oc.ionos.com

- IONOS Inc. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:6f:03:42:34:0d:5a:28:ab:91:37:d1:3c:9c:53:a3 was issued on by DigiCert Inc.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

IONOS Inc.

Organization: IONOS Inc.
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6f:03:42:34:0d:5a:28:ab:91:37:d1:3c:9c:53:a3
Serial Number (int): 4564095031049012691516738082363429795
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4a:de:ed:ca:63:7f:46:ad:ba:71:fd:9a:a9:0c:5a:42:bf:d8:8f:e9
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 4c:7b:e5:85:cd:35:8c:bf:2d:dc:81:9a:5a:15:db:14:05:6d:ed:96
Fingerprint (sha256): 36:3d:c1:88:8a:79:57:46:68:f4:72:87:38:ec:04:6b:5c:d0:b2:79:c8:d7:5d:67:ce:42:e4:3c:cf:a1:80:2c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate oc.ionos.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oc.ionos.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oc.ionos.com
www.oc.ionos.com
oc.ionos.de
www.oc.ionos.de
oc.ionos.fr
www.oc.ionos.fr
oc.ionos.mx
www.oc.ionos.mx
oc.ionos.co.uk
www.oc.ionos.co.uk
oc.ionos.it
www.oc.ionos.it
oc.ionos.es
www.oc.ionos.es
oc.ionos.ca
www.oc.ionos.ca
oc.ionos.at
www.oc.ionos.at
oc.fasthosts.co.uk

Other certificates including the domain name ionos.com

(limited to 100 certificates)
ssl.ionos.de
*.cert062.stage.mongodb.de-fkb.ionos.com
api.analyze-eu.ionos.com
r1.m-e9d6cbc3331b1508.mongodb.de-txl.ionos.com
myw5.ionos.com
dcd.ionos.com
partnerportal.ionos.com
backup.ionos.com
ntld-status.ionos.de
pg-77n6h8jrvqg58gpf.postgresql.de-txl.ionos.com
cdn.ionos.de
hidrive.ionos.com
devops.ionos.com
qa.dns.de-txl.ionos.com
registrar.ionos.de
ssl.ionos.de
hidrive.ionos.com
xadmin.exchange.1and1.us
passwort.ionos.de
upselling.ionos.de
bf7c540a-69c2-4623-b6c6-311a5f6cb6ef.qa.redis.de-txl.ionos.com
loki.stage42.cluster.ionos.com
1.exchange.1and1.us
myw2.ionos.com
*.cert052.stage.mongodb.de-fkb.ionos.com
dcd.ionos.com
xadmin.exchange2019.ionos.com
laas-rest-api.vnf.stg.cluster.ionos.com
pg-3g4jvjf77mjsm6bn.postgresql.de-txl.ionos.com
postmaster-contact.ionos.de
server-services.ionos.de
login.ionos.de
hidrive-help.ionos.com
vertrag.ionos.de
shop.ionos.com
myw1.ionos.com
api.analyze-us.ionos.com
myw3.ionos.com
location-marketing.ionos.de
ias.ionos.de
screenshot.ionos.com
museum.k8s.cluster.ionos.com
myw1.ionos.com
ftp-fra.ionos.com
auth.registry.k8s.cluster.ionos.com
simg.ionos.com
jobs.ionos.de
r2.m-46051fb525db90e8.mongodb.de-fra.ionos.com
digital-success.ionos.de
login.ionos.de
museum.k8s.cluster.ionos.com
reseller-api.ionos.com
*.m-00419ac6f799f1f2.mongodb.de-fra.ionos.com
ftp-fra.ionos.com
r2.m-9704cc5f2b3e83b6.mongodb.de-fra.ionos.com
cmc.ionos.com
*.m-f3570c5cf4213848.mongodb.de-fra.ionos.com
myw3.ionos.com
backup.ionos.com
ntld-status.ionos.de
ftp-las.ionos.com
dcd.ionos.com
jobs.ionos.de
*.m-1913f83f044a5178.mongodb.de-txl.ionos.com
ionos.com
emailarchive.ionos.com
*.m-dce5f2b30ac22b6f.mongodb.de-fra.ionos.com
jobs.ionos.de
*.m-3a6d2fe88d0e4692.mongodb.es-vit.ionos.com
websitebuilder.ionos.com
cmc.ionos.com
analytics.ionos.de
exchange2019.ionos.com
*.onehoster.ionos.com
logo-generator.ionos.com
pg-7jb2eshpk4i6ps4k.postgresql.de-fra.ionos.com
whstatic.ionos.com
xadmin.exchange.1and1.us
pg-kc581dr2ummrc965.postgresql.de-txl.ionos.com
*.m-523852f5230d6d13.mongodb.de-txl.ionos.com
r2.m-356e385b5d1de0d0.mongodb.de-fra.ionos.com
*.m-9a35053173df9b7b.mongodb.de-fra.ionos.com
*.onehoster.ionos.com
jobs.ionos.de
r2.m-46051fb525db90e8.mongodb.de-fra.ionos.com
ftp-ewr.ionos.com
ipc.help.ionos.com
ionos.com
*.stage.cr.es-vit.ionos.com
*.m-13578c5bb955e91e.mongodb.de-txl.ionos.com
karma.infra.cluster.ionos.com
pixel.ionos.de
digital-success.ionos.de
*.dev-cr.ionos.com
iaas-panel.ionos.com
email-marketing.ionos.de
kibana.prod.cluster.ionos.com
addressbook.ionos.com
devops.ionos.com
alertmanager.kore.k8s.dev.cluster.ionos.com

Certificate

The complete raw certificate details for oc.ionos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIijCCB3KgAwIBAgIQA28DQjQNWiirkTfRPJxTozANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTI0MDIyMDAwMDAwMFoXDTI1MDMyMjIzNTk1OVowZzELMAkGA1UEBhMCVVMx
FTATBgNVBAgTDFBlbm5zeWx2YW5pYTEVMBMGA1UEBxMMUGhpbGFkZWxwaGlhMRMw
EQYDVQQKEwpJT05PUyBJbmMuMRUwEwYDVQQDEwxvYy5pb25vcy5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDce4KGEb7baE0TWZOnOiu1SUHDONkx
AjXGtRlQzFIx9hjTLImwaQlHzBqheY0r680I+GSpLClecsRmAmujz0KPJMpWpIN8
eeWKNbTzzH03aIxNXSOfSkGTYnXKSfZTh3OeDu5mitFsIoWaE0I2b2bbu584iMNT
gCAzDONwFFCgMCmQsTGdCCIoqzw+gJslnmSZvsH6B/b0bAYC2RHzOWg1Nvg4MH+W
nxKVUPzqGmMwgDI+w8HvwkINms4hHKQj30SS/73NZcI11ah9zcR77TGMFjcgvUKn
s9Ybwa9myTazASwLfV+5ZMlw4fkHTOPe0QhP2Lp9tk1iButkYYGxIx38eeA2bf0L
TrVHDZ9mMswUHJJ26ZgviWSsDe4qQGJPFPQMCb1eX4SjiLYTTr5DZqK/3Vd/yu4f
JiMtnjE8zYO/YtEyJ84T0hTgAYr8KFt9gobRlikaK19bBgmp1Z7w12Om+cPg+NJM
cY7FgqcRFi67FNSZfTAlbddbRgTHj+YayAUfuFur2bcf4kldme/5zKcz8e1gK3lZ
eQvZjcSPwiqSlI4H2WWzghjtZRdRHAKoQt5hI5FACB2RTZ+bhF7uRLp7e1OGcEV1
3J2BqA3r6r4hli9mpcEurQonb+nHrFCPMZXpwjgxHzfvvgdrTuPCa0UhFDiczEZO
Ya8LPLul8P4RewIDAQABo4IENzCCBDMwHwYDVR0jBBgwFoAUlE/UXYvkpOKmgP79
2PkA76O+AlcwHQYDVR0OBBYEFEre7cpjf0atunH9mqkMWkK/2I/pMIIBNwYDVR0R
BIIBLjCCASqCDG9jLmlvbm9zLmNvbYIQd3d3Lm9jLmlvbm9zLmNvbYILb2MuaW9u
b3MuZGWCD3d3dy5vYy5pb25vcy5kZYILb2MuaW9ub3MuZnKCD3d3dy5vYy5pb25v
cy5mcoILb2MuaW9ub3MubXiCD3d3dy5vYy5pb25vcy5teIIOb2MuaW9ub3MuY28u
dWuCEnd3dy5vYy5pb25vcy5jby51a4ILb2MuaW9ub3MuaXSCD3d3dy5vYy5pb25v
cy5pdIILb2MuaW9ub3MuZXOCD3d3dy5vYy5pb25vcy5lc4ILb2MuaW9ub3MuY2GC
D3d3dy5vYy5pb25vcy5jYYILb2MuaW9ub3MuYXSCD3d3dy5vYy5pb25vcy5hdIIS
b2MuZmFzdGhvc3RzLmNvLnVrMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB
BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYwNKAy
oDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5j
cmwwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdl
b3RydXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3Qu
Y29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisG
AQQB1nkCBAIEggFuBIIBagFoAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpk
sWKaOd8AAAGNxb31IgAABAMARzBFAiAtBwwwFsBnlnGXQGUweWR1PjMxSpPJpCqy
zDiAcGLcTwIhAPxf3dIP/c7PmuKQuum63QpBk04Sgw9MqiomdbgMftm4AHUAfVke
EuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNxb31WwAABAMARjBEAiBo
8kGd79QATZ3UVvL3knohEq65jL2lPwgfR68BbwRVBwIgGOLmqCABEP9d9Eu64M7z
imC6kXSNomO/JJi9vcbpYe8AdwDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39
HjeOUAAAAY3FvfWJAAAEAwBIMEYCIQC1urJ5Um9B/ncUoaMyIxvMwY4iDko5MGSH
wU8mEXGIZgIhAMj6QqKSiWas5/AdLZGe6viVDeYZ/yAJCGRHNNAprG+9MA0GCSqG
SIb3DQEBCwUAA4IBAQBu3YIPao27N5qXbPA5BqmP4l2xAGBu6KLcg8J1AL/+L754
nM9NB5OBEQI1UNoZpWGvau/9RvevuPXvwuSrrnSftBEFrPIHZfnkvA80tKZFCINX
QilyJE652ZVaR3QjYWyeS0y+SMg6+fo+e51cxm4mY978uPhruBxOj6/zdTSFKvBo
BM62+YC/XqOK5Ti5qukZsBeeN1PuA6iaT8kZb945DFRqPhU1y6bQrcEk+mRUqfTI
BfulLGk7JZJOcK/r62cKcPKQne9iqGNjnkYNnFUkcRPR2SygFJIwdUPnxJX3V5Si
RAAYkK23QTvMNLtu2vB3gYcAyoCGP93U2B9O1jR2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4564095031049012691516738082363429795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oc.ionos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899489961606975838993120496150699403440859331703922377080812520971466962240558631237487300248475046772025380393699107759694165649601299307802396657839071060786283737525521533633382597962619591813367169252678796328447656267534995241395996585665173173050066098677651748516070777199138567124148115374730273108080527629013698288170204920528852649428712281116041319279915405129927259537325418537431856067984121980174285972093385026839746657046735989749069731695003646270739255382605594353803015882294107537818988813249670530415214803771016664320679430279069343793215616718413694088799413292005214013462865449592149315184773227741977231304163042190899793199379603248954767923147228959085170575078086647191627352024486509373048076162712360065717905651254620851818938447919520203254421976733084710302674419425622645579022982225843134414168098996148166764353221267039924357955443499061729801849797824134612729197467566414616715844849739965955428568647337994863914380622427406618595024459655506267927675086338149354286234405718974815258963837864761148990416229527984346733115658365105719850986789228736116315323153887156726290883206744991473738910713981153372792055132760770015444584111331980983765191812347915633816719956245069453514325758331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4adeedca637f46adba71fd9aa90c5a42bfd88fe9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ionos.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc.ionos.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.fasthosts.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006edd820f6a8dbb379a976cf03906a98fe25db100606ee8a2dc83c27500bffe2fbe789ccf4d07938111023550da19a561af6aeffd46f7afb8f5efc2e4abae749fb41105acf20765f9e4bc0f34b4a645088357422972244eb9d9955a477423616c9e4b4cbe48c83af9fa3e7b9d5cc66e2663defcb8f86bb81c4e8faff37534852af06804ceb6f980bf5ea38ae538b9aae919b0179e3753ee03a89a4fc9196fde390c546a3e1535cba6d0adc124fa6454a9f4c805fba52c693b25924e70afebeb670a70f2909def62a863639e460d9c55247113d1d92ca01492307543e7c495f75794a244001890adb7413bcc34bb6edaf077818700ca80863fddd4d81f4ed63476