oasc17y.247realmedia.com
- AppNexus, Inc. -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 0f:f7:f8:47:b7:85:99:17:b8:18:e0:62:e3:fd:d9:ad was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
AppNexus, Inc.
Organization:
AppNexus, Inc.
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:f7:f8:47:b7:85:99:17:b8:18:e0:62:e3:fd:d9:adSerial Number (int): 21225952980410351535764731983126452653
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 30:60:bd:08:61:a5:08:9a:7d:f8:a9:33:57:33:7e:1e:12:31:5a:b4
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 61:d7:1a:be:4f:df:50:af:fd:a1:cf:25:bb:c9:bd:de:a7:e0:39:bb
Fingerprint (sha256): 38:87:2f:46:f3:b5:58:c7:43:d4:44:33:ab:66:bc:f2:c8:e2:94:d5:a7:c1:eb:06:c0:1d:87:7c:cd:83:ae:48
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate oasc17y.247realmedia.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oasc17y.247realmedia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oasc17y.247realmedia.com
oascentral.bice.cl
oascentral.scitation.org
oascentral.autoweek.com
oascentral.bice.cl
oascentral.scitation.org
oascentral.autoweek.com
Other certificates including the domain name 247realmedia.com
(limited to 100 certificates)
openadstream16.247realmedia.com
download.247realmedia.com
openadstream12.247realmedia.com
openadstream15.247realmedia.com
oas-eu-admin.247realmedia.com
247realmedia.com
oasc17w.247realmedia.com
network-ca.247realmedia.com
*.247realmedia.com
decidedna2.247realmedia.com
openadstream14.247realmedia.com
openadstream15.247realmedia.com
oasc17y.247realmedia.com
eu.services.247realmedia.com
openadstream17.247realmedia.com
oasrtx.247realmedia.com
openadstream10.247realmedia.com
oasc18.247realmedia.com
oasc-eu1.247realmedia.com
reports.dna.247realmedia.com
oasc17.247realmedia.com
oasc18.247realmedia.com
bifrost-ash.247realmedia.com
*.247realmedia.com
oasc17.247realmedia.com
oasc-eu1.247realmedia.com
openadstream10.247realmedia.com
delivery.uat.247realmedia.com
oasc18.247realmedia.com
*.247realmedia.com
openadstream-en1.247realmedia.com
oas-eu.247realmedia.com
reports.dna.247realmedia.com
sophos-secure.247realmedia.com
oasc-eu1b.247realmedia.com
*.247realmedia.com
openadstream15.247realmedia.com
bifrost-pa.247realmedia.com
oasc-eu1b.247realmedia.com
oasc18w.247realmedia.com
oasc17.247realmedia.com
*.247realmedia.com
oasc-eu1b.247realmedia.com
services.247realmedia.com
oasc18.247realmedia.com
oasc17w.247realmedia.com
oasc18.247realmedia.com
jira.247realmedia.com
oasc-eu1.247realmedia.com
oasc06.247realmedia.com
bifrost-lon.247realmedia.com
oasc17.247realmedia.com
oasc17.247realmedia.com
oasc11.247realmedia.com
oasrtx.247realmedia.com
oasc09.247realmedia.com
oasc17.247realmedia.com
openadstream16.247realmedia.com
fileshare.247realmedia.com
openadstream18.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasrtx-eu.247realmedia.com
decidedna1.247realmedia.com
library.247realmedia.com
oasc-eu1.247realmedia.com
network3reporting.247realmedia.com
oasc08.247realmedia.com
oasn03.247realmedia.com
oasc05.247realmedia.com
oasc17y.247realmedia.com
oasc18x.247realmedia.com
oasc17y.247realmedia.com
openadstream18.247realmedia.com
oasrtx.247realmedia.com
oasn04.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasc-eu1.247realmedia.com
fileshare.247realmedia.com
oasc17y.247realmedia.com
oasc-training7.247realmedia.com
services.247realmedia.com
responsecollector.247realmedia.com
*.247realmedia.com
247connect.247realmedia.com
oasc-eu1.247realmedia.com
training7.247realmedia.com
*.247realmedia.com
openadstream8.247realmedia.com
fileshare.247realmedia.com
fileshare.247realmedia.com
networkadmin.realmedia.com
training7.247realmedia.com
openadstream10.247realmedia.com
oasc16.247realmedia.com
oasc17w.247realmedia.com
eu.services.247realmedia.com
api.dna.247realmedia.com
eu-tools.247realmedia.com
download.247realmedia.com
openadstream12.247realmedia.com
openadstream15.247realmedia.com
oas-eu-admin.247realmedia.com
247realmedia.com
oasc17w.247realmedia.com
network-ca.247realmedia.com
*.247realmedia.com
decidedna2.247realmedia.com
openadstream14.247realmedia.com
openadstream15.247realmedia.com
oasc17y.247realmedia.com
eu.services.247realmedia.com
openadstream17.247realmedia.com
oasrtx.247realmedia.com
openadstream10.247realmedia.com
oasc18.247realmedia.com
oasc-eu1.247realmedia.com
reports.dna.247realmedia.com
oasc17.247realmedia.com
oasc18.247realmedia.com
bifrost-ash.247realmedia.com
*.247realmedia.com
oasc17.247realmedia.com
oasc-eu1.247realmedia.com
openadstream10.247realmedia.com
delivery.uat.247realmedia.com
oasc18.247realmedia.com
*.247realmedia.com
openadstream-en1.247realmedia.com
oas-eu.247realmedia.com
reports.dna.247realmedia.com
sophos-secure.247realmedia.com
oasc-eu1b.247realmedia.com
*.247realmedia.com
openadstream15.247realmedia.com
bifrost-pa.247realmedia.com
oasc-eu1b.247realmedia.com
oasc18w.247realmedia.com
oasc17.247realmedia.com
*.247realmedia.com
oasc-eu1b.247realmedia.com
services.247realmedia.com
oasc18.247realmedia.com
oasc17w.247realmedia.com
oasc18.247realmedia.com
jira.247realmedia.com
oasc-eu1.247realmedia.com
oasc06.247realmedia.com
bifrost-lon.247realmedia.com
oasc17.247realmedia.com
oasc17.247realmedia.com
oasc11.247realmedia.com
oasrtx.247realmedia.com
oasc09.247realmedia.com
oasc17.247realmedia.com
openadstream16.247realmedia.com
fileshare.247realmedia.com
openadstream18.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasrtx-eu.247realmedia.com
decidedna1.247realmedia.com
library.247realmedia.com
oasc-eu1.247realmedia.com
network3reporting.247realmedia.com
oasc08.247realmedia.com
oasn03.247realmedia.com
oasc05.247realmedia.com
oasc17y.247realmedia.com
oasc18x.247realmedia.com
oasc17y.247realmedia.com
openadstream18.247realmedia.com
oasrtx.247realmedia.com
oasn04.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasc-eu1.247realmedia.com
fileshare.247realmedia.com
oasc17y.247realmedia.com
oasc-training7.247realmedia.com
services.247realmedia.com
responsecollector.247realmedia.com
*.247realmedia.com
247connect.247realmedia.com
oasc-eu1.247realmedia.com
training7.247realmedia.com
*.247realmedia.com
openadstream8.247realmedia.com
fileshare.247realmedia.com
fileshare.247realmedia.com
networkadmin.realmedia.com
training7.247realmedia.com
openadstream10.247realmedia.com
oasc16.247realmedia.com
oasc17w.247realmedia.com
eu.services.247realmedia.com
api.dna.247realmedia.com
eu-tools.247realmedia.com
Certificate
The complete raw certificate details for oasc17y.247realmedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIQD/f4R7eFmRe4GOBi4/3ZrTANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTE4MDkyNjAwMDAwMFoXDTIwMDEwMjEyMDAwMFowbzELMAkGA1UEBhMCVVMx ETAPBgNVBAgTCE5ldyBZb3JrMREwDwYDVQQHEwhOZXcgWW9yazEXMBUGA1UEChMO QXBwTmV4dXMsIEluYy4xITAfBgNVBAMTGG9hc2MxN3kuMjQ3cmVhbG1lZGlhLmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQ1KOEnW5i5fp/A9s72 G2vmEbTrvbtyr93aFrtg8SMiSYPpwdWpb4pfFqv5PH/9rX0Zan1cqinXaXKH6gkG Li/dMPYMqGDarPY3262YCXTL2xjTSTb0qfV3/qJuExT6O54nX6ocK8cLCQB8Of98 1LafUtMAUxQzMnORyYc+oURlD6mUkMk7PeX/NbegqCuMnhagwyLUCb4s9ZqjIaqn 4B5n34PZ8GvuAe3OtMFfe9Lsoxa25V1pBDiOLbihUQsvM4bK24L6fMkCJ+tWR16c /MOECRVCjk94t/DOVjcHlOh0cChcYCm8L4i4JC6tjDr8l6Y8eCb9gvnMI5drvknc 0ncCAwEAAaOCAgYwggICMB8GA1UdIwQYMBaAFJRP1F2L5KTipoD+/dj5AO+jvgJX MB0GA1UdDgQWBBQwYL0IYaUImn34qTNXM34eEjFatDBqBgNVHREEYzBhghhvYXNj MTd5LjI0N3JlYWxtZWRpYS5jb22CEm9hc2NlbnRyYWwuYmljZS5jbIIYb2FzY2Vu dHJhbC5zY2l0YXRpb24ub3JnghdvYXNjZW50cmFsLmF1dG93ZWVrLmNvbTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1Ud HwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExT UlNBQ0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcC ARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdgYIKwYB BQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNv bTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1Ry dXN0VExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEATs9EV1niSvR7rarbEs5Sq9LvvQie9qLx8RZ2 M5btuN+ACmKFmhXuc0Lu5/cbvd2Ofa/JDvh+kjUPZptWir0tnjwDU8l2ZY6Kw+M1 lXj3LnMAvWof/7ifV4hgfmJw7ZgRnZb4uaJHd01rum7646jpgkhQyYM7hDRCe3nM ZjbovyL42TSr2+EbkAmyCiFnmSxZXo6QB0nkKVsJgGGHK1q9Mf3xARrkbtyyPcff 2GpgJ0nM3DPo3RcTkbjwvcCXVF93bnrWRM82zoTEkbt1y1ZzOrxchOeRhxdSpg2f y0IIj74ulDNZWkld2sChwYtRpRcLp2kHW0SLa8fFvYTm+3/hUQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDUo4SdbmLl+n8D2zvYb a+YRtOu9u3Kv3doWu2DxIyJJg+nB1alvil8Wq/k8f/2tfRlqfVyqKddpcofqCQYu L90w9gyoYNqs9jfbrZgJdMvbGNNJNvSp9Xf+om4TFPo7nidfqhwrxwsJAHw5/3zU tp9S0wBTFDMyc5HJhz6hRGUPqZSQyTs95f81t6CoK4yeFqDDItQJviz1mqMhqqfg Hmffg9nwa+4B7c60wV970uyjFrblXWkEOI4tuKFRCy8zhsrbgvp8yQIn61ZHXpz8 w4QJFUKOT3i38M5WNweU6HRwKFxgKbwviLgkLq2MOvyXpjx4Jv2C+cwjl2u+SdzS dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21225952980410351535764731983126452653 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AppNexus, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oasc17y.247realmedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20729296032399709955874732629750555712463321497619221346018956320739446382858398868665824465372473278521385128150677517437953988879284296219368101734137563743051817692058527171624896399089541984698525744993908495202862189839823244937042235887355937067602184471663188781597237889434109576205521565454423719509448072149447673430418242112465565370402673587586484102093762199532092694662893722452673214825713488916725417486382474378620159921220257230997399479141553977990773961113897011063646947201313839591158513300348100315636079297195664807305357931244575347935718930801818572831185738827127038440825412495614666396279 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3060bd0861a5089a7df8a93357337e1e12315ab4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasc17y.247realmedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.bice.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.scitation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.autoweek.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004ecf445759e24af47badaadb12ce52abd2efbd089ef6a2f1f116763396edb8df800a62859a15ee7342eee7f71bbddd8e7dafc90ef87e92350f669b568abd2d9e3c0353c976658e8ac3e3359578f72e7300bd6a1fffb89f5788607e6270ed98119d96f8b9a247774d6bba6efae3a8e9824850c9833b8434427b79cc6636e8bf22f8d934abdbe11b9009b20a2167992c595e8e900749e4295b098061872b5abd31fdf1011ae46edcb23dc7dfd86a602749ccdc33e8dd171391b8f0bdc097545f776e7ad644cf36ce84c491bb75cb56733abc5c84e791871752a60d9fcb42088fbe2e9433595a495ddac0a1c18b51a5170ba769075b448b6bc7c5bd84e6fb7fe151