www.koopmans.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0d:f2:95:4d:89:17:fd:f9:ad:f8:0d:bd:26:9c:a2:95 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Certificate had 3 embedded SCTs from distinct log IDs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
Certificate Subject
CN=www.koopmans.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:f2:95:4d:89:17:fd:f9:ad:f8:0d:bd:26:9c:a2:95Serial Number (int): 18539528006997243334971670667705754261
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 3b:11:18:c9:d0:4c:64:33:df:13:12:7f:c3:26:5b:29:6b:59:92:50
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): ff:5c:f4:d9:41:db:9e:45:0b:52:83:b7:e3:0d:2d:b6:24:33:2c:7e
Fingerprint (sha256): 45:85:c1:c0:f7:95:4f:0a:80:5e:6c:33:9c:43:b1:01:0d:d7:4b:60:cc:37:1b:0f:27:7b:55:74:e8:04:7b:73
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.koopmans.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.koopmans.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.koopmans.com
koopmans.com
koopmans.com
Other certificates including the domain name koopmans.com
(limited to 100 certificates)
success.midaxo.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
success.midaxo.com
success.midaxo.com
www.koopmans.com
contact.koopmans.com
contact.koopmans.com
support.axoom.com
success.midaxo.com
image.email.sweet.tv
success.midaxo.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
fdeuc-2.freshdesk.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
image.email.sweet.tv
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
www.koopmans.com
image.email.sweet.tv
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
support.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
www.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
success.midaxo.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
contact.koopmans.com
contact.koopmans.com
contact.koopmans.com
mailing.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
image.email.sweet.tv
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
contact.koopmans.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
success.midaxo.com
success.midaxo.com
www.koopmans.com
contact.koopmans.com
contact.koopmans.com
support.axoom.com
success.midaxo.com
image.email.sweet.tv
success.midaxo.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
fdeuc-2.freshdesk.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
image.email.sweet.tv
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
www.koopmans.com
image.email.sweet.tv
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
support.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
www.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
success.midaxo.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
contact.koopmans.com
contact.koopmans.com
contact.koopmans.com
mailing.koopmans.com
san-4-s50.tlsprovisioning.exacttarget.com
contact.koopmans.com
image.email.sweet.tv
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
contact.koopmans.com
fdeuc-2.freshdesk.com
success.midaxo.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
contact.koopmans.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
image.email.sweet.tv
contact.koopmans.com
contact.koopmans.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
Certificate
The complete raw certificate details for www.koopmans.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIQDfKVTYkX/fmt+A29JpyilTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODEyMDMwMDAwMDBaFw0yMTAzMDMxMjAwMDBaMBsxGTAXBgNVBAMTEHd3dy5r b29wbWFucy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUzUg E6CRcH3aHQeFBC2e5YNFWp0wqqtC9z6UC9HDuDsOb8VRy3bmVE1j7KbFeJOiSs9N 8Qf4p65xVD/cM0R9H95QYjMJ397HR8kcbnvfvXJV94pNmmiXKH/h7a6bDCIdJdQn 1Klg6nynDjP5VGaGvueIkFlWyUn7k1GT7qfGboe/asexH4/pIOBEGrw9b7Vv1clN opqlNBn97/zWMsEqCRYmsZ++qpDoA48TUWPcrFzfTPiyAnhhyV5TvOyvpwHTNzM1 yEbgA8K7eGpnSTl65RQKzbiDsiN0Da7r7V6HUPMYcfbbDmIrfWGPAN91m5zqvHMz PUFBCfr1Iakw+oCZAgMBAAGjggMwMIIDLDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3 se3yo0MWOJ5sxTAdBgNVHQ4EFgQUOxEYydBMZDPfExJ/wyZbKWtZklAwKQYDVR0R BCIwIIIQd3d3Lmtvb3BtYW5zLmNvbYIMa29vcG1hbnMuY29tMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAz oDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTgu Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw ZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYB BQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNB MjAxOC5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFnc4anwgAABAMARzBF AiAwHa6GvMosFs8pBYC00cffTrKIAnOYnqqkeCdhABcLqAIhAOY3ybq44ve63brz dxSDzS3iaSgmASDCneagWWIs7DvRAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVg wbTq/16ggw8AAAFnc4aooAAABAMARzBFAiEAosgiRppeqnYzHokQFdoYrRtplofA pEhwJYOkVSqXaQwCICnBGAW8ZolvR88rXKD7fJrB2SSHVTWRPFS5Ocg3M90MAHYA u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFnc4an2gAABAMARzBF AiBXYnIsr3s91KR5bl83+GxtqSYf9GMNXoQxE4z6HAGExgIhANAAq5jACUyqHZDU 48ZY3xmlKXfV9pNSTT8+r/wLxvbuMA0GCSqGSIb3DQEBCwUAA4IBAQA32WKsKaTt yg0fcU2RffavqvTRgPytroKmyNn/wD9w34shJqM31NriVfzMra6ZbPd2eImS/LhJ WMfSwC1Jrq3S1hiDIwHrDirp55WCdj/pQvlhm79q9uO4+9dWbdHpkygASesY3Tt1 5gxUh2sGLWJNRhGFoAAp9ZPvuXUzTEHBB8EDY4jrY1GgwkqHqiQC4uSdzCnGSKj1 2bjBcRlLYrjVOP6oiymws3MhXj3IhJ5sywP+TCXv4QGdbPoVPBMdX7OmKvd1n1lV g4acJhXpQFvEBaQoP7T4XMjLlPzx7/hHgKUiiBV9IEde8nYYnOgE9kVgAiC2/I7A rpLjnx6VSvZ6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11M1IBOgkXB92h0HhQQt nuWDRVqdMKqrQvc+lAvRw7g7Dm/FUct25lRNY+ymxXiTokrPTfEH+KeucVQ/3DNE fR/eUGIzCd/ex0fJHG57371yVfeKTZpolyh/4e2umwwiHSXUJ9SpYOp8pw4z+VRm hr7niJBZVslJ+5NRk+6nxm6Hv2rHsR+P6SDgRBq8PW+1b9XJTaKapTQZ/e/81jLB KgkWJrGfvqqQ6AOPE1Fj3Kxc30z4sgJ4YcleU7zsr6cB0zczNchG4APCu3hqZ0k5 euUUCs24g7IjdA2u6+1eh1DzGHH22w5iK31hjwDfdZuc6rxzMz1BQQn69SGpMPqA mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18539528006997243334971670667705754261 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.koopmans.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27182266725412518067089812363398988882075476087103949290098892626905057263073570714848502451524850421237931973426578418623520365839537281941132786650815613332503178700847470536986912090266085227802097710274280845176275504847334057014348962840388056429924942283654616445439664410657389696320783910744589774762963171657574714215517717757711744082661794444263838139460856770031740961336687322785500173374818829085976491541790753774604107004679004904118501813903947357993194199672881228342777159500285183899157819460772359099252835536057666760604302036032295813164644508538936334195881115189334074579379205694450831098009 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3b1118c9d04c6433df13127fc3265b296b599250 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koopmans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koopmans.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001677386a7c200000403004730450220301dae86bcca2c16cf290580b4d1c7df4eb2880273989eaaa478276100170ba8022100e637c9bab8e2f7baddbaf3771483cd2de26928260120c29de6a059622cec3bd10076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001677386a8a00000040300473045022100a2c822469a5eaa76331e891015da18ad1b699687c0a448702583a4552a97690c022029c11805bc66896f47cf2b5ca0fb7c9ac1d924875535913c54b939c83733dd0c007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001677386a7da000004030047304502205762722caf7b3dd4a4796e5f37f86c6da9261ff4630d5e8431138cfa1c0184c6022100d000ab98c0094caa1d90d4e3c658df19a52977d5f693524d3f3eaffc0bc6f6ee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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