skyportal.sheldonisd.com

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 08:a1:9b:9c:54:9a:63:ca:f0:08:2a:14:31:47:14:72 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skyportal.sheldonisd.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a1:9b:9c:54:9a:63:ca:f0:08:2a:14:31:47:14:72
Serial Number (int): 11472939919768739124610109093175563378
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 15:2a:bb:b5:6e:30:d6:61:d6:ed:4c:68:89:3d:3b:29:62:cf:63:21
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): ab:b4:96:6a:24:a9:ac:bf:29:a4:7e:1a:48:ab:88:cf:f5:8e:9d:43
Fingerprint (sha256): 31:69:1b:61:3e:c9:b1:b3:db:6b:78:51:c5:72:42:b5:a7:72:07:d6:88:b6:6f:7b:af:93:e2:c4:e2:15:79:c7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate skyportal.sheldonisd.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skyportal.sheldonisd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skyportal.sheldonisd.com

Other certificates including the domain name sheldonisd.com

(limited to 100 certificates)
skyportal.sheldonisd.com
meridith-dunbar.tisd.org
admin.palla.gfusd.net
me.sheldonisd.com
comfortisd.org
ceca.sheldonisd.com
lunchapps.sheldonisd.com
admin.ce.sheldonisd.com
sheldonisd.com
mssd2.k12.ar.us
9gc.sheldonisd.com
admin.alohaes.us
admin.ce.sheldonisd.com
wes.sau29.org
citrix.sheldonisd.com
mail.sheldonisd.com
nms.sheldonisd.com
admin.alohaes.us
admin.barrientes.ecisd.us
ecsd.k12.ca.us
sheldonisd.com
sheldonisd.com
admin.sym.keeneschoolsnh.org
mail.sheldonisd.com
admin.avila.ecisd.us
admin.athletics.sheldonisd.com
skyportal.sheldonisd.com
skynet.ad.sheldonisd.com
sym.keeneschoolsnh.org
skyportal.sheldonisd.com
skyportal.sheldonisd.com
ceca.sheldonisd.com
admin.athletics.sheldonisd.com
admin.avila.ecisd.us
skynet.ad.sheldonisd.com
admin.wes.sau29.org
admin.che.sau29.org
*.sheldonisd.com
admin.barrientes.ecisd.us
lunchapps.sheldonisd.com
admin.athletics.sheldonisd.com
khs.sheldonisd.com
secundaria.colegiolasalle.edu.mx
sle.sheldonisd.com
mail.sheldonisd.com
busfinder.sheldonisd.com
sheldonisd.com
admin.ce.sheldonisd.com
sheldonisd.com
admin.avila.ecisd.us
sle.sheldonisd.com
admin.alohaes.us
sheldonisd.com
athletics.sheldonisd.com
www.secundaria.colegiolasalle.edu.mx
skynet.ad.sheldonisd.com
admin.ceca.sheldonisd.com
sheldonisd.com
sheldonisd.com
admin.barrientes.ecisd.us
admin.ce.sheldonisd.com
mail.sheldonisd.com
sle.sheldonisd.com
admin.whe.keeneschoolsnh.org
admin.athletics.sheldonisd.com
www.sheldonisd.com
www.sheldonisd.com
skyportal.sheldonisd.com
www.cfhags.edu.mx
mail.sheldonisd.com
admin.nel.sau29.org
primaria.colegiolasalle.edu.mx
sau29.org
sheldonisd.com
admin.sheldonisd.com
ce.sheldonisd.com
admin.ce.sheldonisd.com
admin.alohaes.us
admin.colegiolasalle.edu.mx
athletics.sheldonisd.com
admin.hilointermediate.com
admin.athletics.sheldonisd.com
colegiomm.edu.mx
admin.alohaes.us
www.ecsd.k12.ca.us
admin.athletics.godleyisd.net
admin.alohaes.us
*.sheldonisd.com
admin.che.sau29.org
admin.mlb.sau29.org
skyportal.sheldonisd.com
admin.athletics.sheldonisd.com
sisd-cppm1.ad.sheldonisd.com
admin.athletics.sheldonisd.com
ce.sheldonisd.com
admin.bn.durand.k12.mi.us
skynet.ad.sheldonisd.com
mail.sheldonisd.com
admin.athletics.sheldonisd.com
mlb.sau29.org

Certificate

The complete raw certificate details for skyportal.sheldonisd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIQCKGbnFSaY8rwCCoUMUcUcjANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIwMDYwMTAwMDAwMFoXDTIyMDcwMTEyMDAwMFowIzEhMB8GA1UEAxMYc2t5
cG9ydGFsLnNoZWxkb25pc2QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAszKlwwmsYXx8Ygzgf4pGEJTCz7m1DsK1BLMoXBjVFq4TLScfGMk4dG5V
muOmkJ+HueuXPztXRdy4gdjsAV/ySwN2gHLAIZJa3IHM/ZWqixkECDaQbTPpIQWA
3lhm0oMN0r8AAlWk/CRTNnrVfV8+HvEi3Eg8vZ/7NM4xbZZTS91QJWHDylbzPmJb
NablwQ4E/9ASk2JGX2knbr3lZ2v6B8e7kZS/dQPW+rojdbV/vkEOGH2bZwKLNU2Y
56toNLI7Was5OGnJXOqGMnIRjPcUemNigybeVTegfULvnuFiKO96rSVWP6XI8kxg
GR2r2pRksfrq8yWBINEW+z9aOioJxQIDAQABo4IDKzCCAycwHwYDVR0jBBgwFoAU
lE/UXYvkpOKmgP792PkA76O+AlcwHQYDVR0OBBYEFBUqu7VuMNZh1u1MaIk9Oyli
z2MhMCMGA1UdEQQcMBqCGHNreXBvcnRhbC5zaGVsZG9uaXNkLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4
MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNB
Q0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYc
aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdgYIKwYBBQUH
AQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA+
BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0
VExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIB
aQFnAHYAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAFycMNnuQAA
BAMARzBFAiEAgc8UqH62Kl1yWTdZKocq5wWmSUyd7hFEEa4BcdmnQbECIBbNzRIi
Pa1Rv71tNENLB93wuOkQPSAWrxXI1PLn632lAHUAIkVFB1lVJFaWP6Ev8fdthuAj
JmOtwEt/XcaDXG7iDwIAAAFycMNnyQAABAMARjBEAiAKT55xAETYe175HQym+pNu
61cYe9dJ+6Ss2tKAsWE94AIgK6vIOU23ExSQ/85/KCCGDEPIqZkhUr+lVb5GVTWw
NkAAdgBRo7D1/QF5nFZtuDd4jwykeswbJ8v3nohCmg3+1IsF5QAAAXJww2gfAAAE
AwBHMEUCIEnpdIGAo4hK08LsmVXQCAPRXLEav6OYEAkL6hwKjX7aAiEAmHM3bY8E
v2ufsADUdr/VGJAYWTb98g522m8on0bjpv8wDQYJKoZIhvcNAQELBQADggEBAHpG
Yc9Jreof6s0hdXc/aEbALVLx6k3ZJxBl/NshLi4JDJqLDiiyz2avZrG6i9z6zd1r
aQj4BUeCFGCwoeKNBZAnYybXuirlf9kKIej90W0mPGvBgtxejwXewlB4G0pBMwrk
T2IZ0i2f/iZN0K4p9mqUtKKGcLOj83cFF4tKoYlTLmgw4RM3QhLFaqodEosjLGQ3
mEzTZCUZqPtNdU58SnI2VqGuY4lWcYuKzwnu1eeXivWhcL80/8CX7up4WqoNsGMn
I1YGiOJtK6pSuM7qOk8Y72dgBbt7fhhytKcfYpqtXWQzUH/GbWuFiHl+W87k7V9j
Bcs0dsD4c+D4xVbVrzY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszKlwwmsYXx8Ygzgf4pG
EJTCz7m1DsK1BLMoXBjVFq4TLScfGMk4dG5VmuOmkJ+HueuXPztXRdy4gdjsAV/y
SwN2gHLAIZJa3IHM/ZWqixkECDaQbTPpIQWA3lhm0oMN0r8AAlWk/CRTNnrVfV8+
HvEi3Eg8vZ/7NM4xbZZTS91QJWHDylbzPmJbNablwQ4E/9ASk2JGX2knbr3lZ2v6
B8e7kZS/dQPW+rojdbV/vkEOGH2bZwKLNU2Y56toNLI7Was5OGnJXOqGMnIRjPcU
emNigybeVTegfULvnuFiKO96rSVWP6XI8kxgGR2r2pRksfrq8yWBINEW+z9aOioJ
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11472939919768739124610109093175563378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skyportal.sheldonisd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22621631805608484844191992292310168177636938336905516093780301724852366689409924933621344211498867804134862816915905897681807059106231112021616048871615476996741961065018330496132735913261938119417009073315387378733260109970966192179283720476630178713371978587599387307024713288142872466500343132565300234987344068672321383920362216168177432525612371464236567959236915003034353710365946551788686060099985213850826766236979957364809804606891173713570815054497046173067433992712526522777719474329548306940200340583836100371599046736105010226965514941336537751354202930148310518127508726669802883931892078962045870541253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							152abbb56e30d661d6ed4c68893d3b2962cf6321
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyportal.sheldonisd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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