cp.sentinel.scc.com
- SPECIALIST COMPUTER CENTRES PLC -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 08:09:f5:a0:0f:be:48:07:f8:0e:d2:d7:39:46:e5:9c was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
SPECIALIST COMPUTER CENTRES PLC
Organization:
SPECIALIST COMPUTER CENTRES PLC
Organization unit: SOC
Organization unit: SOC
Locality:
Birmingham
Country: GB
Country: GB
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:09:f5:a0:0f:be:48:07:f8:0e:d2:d7:39:46:e5:9cSerial Number (int): 10685536509737348583870499490191828380
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d9:0f:4e:16:cb:ba:e0:1a:86:07:c9:7c:47:1b:f4:0d:b3:83:a2:33
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 71:92:e0:95:09:72:05:5f:3b:2d:bc:5a:cc:84:1a:7d:da:2f:5a:8b
Fingerprint (sha256): 3e:89:37:5a:a8:e1:46:e0:f8:38:a3:ed:7a:f6:29:95:dc:ce:30:f8:40:be:3f:47:0e:15:36:1c:83:f9:36:2e
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate cp.sentinel.scc.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cp.sentinel.scc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cp.sentinel.scc.com
cp.scc.gsi.gov.uk
cp.scc.gsi.gov.uk
Other certificates including the domain name scc.com
(limited to 100 certificates)
selfserve.scc.gsi.gov.uk
*.assyst.scc.com
servicesportal.scc.com
*.portal.scc.com
evie-cms.scc.com
*.fr.scc.com
portal.scc.com
servicesportal.scc.com
*.scc.com
webmail.sch-group.com
servicesportal.scc.com
vietnam.scc.com
mailedge1.scc.com
secure.sentinel.scc.com
mdmtest.sentinel.scc.com
iag01.ps.scc.com
lifecycle.scc.com
adfs.scc.com
o365.scc.com
servicesportal.scc.com
www.etc-dist.co.uk
*.portal.scc.com
ocsfed.sch-group.com
Tsm.scc.com
bs1.scc.com
live.scc.com
io.scc.com
portal.scc.com
www.scc.com
lifecycle.scc.com
lifecycle.scc.com
france.scc.com
punchout.scc.com
io2.scc.com
esharepoint.scc.com
*.portal.scc.com
www.scc.com
france.scc.com
es.scc.com
portal.scc.com
netbox.fr.scc.com
myscc-test.scc.com
lifecycle.scc.com
servicesportal.scc.com
*.assyst.scc.com
assyst.scc.com
*.fr.scc.com
mailedge1.scc.com
myscc.scc.com
bs1.scc.com
primus.scc.com
flexrecruitment.scc.com
publicsector.scc.com
*.demo.scc.com
certforssl247apiB.scc.com
mdmtest.sentinel.scc.com
scc.com
cp.sentinel.scc.com
lifecycle.scc.com
*.portal.scc.com
*.fr.scc.com
myscc.scc.com
wireless.scc.com
live.scc.com
sccconferencing.scc.com
access.scc.com
www.scc.com
myscc.scc.com
cp.sentinel.scc.com
timesheets.scc.com
evie-cms.scc.com
sccwebconf.scc.com
timesheets.scc.com
o365.scc.com
email.sentinel.scc.com
lifecycle.scc.com
securemail.sentinel.scc.com
france.scc.com
o365.scc.com
*.ras.sentinel.scc.com
sharepoint.scc.com
io.scc.com
esharepoint.scc.com
live.scc.com
webapp.scc.com
*.portal.scc.com
webmail.sch-group.com
*.fr.scc.com
*.demo.scc.com
live.scc.com
*.portal.scc.com
access.scc.com
*.portal.scc.com
lifecycle.scc.com
sccwebconf.scc.com
punchout.scc.com
bs1.scc.com
store.scc.com
esharepoint.scc.com
esharepoint.scc.com
*.assyst.scc.com
servicesportal.scc.com
*.portal.scc.com
evie-cms.scc.com
*.fr.scc.com
portal.scc.com
servicesportal.scc.com
*.scc.com
webmail.sch-group.com
servicesportal.scc.com
vietnam.scc.com
mailedge1.scc.com
secure.sentinel.scc.com
mdmtest.sentinel.scc.com
iag01.ps.scc.com
lifecycle.scc.com
adfs.scc.com
o365.scc.com
servicesportal.scc.com
www.etc-dist.co.uk
*.portal.scc.com
ocsfed.sch-group.com
Tsm.scc.com
bs1.scc.com
live.scc.com
io.scc.com
portal.scc.com
www.scc.com
lifecycle.scc.com
lifecycle.scc.com
france.scc.com
punchout.scc.com
io2.scc.com
esharepoint.scc.com
*.portal.scc.com
www.scc.com
france.scc.com
es.scc.com
portal.scc.com
netbox.fr.scc.com
myscc-test.scc.com
lifecycle.scc.com
servicesportal.scc.com
*.assyst.scc.com
assyst.scc.com
*.fr.scc.com
mailedge1.scc.com
myscc.scc.com
bs1.scc.com
primus.scc.com
flexrecruitment.scc.com
publicsector.scc.com
*.demo.scc.com
certforssl247apiB.scc.com
mdmtest.sentinel.scc.com
scc.com
cp.sentinel.scc.com
lifecycle.scc.com
*.portal.scc.com
*.fr.scc.com
myscc.scc.com
wireless.scc.com
live.scc.com
sccconferencing.scc.com
access.scc.com
www.scc.com
myscc.scc.com
cp.sentinel.scc.com
timesheets.scc.com
evie-cms.scc.com
sccwebconf.scc.com
timesheets.scc.com
o365.scc.com
email.sentinel.scc.com
lifecycle.scc.com
securemail.sentinel.scc.com
france.scc.com
o365.scc.com
*.ras.sentinel.scc.com
sharepoint.scc.com
io.scc.com
esharepoint.scc.com
live.scc.com
webapp.scc.com
*.portal.scc.com
webmail.sch-group.com
*.fr.scc.com
*.demo.scc.com
live.scc.com
*.portal.scc.com
access.scc.com
*.portal.scc.com
lifecycle.scc.com
sccwebconf.scc.com
punchout.scc.com
bs1.scc.com
store.scc.com
esharepoint.scc.com
esharepoint.scc.com
Certificate
The complete raw certificate details for cp.sentinel.scc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIQCAn1oA++SAf4DtLXOUblnDANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTE5MDUyOTAwMDAwMFoXDTIwMDUyODEyMDAwMFoweDELMAkGA1UEBhMCR0Ix EzARBgNVBAcTCkJpcm1pbmdoYW0xKDAmBgNVBAoTH1NQRUNJQUxJU1QgQ09NUFVU RVIgQ0VOVFJFUyBQTEMxDDAKBgNVBAsTA1NPQzEcMBoGA1UEAxMTY3Auc2VudGlu ZWwuc2NjLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMblcVkm HLZvx/u96ezRomcj69UVoTQumlEk6caFkyuF8l98ymgYxAv03BHSB9uYPemB7oi2 V7anvXqS9iIVNHdbmdjk/B8f3phwpbP+AbJw2fiuhg4oM282CcANVwLTGaT2rms7 ++Ab5o7fdwHwvQCCdqACtZ1DaNnnN7oiHtAzOk56UsbC8+RLdvBkwjSAzWe8J9rA 8mpew+tyCW4tj/3ip1HXU91ucW3UBEtPuuaNaZnIAZ137PwzysX/FamsOYDW6YMa FbUyTWl45WeAioAbHGV8PjxHf3nYHv7khI6DN4UenzAinZZYULacuOnHKXp5dhvA wYzNKOEll/sJ+f0CAwEAAaOCAc0wggHJMB8GA1UdIwQYMBaAFJRP1F2L5KTipoD+ /dj5AO+jvgJXMB0GA1UdDgQWBBTZD04Wy7rgGoYHyXxHG/QNs4OiMzAxBgNVHREE KjAoghNjcC5zZW50aW5lbC5zY2MuY29tghFjcC5zY2MuZ3NpLmdvdi51azAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1Ud HwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExT UlNBQ0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcC ARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdgYIKwYB BQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNv bTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1Ry dXN0VExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEARa7k0rzFOocAWypt0cx6Ku6smC6K9cm2b0Ms OKO1eorM4Czg6s3IlzbdNV+yuSVvkXblx2bJn0hfA2p9qEKQ18Fd9v6nd4ePlW7l 6Vwl6Z+rIes/zhrKPtEem/lWeeoW0AXPpXf9g7g5s3H0Vtaqr2btKo3HX/jyNf/c EuqVkFQWjBc9FOnbo7r7r9+57fcYY7z4s6cAtbD9uQYycmcuV+Xb9RoFe8PSIi71 GtqlNxlnUGK/qX6cJ3b0ZN5mIKilvvFeNU5R/LhyOhZSlPI3gcZZDQ9vWEC0RHKQ HU44dm7YUhAbZxQ0h5rR3MTNjRdWNSP49Ezk9wRgD/wWqmB/WA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuVxWSYctm/H+73p7NGi ZyPr1RWhNC6aUSTpxoWTK4XyX3zKaBjEC/TcEdIH25g96YHuiLZXtqe9epL2IhU0 d1uZ2OT8Hx/emHCls/4BsnDZ+K6GDigzbzYJwA1XAtMZpPauazv74Bvmjt93AfC9 AIJ2oAK1nUNo2ec3uiIe0DM6TnpSxsLz5Et28GTCNIDNZ7wn2sDyal7D63IJbi2P /eKnUddT3W5xbdQES0+65o1pmcgBnXfs/DPKxf8Vqaw5gNbpgxoVtTJNaXjlZ4CK gBscZXw+PEd/edge/uSEjoM3hR6fMCKdllhQtpy46ccpenl2G8DBjM0o4SWX+wn5 /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10685536509737348583870499490191828380 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Birmingham' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SPECIALIST COMPUTER CENTRES PLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cp.sentinel.scc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25108326828344005411772361718497573482466573846826683821843967851169962832723860826697731292808491279292037277106015561124908075523892412849931420858174747033628430687628004339551806385586141184930822891832836619016652119546632072409820579994804113167386228724196796394440141402961798761716712337693997549119154000058439561924397139176810948792540202396366446741691329429826374748232350819093506586429707325067262353248807872185755558188815146678533264703889166322347045503979633183235212853551956454807550952044577284136046022883698019686055272523670140947850883465786306853894012075080954129483605241464958327847421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d90f4e16cbbae01a8607c97c471bf40db383a233 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.sentinel.scc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.scc.gsi.gov.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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