*.laneneave.co.nz

- Lane Neave -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:7c:bc:0b:9d:44:7f:b4:4e:d9:95:c4:e2:02:45:01 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lane Neave

Organization: Lane Neave
Organization unit: LN
Locality: Christchurch
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:7c:bc:0b:9d:44:7f:b4:4e:d9:95:c4:e2:02:45:01
Serial Number (int): 12610710785709792217343426063646213377
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 81:27:3b:67:ca:f7:e0:40:17:bd:cc:30:ec:86:6e:52:25:19:0e:81
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 91:b0:6d:64:e5:34:c9:ae:94:d4:c6:e5:ee:b4:69:c9:8f:a7:72:03
Fingerprint (sha256): 32:e6:d2:38:fe:a0:1e:d0:8c:63:db:ba:91:e2:e8:b8:2c:44:d1:a8:68:18:26:4f:53:61:91:c9:d1:91:05:f4

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.laneneave.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.laneneave.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.laneneave.co.nz
laneneave.co.nz

Other certificates including the domain name laneneave.co.nz

(limited to 100 certificates)
smtp.laneneave.co.nz
dictation.laneneave.co.nz
*.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
citrix.laneneave.co.nz
*.laneneave.co.nz
smtp.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
citrix.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
*.laneneave.co.nz
smtp.laneneave.co.nz
dictation.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
clinet.laneneave.co.nz
smtp.laneneave.co.nz
dictation.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
*.laneneave.co.nz
storefront.internal.laneneave.co.nz
clinet.laneneave.co.nz
www.laneneave.co.nz
*.laneneave.co.nz
www.laneneave.co.nz
smtp.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
*.laneneave.co.nz
citrix.laneneave.co.nz
laneneave.nz
laneneave.nz
smtp.laneneave.co.nz
laneneave.co.nz
citrix.laneneave.co.nz
laneneave.co.nz
smtp.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz

Certificate

The complete raw certificate details for *.laneneave.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBTCCBe2gAwIBAgIQCXy8C51Ef7RO2ZXE4gJFATANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODAzMjAwMDAwMDBaFw0xOTA1MTMxMjAwMDBaMGIxCzAJBgNVBAYTAk5aMRUw
EwYDVQQHEwxDaHJpc3RjaHVyY2gxEzARBgNVBAoTCkxhbmUgTmVhdmUxCzAJBgNV
BAsTAkxOMRowGAYDVQQDDBEqLmxhbmVuZWF2ZS5jby5uejCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBALQ2oCjvpaJOpOw/qcniK25e9ot7euhpjpFsNH6A
AgSZk/9yMobliOwW9MlhYsrn5vOOL223B/iplYNydUaw4zOUczATKzS4Xh08TNpX
1NNwwzvnNYZT+GZTxcJnpiJ60jKROaqhY+YxocpHJKmD4vISpPY/+gO572CHKpy9
tEEkMidASD4On4XMbv2fiJLKcD+n7kZRsbWf3y9os6HD/VTtK0Jjet7uTArmw6RN
TOuT5pBp+d6uto0GVFKTLVcPSFnyD6QelPjLyuuBJF73cSHebq3qsdEeUMNecY6J
KNR9MMeGy5kS+akoJtGxT/y4QUaQHsOfXS/FilTQ3ZbAbzoVyvNXzpsmLnzf+KPx
NKBRPca7Zidc2VYe9dxt/l+iYivSWWsbY4ywck3oWwbj7OPdHYaoTdYpd+ZzGyNX
GIkgNjjGEbZw0GL8o5YkFsihyLNy0tsIFR2OetVKbCXaTCDHTzsKnwzH90VQXxH4
zjr8llRZ/w75CGVcXc6oiyLnH2GH7dSCoLKhCj5kgC1LkbyDO5HMqjrHQSqDzscb
wCJxUoZYRB1ntd7FAqM/T5ChBCag8LSsf6tSH7dZ8cXfTG6mhxAZ8O/VHEMpzDMc
hyWqvpF4EWiPlK22AkIfUITzf7OsR6ci8IB7cKqn7n4hXpQ2nehBrekxHpibkgwd
vStLAgMBAAGjggK5MIICtTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5s
xTAdBgNVHQ4EFgQUgSc7Z8r34EAXvcww7IZuUiUZDoEwLQYDVR0RBCYwJIIRKi5s
YW5lbmVhdmUuY28ubnqCD2xhbmVuZWF2ZS5jby5uejAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+G
LWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBM
BgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYI
KwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAC
hjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTgu
Y3J0MAkGA1UdEwQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgCkuQmQtBhY
FIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWJA4VsMAAAEAwBHMEUCIEjfSoVa
h98V38iinsprAem4HwfVN/WPwF3hobcJNFS0AiEAhe4L0dwrQkWR0/hEsa7uj8Ua
sZBYdXfcr0BlyMvmB+EAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZ
EwAAAWJA4VyBAAAEAwBGMEQCIFbkKG0y9qXvkiz+UOA10MKsq7eTcb5nJAHT4vep
Qnd5AiBnes006wVyGICFYU0lYoPodigweihk/yEfacu7MMRKojANBgkqhkiG9w0B
AQsFAAOCAQEANH6Alic3p5voHSpJ+QgW3nIpEbG3qMrfWvp8zDX80SmVgQ9hjzw8
94/ni0w72/kRYBxvXFN+94jdKxZRRx7DfXY+SxMe1NZHImYgZCSCYYlvIj10wHoN
hW5epEXS9l7wTaKQi8JpWmt9uOb9o31ymgZRACzuvyJpsJLWbnoinzQcoE1cxMdg
y7uXHt2D1Z89pg3JtI+lXjs8m2fD9e351Rq6/z68aBJ7kc3Jf9UVZint+ekHj0mi
7XveQ1PTzPAZt0KF8Qdoyagnpw1M3H/fibudVHFvdUagMp7SBD4FhJRQ0xpL+6Cq
NHG4qLD3Akk+kknqwN5VbEaLRgKMwnTJMg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12610710785709792217343426063646213377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lane Neave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.laneneave.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735206452187008292671647636971188515916991293452582295272580979063509312641576251234794431092418851052240272062553711875616486547321202156638644694315982863868251220556535746673696117249574153146353823272081898580706179517007917169215114108861035238094409795790682494128108868654947429365219018321115161843177457365024064417195766081538720790227434925684017521650032984197540676926953701649324498239571593555059073036175780393226385006645656956188827263150643818352146622102134529292312240609349078809656539656801194251918330052039182128659825912578182269438847154574223869882224761170027332949242592165565056454782583165772705113886943206727602328024578319696634241090026571622213868416262548206665618350552294870517094241397749826897880536381155126660009416266846712191123967154148558583048512548310701339103395273170440734316301358171958781975790056266878340653162561244969118478892523581663385524517642551942185088827623845094915587236404392502425497404647165418254228467355633053091180452915314889240970598899699705332848676813266160898258859375853787964705469583766834212648590776099873539007464279725474026130672238831757945501039277797789290058674787775111728673732439728027017275147384516108817166637651015686811595627637579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81273b67caf7e04017bdcc30ec866e5225190e81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laneneave.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laneneave.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016240e15b0c0000040300473045022048df4a855a87df15dfc8a29eca6b01e9b81f07d537f58fc05de1a1b7093454b402210085ee0bd1dc2b424591d3f844b1aeee8fc51ab190587577dcaf4065c8cbe607e10075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016240e15c810000040300463044022056e4286d32f6a5ef922cfe50e035d0c2acabb79371be672401d3e2f7a94277790220677acd34eb0572188085614d256283e87628307a2864ff211f69cbbb30c44aa2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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