcorp.com
analytics.goprairi.com
insights.muhimmaplatform.com
analytics-saml.finepick.com
connect.desotollc.com
*.vitalaxis.com
insights.muhimmaplatform.com
insights.muhimmaplatform.com
social.mgi.vn
insights.muhimmaplatform.com
insights.muhimmaplatform.com
analytics.ourdealerdata.com
connect.macleodmarketinggroup.com
assist.gprsinc.com
social.mgi.vn
connect.macleodmarketinggroup.com
connect.techcompanyinc.net
analytics.goprairi.com
connect.macleodmarketinggroup.com
insights.muhimmaplatform.com
hr.cybexo.com
connect.snaplitics.com
books.peakperformancedigital.com
connect.macleodmarketinggroup.com
insights.muhimmaplatform.com
insights.muhimmaplatform.com
social.mgi.vn
books.djltraining.com
support.strataprof.com
social.mgi.vn
insights.muhimmaplatform.com
analytics.figbytes.biz
soporte.karzo.com.mx
*.VITALAXIS.COM
*.vitalaxis.com
social.mgi.vn
clics.asper.betspino.org
connect.wicklowmusicdrama.com
books.intelikinect.com
reports.commonareas.io
assist.gprsinc.com
social.mgi.vn
insights.muhimmaplatform.com
help.sonet.com.au
connect.macleodmarketinggroup.com
connect.amsa-consulting.com
social.mgi.vn
www.vitalaxis.com
support.pelicanqsrsolutions.com
social.mgi.vn
insights.muhimmaplatform.com
connect.macleodmarketinggroup.com
insights.muhimmaplatform.com
billing.musicmaster.com
connect.macleodmarketinggroup.com
analytics.goprairi.com
insights.muhimmaplatform.com
social.mgi.vn
social.mgi.vn
reports.commonareas.io
social.mgi.vn
support.simpleintranet.org
*.vitalaxis.com
books.onizukastudio.com

Certificate

The complete raw certificate details for *.vitalaxis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIQCSYFbf3Wsixd1IsiVZ4oBjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjA4MDUwMDAwMDBaFw0yMzA4MTEyMzU5NTlaMGYxCzAJBgNVBAYTAlVTMREw
DwYDVQQIEwhNYXJ5bGFuZDESMBAGA1UEBxMJUm9ja3ZpbGxlMRYwFAYDVQQKEw1W
aXRhbEF4aXMgSW5jMRgwFgYDVQQDDA8qLnZpdGFsYXhpcy5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkmRglOFx6wiSdhEazsIKi7YB5LzNSYJ4
9fN8BwGxd+gJPC4Cv4QgqUwo6Rt4UAkDgNjJfqL00jNouu8+j99M+H5tfHWNjXax
Ds6/xRNiQm7wwqv+txBZ6AthdegiUiC+wpOOUwu053eBl6oYaPVds3QuzVNoloiF
i9o/7WCepi2m2o2GfpHARD0sw6XrO3SIvM6gGmQr0t8h7uKOGHbjjL/BjSDTcUU9
PE+i0EeH31h5BU7dKUlipjpzhJItkHUBfC+bcRYjmNuvi87IUTKT1qx8e4bVJnk4
FkIN7i/5rRrzmjfbf+UugzdLx+KGgd3sehwR6ABXpubi9e9cm1VhAgMBAAGjggMj
MIIDHzAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU
BGY0rK1StS9avGvXb+XSmncWnXQwKQYDVR0RBCIwIIIPKi52aXRhbGF4aXMuY29t
gg12aXRhbGF4aXMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90
cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMD4GA1UdIAQ3MDUwMwYGZ4EM
AQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB1
BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1
c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20v
R2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQC
BIIBbwSCAWsBaQB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAAB
gm6QfUIAAAQDAEgwRgIhAKhmtaYU5L3H31YGWObJ4hXOmdrexKZPlx384BwS/U9/
AiEA0k3EjYGShELJsaRPtoC5WVkeT2OaLwBBmw76cu9HpkAAdgA1zxkbv7FsV78P
rUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYJukH1qAAAEAwBHMEUCIAU/Bnh0m7f3
NjmvNpKsoSN8GKJMmmK3r5ZYtMQNYvAlAiEAxf5EahFLlWyPm/ldfemZt9sUjmtS
e7DHAJK157/JfRAAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAA
AYJukH1vAAAEAwBHMEUCIDo4b/xw2rstrv7WIzwMlgnVJii7PoharJH5CukiBcqO
AiEAo/TFGgNDCTrNzNyltwbE605UqWCaWrLdOyiZsdVuPGUwDQYJKoZIhvcNAQEL
BQADggEBAAUWPpfzAgI/VH4g1cYQRZ58HxssJcEFiGOLVwsdSZWkMb1G0F8TZ7OQ
0PE57GZPohHh0jAbfWiYqWF/Jp5EDRtMBS34uK43EMaHqo4MboRXPPiBZ3FD5cbQ
M6M+fqNzOPK5Vh8N+gJ857A4hHyC1PNsKUz4A6DTOpWNAOyPENp7kRIVMt9s+isf
Uc8EDunORHRfTwwpx27V0tBmjjvvhgGFgsJlXDHcup01D+UAezfNeFdhnl98FAnz
soz8NSoAZqKagkgTbnpC+GdBmwVX63vqT8/RXDKa3HI4kF/iEoDp9mJxTb0Ht+8H
WppDwBpEso1XFAVSIGPErymGT78kHlk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJkYJThcesIknYRGs7C
Cou2AeS8zUmCePXzfAcBsXfoCTwuAr+EIKlMKOkbeFAJA4DYyX6i9NIzaLrvPo/f
TPh+bXx1jY12sQ7Ov8UTYkJu8MKr/rcQWegLYXXoIlIgvsKTjlMLtOd3gZeqGGj1
XbN0Ls1TaJaIhYvaP+1gnqYtptqNhn6RwEQ9LMOl6zt0iLzOoBpkK9LfIe7ijhh2
44y/wY0g03FFPTxPotBHh99YeQVO3SlJYqY6c4SSLZB1AXwvm3EWI5jbr4vOyFEy
k9asfHuG1SZ5OBZCDe4v+a0a85o323/lLoM3S8fihoHd7HocEegAV6bm4vXvXJtV
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12160469369165557629033044826577053702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rockville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VitalAxis Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vitalaxis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26077279457393036725380782637715858660928011343355313293176948244451489295203580323649785952361327046884670735679655522725190521230292468888624069361103655621626165999920647177109718688537623929001358134444209644100156813106648697840431988279182488928255270194705098269579494385563176875139383262043610465550038563079745001774279966275219728885484568659375596572092842969584938103490823592659277961489632905131672805747719129163802502936152909608354653975184670361878971354973875789411993658267720720048032084614976529753169620072796142938541428474816711824768327915174149758246449738875782312126563500235171693286753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							046634acad52b52f5abc6bd76fe5d29a77169d74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitalaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalaxis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0005163e97f302023f547e20d5c610459e7c1f1b2c25c10588638b570b1d4995a431bd46d05f1367b390d0f139ec664fa211e1d2301b7d6898a9617f269e440d1b4c052df8b8ae3710c687aa8e0c6e84573cf881677143e5c6d033a33e7ea37338f2b9561f0dfa027ce7b038847c82d4f36c294cf803a0d33a958d00ec8f10da7b91121532df6cfa2b1f51cf040ee9ce44745f4f0c29c76ed5d2d0668e3bef86018582c2655c31dcba9d350fe5007b37cd7857619e5f7c1409f3b28cfc352a0066a29a8248136e7a42f867419b0557eb7bea4fcfd15c329adc7238905fe21280e9f662714dbd07b7ef075a9a43c01a44b28d571405522063c4af29864fbf241e59