www.koopmans.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:f2:95:4d:89:17:fd:f9:ad:f8:0d:bd:26:9c:a2:95 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Certificate had 3 embedded SCTs from distinct log IDs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

Certificate Subject

CN=www.koopmans.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:f2:95:4d:89:17:fd:f9:ad:f8:0d:bd:26:9c:a2:95
Serial Number (int): 18539528006997243334971670667705754261
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:11:18:c9:d0:4c:64:33:df:13:12:7f:c3:26:5b:29:6b:59:92:50
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ff:5c:f4:d9:41:db:9e:45:0b:52:83:b7:e3:0d:2d:b6:24:33:2c:7e
Fingerprint (sha256): 45:85:c1:c0:f7:95:4f:0a:80:5e:6c:33:9c:43:b1:01:0d:d7:4b:60:cc:37:1b:0f:27:7b:55:74:e8:04:7b:73

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.koopmans.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.koopmans.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.koopmans.com
koopmans.com

Other certificates including the domain name koopmans.com

(limited to 100 certificates)
success.midaxo.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
success.midaxo.com
success.midaxo.com
www.koopmans.com
contact.koopmans.com
contact.koopmans.com
support.axoom.com
success.midaxo.com
image.email.sweet.tv
success.midaxo.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
fdeuc-2.freshdesk.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
image.email.sweet.tv
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
www.koopmans.com
image.email.sweet.tv
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
support.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
www.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
success.midaxo.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
contact.koopmans.com
contact.koopmans.com
contact.koopmans.com
mailing.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
image.email.sweet.tv
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
contact.koopmans.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
success.midaxo.com

Certificate

The complete raw certificate details for www.koopmans.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIQDfKVTYkX/fmt+A29JpyilTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEyMDMwMDAwMDBaFw0yMTAzMDMxMjAwMDBaMBsxGTAXBgNVBAMTEHd3dy5r
b29wbWFucy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUzUg
E6CRcH3aHQeFBC2e5YNFWp0wqqtC9z6UC9HDuDsOb8VRy3bmVE1j7KbFeJOiSs9N
8Qf4p65xVD/cM0R9H95QYjMJ397HR8kcbnvfvXJV94pNmmiXKH/h7a6bDCIdJdQn
1Klg6nynDjP5VGaGvueIkFlWyUn7k1GT7qfGboe/asexH4/pIOBEGrw9b7Vv1clN
opqlNBn97/zWMsEqCRYmsZ++qpDoA48TUWPcrFzfTPiyAnhhyV5TvOyvpwHTNzM1
yEbgA8K7eGpnSTl65RQKzbiDsiN0Da7r7V6HUPMYcfbbDmIrfWGPAN91m5zqvHMz
PUFBCfr1Iakw+oCZAgMBAAGjggMwMIIDLDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3
se3yo0MWOJ5sxTAdBgNVHQ4EFgQUOxEYydBMZDPfExJ/wyZbKWtZklAwKQYDVR0R
BCIwIIIQd3d3Lmtvb3BtYW5zLmNvbYIMa29vcG1hbnMuY29tMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAz
oDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTgu
Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBz
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw
ZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYB
BQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNB
MjAxOC5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA
pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFnc4anwgAABAMARzBF
AiAwHa6GvMosFs8pBYC00cffTrKIAnOYnqqkeCdhABcLqAIhAOY3ybq44ve63brz
dxSDzS3iaSgmASDCneagWWIs7DvRAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVg
wbTq/16ggw8AAAFnc4aooAAABAMARzBFAiEAosgiRppeqnYzHokQFdoYrRtplofA
pEhwJYOkVSqXaQwCICnBGAW8ZolvR88rXKD7fJrB2SSHVTWRPFS5Ocg3M90MAHYA
u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFnc4an2gAABAMARzBF
AiBXYnIsr3s91KR5bl83+GxtqSYf9GMNXoQxE4z6HAGExgIhANAAq5jACUyqHZDU
48ZY3xmlKXfV9pNSTT8+r/wLxvbuMA0GCSqGSIb3DQEBCwUAA4IBAQA32WKsKaTt
yg0fcU2RffavqvTRgPytroKmyNn/wD9w34shJqM31NriVfzMra6ZbPd2eImS/LhJ
WMfSwC1Jrq3S1hiDIwHrDirp55WCdj/pQvlhm79q9uO4+9dWbdHpkygASesY3Tt1
5gxUh2sGLWJNRhGFoAAp9ZPvuXUzTEHBB8EDY4jrY1GgwkqHqiQC4uSdzCnGSKj1
2bjBcRlLYrjVOP6oiymws3MhXj3IhJ5sywP+TCXv4QGdbPoVPBMdX7OmKvd1n1lV
g4acJhXpQFvEBaQoP7T4XMjLlPzx7/hHgKUiiBV9IEde8nYYnOgE9kVgAiC2/I7A
rpLjnx6VSvZ6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11M1IBOgkXB92h0HhQQt
nuWDRVqdMKqrQvc+lAvRw7g7Dm/FUct25lRNY+ymxXiTokrPTfEH+KeucVQ/3DNE
fR/eUGIzCd/ex0fJHG57371yVfeKTZpolyh/4e2umwwiHSXUJ9SpYOp8pw4z+VRm
hr7niJBZVslJ+5NRk+6nxm6Hv2rHsR+P6SDgRBq8PW+1b9XJTaKapTQZ/e/81jLB
KgkWJrGfvqqQ6AOPE1Fj3Kxc30z4sgJ4YcleU7zsr6cB0zczNchG4APCu3hqZ0k5
euUUCs24g7IjdA2u6+1eh1DzGHH22w5iK31hjwDfdZuc6rxzMz1BQQn69SGpMPqA
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18539528006997243334971670667705754261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.koopmans.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27182266725412518067089812363398988882075476087103949290098892626905057263073570714848502451524850421237931973426578418623520365839537281941132786650815613332503178700847470536986912090266085227802097710274280845176275504847334057014348962840388056429924942283654616445439664410657389696320783910744589774762963171657574714215517717757711744082661794444263838139460856770031740961336687322785500173374818829085976491541790753774604107004679004904118501813903947357993194199672881228342777159500285183899157819460772359099252835536057666760604302036032295813164644508538936334195881115189334074579379205694450831098009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b1118c9d04c6433df13127fc3265b296b599250
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koopmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koopmans.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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