*.bassberry.com
- Bass, Berry & Sims, PLC -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0b:bc:21:27:e9:c8:fe:06:dc:9b:04:54:8e:f2:79:9c was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Bass, Berry & Sims, PLC
Organization:
Bass, Berry & Sims, PLC
State / Province:
Tennessee
Locality: Nashville
Country: US
Locality: Nashville
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:bc:21:27:e9:c8:fe:06:dc:9b:04:54:8e:f2:79:9cSerial Number (int): 15598332244806872817498511631396796828
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 1a:2c:11:b4:f7:f3:f3:98:cc:7c:6d:18:f7:16:c1:86:34:26:ae:45
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 05:8c:4b:89:49:da:29:ad:c3:f6:4d:af:f8:8b:b7:71:40:e1:d4:95
Fingerprint (sha256): 39:e3:f5:9c:34:c5:a0:c6:83:a6:94:93:1c:61:ee:93:d9:bb:24:aa:dd:65:7e:b6:cf:b9:a2:cc:32:20:9b:71
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.bassberry.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bassberry.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bassberry.com
bassberry.com
bassberry.com
Other certificates including the domain name bassberry.com
(limited to 100 certificates)
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.bassberry.com
www.highq.com
www.highq.com
*.bassberry.com
*.bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.bassberry.com
www.highq.com
www.highq.com
www.highq.com
bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
csg.bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
glsshelpdesk.glss.net
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.bassberry.com
www.highq.com
sip.bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.bassberry.com
www.highq.com
www.highq.com
*.bassberry.com
*.bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.bassberry.com
www.highq.com
www.highq.com
www.highq.com
bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
csg.bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
glsshelpdesk.glss.net
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.bassberry.com
www.highq.com
sip.bassberry.com
www.highq.com
www.highq.com
www.highq.com
Certificate
The complete raw certificate details for *.bassberry.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIQC7whJ+nI/gbcmwRUjvJ5nDANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTExMTUwMDAwMDBaFw0yMTEyMDQxMjAwMDBaMHExCzAJBgNVBAYTAlVTMRIw EAYDVQQIEwlUZW5uZXNzZWUxEjAQBgNVBAcTCU5hc2h2aWxsZTEgMB4GA1UECgwX QmFzcywgQmVycnkgJiBTaW1zLCBQTEMxGDAWBgNVBAMMDyouYmFzc2JlcnJ5LmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ2yJqR5vsJzIOKW1SD YgpqKeQ3K7GLIBGpRcn4RKkyFEDFIyQCLf9IMlLG4lMXw0vbHa/0Qv+D9lcziX3s OIydzNEL77tCzTJGWO8i6Q+rhDM5O8Z1CefO4W+egrkGwsJPpLz2xP1mCyDQYAOF glXxoLBaQqyLocQBRT1ezB4jalnz0whkPEeqgw7dqjE6yDUdgHOjAjffhbrWOV6w mMj6/v8cX5jHnvJD/rZz7cLdS/RCAPw1Y7/hf89cwzlpuwT7DfD/NF2Kzot/cVaY tGZdi6wOuvTZNhzJ321+YkndiNBp6S/KzNsxLom0JOjyKbrMyQu+u4yt+rpobfZ5 1oMCAwEAAaOCAzAwggMsMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzF MB0GA1UdDgQWBBQaLBG09/PzmMx8bRj3FsGGNCauRTApBgNVHREEIjAggg8qLmJh c3NiZXJyeS5jb22CDWJhc3NiZXJyeS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRw Oi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUF BzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0 cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJ BgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCkuQmQtBhYFIe7 E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW5wkzDSAAAEAwBHMEUCIQDStIv4sEnQ oKqDIxHlp7ba8niOiYO8SaV32c8Ezxbf5gIgCwl1NcsYyUkwmJM3eihqcGZguckj udup6df/C1zUMDwAdgBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAA AW5wkzBWAAAEAwBHMEUCIGDhsm6A0pkC11M/ovpoP8pSA/Gd3R94tB6omFqORt90 AiEApLYAZOAX1WcVmcGnBN2UP7TZJKETkeKMr6OqZZVqlBYAdgC72d+8H4pxtZOU I5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAW5wkzDTAAAEAwBHMEUCIBIWuAybDFV2 xZ1VGLfq2U4MPbByM9fugDi4nhkw1BE/AiEA09UOq5fxiFQP1i5KaOOrt2VRKGQV Ln8/btbDdfqYn84wDQYJKoZIhvcNAQELBQADggEBAHxJTFzcTbFdKL8TS7JiLvSa Lr1bjlNc908HS2gJIEML2DV4hDWADZG0Ct0kZMUz+joSZONppOrOVsIsIUVO+Kbe nu4SPBjeLTlcM9GVri5W6YFQ7ltEgAXpfBG7JtdH7AK54mrIXI5mWPscO3BodDta MQSPUcO3ccv1/mn1UsXDbKbJ/lmAA/NJR2QyoBufIV58hYwy2ZFdTiUPdsJg2u2T 3LOk8I5K1OIa55ADZErpGjdlrYAKFh03KRZxLEolN67EbRhfgadyx77jZ7hm/Y84 7MgtH4kZA4od8zs69jTestI8sxeB6nvT2im09kPvcHjlVFCWitRzOlX1WdDlhAs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnbImpHm+wnMg4pbVINi Cmop5DcrsYsgEalFyfhEqTIUQMUjJAIt/0gyUsbiUxfDS9sdr/RC/4P2VzOJfew4 jJ3M0Qvvu0LNMkZY7yLpD6uEMzk7xnUJ587hb56CuQbCwk+kvPbE/WYLINBgA4WC VfGgsFpCrIuhxAFFPV7MHiNqWfPTCGQ8R6qDDt2qMTrINR2Ac6MCN9+FutY5XrCY yPr+/xxfmMee8kP+tnPtwt1L9EIA/DVjv+F/z1zDOWm7BPsN8P80XYrOi39xVpi0 Zl2LrA669Nk2HMnfbX5iSd2I0GnpL8rM2zEuibQk6PIpuszJC767jK36umht9nnW gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15598332244806872817498511631396796828 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nashville' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bass, Berry & Sims, PLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bassberry.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22528992664431481052171435219671980026503499565655757478883473113538401130232264812453755656665623706091509829881066579397563354712261814903853764770238712658638456186503855447148240298116597820645381092345452925612814810295036780268162109100681222151512103145776085534387727948827036547362378872835549646401385589958187208961107613930940889159881996284729970813535034151191818363101086559194550221686669985534953757789086265989588312735416489330906924876293925336335169894621627758183167574524551024580762331596825795072261376417602549968736650446424652354708323574062560103177029485366670791796470302206866600089219 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a2c11b4f7f3f398cc7c6d18f716c1863426ae45 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bassberry.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassberry.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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