scp.strato.de

- Strato AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:be:00:c2:e0:9c:a1:b8:4d:58:27:9c:c8:0f:d6:a0 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Strato AG

Organization: Strato AG
State / Province: Berlin
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:be:00:c2:e0:9c:a1:b8:4d:58:27:9c:c8:0f:d6:a0
Serial Number (int): 20924971779672881438878470568521225888
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:4c:42:d4:01:91:a0:1a:62:49:fc:b4:29:0a:42:ca:8b:4c:c9:87
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 4b:0d:08:e3:e3:df:6e:20:83:30:96:2c:d7:26:92:3f:8b:3a:a1:82
Fingerprint (sha256): 4b:93:46:2d:1b:ec:a4:4b:dc:b0:44:07:c6:03:be:71:54:64:47:76:23:3d:98:0e:a1:08:c5:e4:32:cd:3c:92

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate scp.strato.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scp.strato.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scp.strato.de
scp.strato.nl
iaas-panel.strato.de
cloudpanel-service-api.strato.de
scp.strato.es

Other certificates including the domain name strato.de

(limited to 100 certificates)
webmail.strato.de
ox-test.strato.de
news.strato.de
www.he-roes.de
shop.strato.de
autodiscover.strato.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
hermes.strato.de
it-sicherheit.news
www.he-roes.de
smtp.strato.de
www.he-roes.de
autodiscover.strato.de
pop3.strato.de
vcd-test-console.sbs.strato.de
kontakt.strato.de
*.strato.de
imap.test.strato.de
*.strato.de
*.strato.de
news.strato.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
kontakt.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
status.1net.berlin.strato.de
it-sicherheit.news
ox-test.strato.de
smtp.strato.de
imap.test.strato.de
*.in.strato.de
hed.ionos.de
vcd.sbs.strato.de
umfrage.strato.de
hermes.strato.de
*.strato.de
status.1net.berlin.strato.de
www.he-roes.de
www.he-roes.de
imap.test.strato.de
www.he-roes.de
systems.he-roes.de
www.he-roes.de
pop3.strato.de
cooperation.in.strato.de
www.he-roes.de
www.he-roes.de
owa-35.strato.de
imap.test.strato.de
*.shop.strato.de
shop.strato.de
www.he-roes.de
kontakt.strato.de
news.strato.de
smtp.strato.de
www.he-roes.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
smtp.strato.de
smtp.test.rzone.de
kontakt.strato.de
it-sicherheit.news
*.in.strato.de
imap.strato.de
umfrage.strato.de
imap.strato.de
www.he-roes.de
it-sicherheit.news
www.he-roes.de
www.he-roes.de
status.1net.berlin.strato.de
ox-test.strato.de
www.he-roes.de
ox-test.strato.de
umfrage.strato.de
scp.strato.de
umfrage.strato.de
*.strato.de
smtp.strato.de
pop3.strato.de
webmail.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
*.strato.de
smtp.strato.de
*.strato.de
webmail.strato.de
imap.strato.de
*.in.strato.de
imap.strato.de

Certificate

The complete raw certificate details for scp.strato.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgIQD74AwuCcobhNWCecyA/WoDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjA1MTcwMDAwMDBaFw0yMzA2MTcyMzU5NTlaMFsxCzAJBgNVBAYTAkRFMQ8w
DQYDVQQIEwZCZXJsaW4xDzANBgNVBAcTBkJlcmxpbjESMBAGA1UEChMJU3RyYXRv
IEFHMRYwFAYDVQQDEw1zY3Auc3RyYXRvLmRlMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAvQ6FbjN1fMtF+dEI/xlgxXcFLg47Vb37JeRYNZqg1/e72zSs
qb7d2Pcip4vhoksoawrRroLsDeFs0VurlcXXpev23Y5h1VTOVqhIFi9ppALGqVR2
i+bt6vhpFDc15d6PddmRHKub4ifd6frX2c8jp7THywgs37B9RpbCDsM1I75kVfos
nh4Vf04pqZKDpIjt1JRYCuqPHi/6qJsQOZ0dmwd9tCruAFruFDlhdHqtgT85yA3N
Zu1wL1IfdLGmswb0fiNMgXMfIURzA5OsRpXhKjd3RiJMsk+HfUj4picl2p4hfjrM
XD8UP8Bv4xOZbtgmDkc0ql8ballRNn67jNNDTuUc0vP7XqkDjvq+KPIyHE6jhTtr
HpuH3OTIaLR2+x9y/XdQsIRg2i1lvNmeTt1RgAPgNCaZ7fMRQ7g+8/kfB7AjCcdX
I7S0cY9zprs9kOixBKoL5xhVvhEn9rymg4mapQAbu3eJ4ZvTJkG+coWfCx1fmJbz
t4VwerqsKJr6aFBSy3afPdKu4tybl+SvjNuT78wrNj38/i2qG+RBHdfT8PhsOBhC
v7FyNwb2lcuPhM3hFeAOzoz2MLXd45LX3kaHAmnbF/BrcwwPwQZNyKySX4tmgv4n
1FOd3gJpT8L0PWnNsYYioAhf63zxNqyjvXC5fTCEbmVBbef0znUC1f10QqECAwEA
AaOCA2gwggNkMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1Ud
DgQWBBSUTELUAZGgGmJJ/LQpCkLKi0zJhzBuBgNVHREEZzBlgg1zY3Auc3RyYXRv
LmRlgg1zY3Auc3RyYXRvLm5sghRpYWFzLXBhbmVsLnN0cmF0by5kZYIgY2xvdWRw
YW5lbC1zZXJ2aWNlLWFwaS5zdHJhdG8uZGWCDXNjcC5zdHJhdG8uZXMwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8E
NzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNB
MjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0
cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEF
BQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0
dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQw
CQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA6D7Q2j71BjUy
51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGA0dKwdAAABAMASDBGAiEAzLUKtWoa
8F25mb9jgiq1SpyewGg0HZ/V04Z96qQ8pwkCIQC+sHml1oBo3CPnUZgFeXRL+DZs
lirvu14cAt2GHdGpLAB2ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZM
AAABgNHSsIoAAAQDAEcwRQIgdS7S/nIzpTj+uaFKq2jEmrUudOi6fV3unJjGabwV
Wf8CIQCuEeFhbqnBbKarfpYopz3GVisAFCSvz8i1anxC5tsL+QB2ALc++yTfnE26
dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABgNHSsHIAAAQDAEcwRQIgPiHTBg5H
My3we5XtlZz9CEyf0OLr6sWQUyh3ctPP7JkCIQCRX5Nv2IwU9SsGe2H7tY6oJ0RQ
Qf+kIB0s62mLvHtGgDANBgkqhkiG9w0BAQsFAAOCAQEAtxIWmD7THusCPC4LRBFw
tJth3I94B3uPtipSW98AGiAY/VfLNzWxQmYv5+H+HB/eME/0PUWxEz2YQ3KSmlpB
wJ0vlqSYaCVUZCHPWAKSFY4Yosn1LrRa0yoC0mO5C9PjQ16h+PHzc9UVz9OtFNeO
/1LlBqT8EzlGYd7aIZVQChoXbCar/Q0Fu5z/XJBkIpLqWsouhoE3m9jslNcYk+aK
vBaiKJbCUWiSIH4gNEC6Gq79Jhva2J0cjNdAUPuOoPKRqJmD5n/E+/5gDOt1rwy0
Muy3FMRd3oJGsI1a81ELOsiHSkQYttgacsgcxftoH8tB8r23lXumrc+0fA/h0c8K
og==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20924971779672881438878470568521225888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scp.strato.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771284140494845625981462335974928281639184186963279063797389247549107486762438905446026600893984907102338698021054379035256959378781993793262761594191611935582222350700048931644658562859004137902076368054029884865127968953866772132114653656174925381415131198024401635782774514931234805107584831123991108219245985877072455504350448752205070483341916071937180841369076140188570691002722516510127756902986496296503681156816648131682931678162482923223700277433634357861505795553627225277160365003062350784309924048088045197475056548141789751510159296511243533070582022354926587055929026533112743954651172985204770043039984601988336114042621300470019098875077764457691251711805619567355432856705025238040809595541190156275113419175637260779369531514390167121646216139538384218760719790363642370393837736622335123813985657949415403928684226393551163090612203925173761553183275804253473145102874559071627433986251408550971176830695078463845509677155316605083799061457277702899232125240446440394278657155103208086221752941027631713458619248230351059154474008024489937568432434873913409064972620262980609475366685337425808748661201628918787287326063076196085283989939172588381620053767512961018864806212385239849441030968892876428003469705889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							944c42d40191a01a6249fcb4290a42ca8b4cc987
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scp.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scp.strato.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaas-panel.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudpanel-service-api.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scp.strato.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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