*.wis.nl
Issued by Trust Provider B.V. DV SSL CA - G2
About this certificate
This digital certificate with serial number 5d:a6:14:0d:5e:68:5a:47:99:e1:af:38:d1:02:99:59 was issued on by Trust Provider B.V..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.wis.nl
Trust Provider B.V.
Organization:
Trust Provider B.V.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 5d:a6:14:0d:5e:68:5a:47:99:e1:af:38:d1:02:99:59Serial Number (int): 124480531593889888827471968469688424793
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d8:da:ef:d8:e0:ac:71:71:02:de:e6:62:fa:cf:fc:40:3b:fb:a0:52
Fingerprint (sha1): 48:02:f5:d5:33:17:2c:59:3d:19:2c:c3:71:91:33:6e:fc:68:b6:ca
Fingerprint (sha256): 3e:b2:2b:72:cd:04:94:bb:b1:75:ec:84:36:34:12:ad:f2:21:0c:cb:e8:57:a2:ec:c8:02:97:cd:62:49:27:be
Issuing Certificate URL: http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt
Revocation information
OCSP Server: http://trustprovider-ocsp.digitalcertvalidation.comCRL Distribution Point: http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl
Check the revocation status for certificate *.wis.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.wis.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.wis.nl
wis.nl
wis.nl
Other certificates including the domain name wis.nl
(limited to 100 certificates)
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
beheer.demo.wis.nl
3737.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
wis-studio6.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
*.support.wis.nl
wiscommunicator.wis.nl
support.anevia.com
wiscommunicator.wis.nl
*.wis.nl
3737.inextenso.fr
fdus-42.freshdesk.com
support.anevia.com
support.anevia.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
fdus-42.freshdesk.com
vpn.wis.nl
support.anevia.com
fdus-42.freshdesk.com
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
fdus-42.freshdesk.com
3737.inextenso.fr
wiscommunicator.wis.nl
*.wis.nl
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.lobi.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
*.mas.wis.nl
fdus-21a.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.demo.wis.nl
*.wis.nl
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.lobi.wis.nl
*.mas.wis.nl
wis-studio7.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-38.freshdesk.com
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
3737.inextenso.fr
wis-studio7.wis.nl
support.anevia.com
support.anevia.com
*.wiscollect-test.wis.nl
support.anevia.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
*.school-studios.wis.nl
*.mas.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
fdus-38.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
beheer.demo.wis.nl
3737.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
wis-studio6.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
*.support.wis.nl
wiscommunicator.wis.nl
support.anevia.com
wiscommunicator.wis.nl
*.wis.nl
3737.inextenso.fr
fdus-42.freshdesk.com
support.anevia.com
support.anevia.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
fdus-42.freshdesk.com
vpn.wis.nl
support.anevia.com
fdus-42.freshdesk.com
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
fdus-42.freshdesk.com
3737.inextenso.fr
wiscommunicator.wis.nl
*.wis.nl
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.lobi.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
*.mas.wis.nl
fdus-21a.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.demo.wis.nl
*.wis.nl
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.lobi.wis.nl
*.mas.wis.nl
wis-studio7.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-38.freshdesk.com
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
3737.inextenso.fr
wis-studio7.wis.nl
support.anevia.com
support.anevia.com
*.wiscollect-test.wis.nl
support.anevia.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
*.school-studios.wis.nl
*.mas.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
fdus-38.freshdesk.com
Certificate
The complete raw certificate details for *.wis.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIQXaYUDV5oWkeZ4a840QKZWTANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJOTDEcMBoGA1UEChMTVHJ1c3QgUHJvdmlkZXIgQi5WLjEdMBsG A1UECxMURG9tYWluIFZhbGlkYXRlZCBTU0wxKzApBgNVBAMTIlRydXN0IFByb3Zp ZGVyIEIuVi4gRFYgU1NMIENBIC0gRzIwHhcNMTcwMTIwMDAwMDAwWhcNMjAwMTIw MjM1OTU5WjATMREwDwYDVQQDDAgqLndpcy5ubDCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ1lbDBLjugWCmlYTcV2GmVMMFDksyq+HYyADcM4XKQdQU5i 7080peEZXyidQAM7IK62Tpfvx1DsrWqvwuqfDR2vn1RNXS2BwQ6vFOgjiH1Od3zt MynyxjDLLuae2Z+2pzL9vzm2rUFPXinVLpQTGbKmG8hBOtXnMCG9FJYxrfsR6tqk 3t0XoAEu1Vvoi+IqAxMW31k61/hias0xXtqMrnBSWQb6MYJrGA25Dr5X32jlSx1i IvtySxEsFDesons74Tiyz4jj/zmBnkVuMTWpMd7xmMjMyeMrEVzSVtv8yOeQjStj 9fKjpmFhghfZqsuSiYU4SaFuaRzxdlVr/ppRXWUCAwEAAaOCBBgwggQUMBsGA1Ud EQQUMBKCCCoud2lzLm5sggZ3aXMubmwwCQYDVR0TBAIwADBXBgNVHR8EUDBOMEyg SqBIhkZodHRwOi8vdHJ1c3Rwcm92aWRlci1jcmwuZGlnaXRhbGNlcnR2YWxpZGF0 aW9uLmNvbS90cnVzdHByb3ZpZGVyZzIuY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeB DAECATCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jl c291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8v d3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAfBgNV HSMEGDAWgBTY2u/Y4KxxcQLe5mL6z/xAO/ugUjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGlBggrBgEFBQcBAQSBmDCBlTA/ BggrBgEFBQcwAYYzaHR0cDovL3RydXN0cHJvdmlkZXItb2NzcC5kaWdpdGFsY2Vy dHZhbGlkYXRpb24uY29tMFIGCCsGAQUFBzAChkZodHRwOi8vdHJ1c3Rwcm92aWRl ci1haWEuZGlnaXRhbGNlcnR2YWxpZGF0aW9uLmNvbS90cnVzdHByb3ZpZGVyZzIu Y3J0MIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdgDd6x0reg1PpiCLga2BaHB+ Lo6dAdVciI09EcTNtuy+zAAAAVm8g8V4AAAEAwBHMEUCIQCqdmELNY0s0rAUWA3N h5cqOe3bsEKmUqv11aojpPwNmgIgMq7LFI4kIDG9m4fM4buh0bAp7ZSxzS+zfFI7 x/0i+6gAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVm8g8WT AAAEAwBHMEUCIQDsqQN4VS0AovWL4HTMa4baf7w0s22USIUUHO1yTBDbWQIgbSrP vgQIBBUgQyV75vCkG2zjGG4GZ11UI6y+VTRduUwAdwC8eOHfxfY8aEZJM02hD6Ff CXlpIAnAgbTz9pF/Ptm4pQAAAVm8g8ZmAAAEAwBIMEYCIQCtitTfhzxJfeBZ6vs2 rmAND90LrjhRJ1vs03JMdgS8EAIhAKj3HBUYGbniWNqFNWVq2FRyKDZfMuav467G Gzsp8jeBAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFZvIPF jAAABAMARzBFAiAilVmqyL64XzbjmvA0C5ZilgjORLd8Qlb0idRPj5WK1wIhAKaE Ax88xuyblOMbk9H/zfFdYzoGA3Tj3Vv381lVUoWYMA0GCSqGSIb3DQEBCwUAA4IB AQAHwJFckFKfMQPFE6G3Ig21Mw0NLhiV+FpjVxDRJ1FlxT2QFSBuc9m4Wwo58zUl njMPYGRGJrbIsMABOkvs8e7v/VETuTRTIF0iZtd48YT913At9OTtgOusZKbpWsnf s3CyxVWf2W1CWSzMfM4cDQX+ohT+AtoQv/nBxiEoySxhDNy8TGyDJ0x3ZO4bzvBK 6bu5EKJztyfgU3qv2ryrA5syFT5EzgWf9TLAKswV1Hb9WEdEBxwcwOKuID8ACilJ lz4G88qKQdD1lLYVvu67eqwpm1WGIb7au4dakpmKBGJiVM/qu6zO8pTw/QL/VOV5 JbLdu5adYavM2cJ2uVpI+Sfy -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWVsMEuO6BYKaVhNxXYa ZUwwUOSzKr4djIANwzhcpB1BTmLvTzSl4RlfKJ1AAzsgrrZOl+/HUOytaq/C6p8N Ha+fVE1dLYHBDq8U6COIfU53fO0zKfLGMMsu5p7Zn7anMv2/ObatQU9eKdUulBMZ sqYbyEE61ecwIb0UljGt+xHq2qTe3RegAS7VW+iL4ioDExbfWTrX+GJqzTFe2oyu cFJZBvoxgmsYDbkOvlffaOVLHWIi+3JLESwUN6yiezvhOLLPiOP/OYGeRW4xNakx 3vGYyMzJ4ysRXNJW2/zI55CNK2P18qOmYWGCF9mqy5KJhThJoW5pHPF2VWv+mlFd ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 124480531593889888827471968469688424793 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wis.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19869427233634895209636186939549925492002582947999099318841427566654913760505428457529568895580649774347551704094866145131175579257653584325173399561351921200935288600606174496527569870572337747078172872011095483470576532484071041940171215084159841076638504659284088311410948525737993908723485877498911934674998226991059796246405601148373002443797200111500773323398623935586493263593291815170016922700827532544029434678925643148006017581367255220597996249720337583691874008228280446206553789873683257225559984648503843809937375324674384266700437475767837525024136225629203403059587735228736463779066225316496143375717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wis.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8daefd8e0ac717102dee662facffc403bfba052 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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