www.dot.gov

- United States Department of Transportation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:6d:e1:ea:3d:bc:a5:6c:f6:8c:0d:28:f0:13:c4:85 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United States Department of Transportation

Organization: United States Department of Transportation
State / Province: District Of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6d:e1:ea:3d:bc:a5:6c:f6:8c:0d:28:f0:13:c4:85
Serial Number (int): 3228998449807622774691045269965096069
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d9:2b:c4:b4:4e:8c:ef:95:4a:17:5f:0b:ab:70:28:d5:80:ab:c5:46
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f6:0e:a2:02:91:c3:cc:b6:9a:ea:a3:bc:cb:be:28:39:17:42:d8:98
Fingerprint (sha256): 4d:de:d2:10:c3:e0:fb:d3:6c:f7:4c:77:47:4c:91:2e:a0:83:c4:d3:04:11:56:6a:2e:eb:a3:7d:2a:fc:97:05

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.dot.gov

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dot.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dot.gov
buildamerica.dot.gov
checkthebox.dot.gov
civilrights.dot.gov
cms.aviation.dot.gov
cms.bts.dot.gov
cms.bts.gov
cms.buildamerica.dot.gov
cms.dot.gov
cms.fhwa.dot.gov
cms.fmcsa.dot.gov
cms.fmcsa.secure.dot.gov
cms.fra.dot.gov
cms.fta.dot.gov
cms.intranet.dot.gov
cms.marad.dot.gov
cms.permits.performance.gov
cms.phmsa.dot.gov
cms.seaway.dot.gov
cms.secure.dot.gov
cms.usmma.edu
cms.volpe.dot.gov
cms7.bts.dot.gov
cms7.dot.gov
cms7.fhwa.dot.gov
cms7.fmcsa.dot.gov
cms7.fra.dot.gov
cms7.fta.dot.gov
cms7.marad.dot.gov
cms7.phmsa.dot.gov
cms8.bts.dot.gov
cms8.dot.gov
cms8.fhwa.dot.gov
cms8.fmcsa.dot.gov
cms8.marad.dot.gov
cms8.phmsa.dot.gov
dot.gov
dotcms.fra.dot.gov
fmcsa.dot.gov
fmcsa.lms.dot.gov
fmcsa.portal.dot.gov
fra.portal.dot.gov
fta.dot.gov
hazmat.dot.gov
hazmatsafety.dot.gov
highways.dot.gov
highways.fhwa.dot.gov
marad.dot.gov
maritime.dot.gov
nationalregistry.fmcsa.dot.gov
ntcscheduler.fmcsa.dot.gov
ntl.bts.gov
osdbu.dot.gov
phmsa.dot.gov
pipelinesafety.dot.gov
pnt.rita.dot.gov
portal.dot.gov
protectyourmove.gov
railroads.dot.gov
railroads.fra.dot.gov
score.fmcsa.dot.gov
seaway.dot.gov
secure.dot.gov
sfm.fmcsa.dot.gov
sharetheroadsafely.gov
transerve.dot.gov
transit.dot.gov
tsi.dot.gov
utc.dot.gov
volpe.dot.gov
www.bts.dot.gov
www.bts.gov
www.checkthebox.dot.gov
www.civilrights.dot.gov
www.data.fra.dot.gov
www.fmcsa.dot.gov
www.fmcsa.portal.dot.gov
www.fta.dot.gov
www.marad.dot.gov
www.maritime.dot.gov
www.osdbu.dot.gov
www.permits.performance.gov
www.phmsa.dot.gov
www.portal.dot.gov
www.protectyourmove.gov
www.rita.dot.gov
www.seaway.dot.gov
www.secure.dot.gov
www.sharetheroadsafely.gov
www.transit.dot.gov
www.transportation.gov
www.tsi.dot.gov
www.usmma.edu
www.volpe.dot.gov
www7.bts.dot.gov
www7.fmcsa.dot.gov
www7.fta.dot.gov
www7.highways.dot.gov
www7.phmsa.dot.gov
www7.transportation.gov

Other certificates including the domain name dot.gov

(limited to 100 certificates)
www.psp.fmcsa.dot.gov
www.dot.gov
acquia-sites.com
*.phmsa.dot.gov
vsa.volpe.dot.gov
marad.dot.gov
acquia-sites.com
www.standards.its.dot.gov
origin-www-esv.nhtsa.dot.gov
*.volpe.dot.gov
faces.fta.dot.gov
1c3rs.rita.dot.gov
itsdpro.ornl.gov
facesuat.fta.dot.gov
its2010.ornl.gov
www.faa.gov
ftp.nhtsa.dot.gov
rsac.fra.dot.gov
fl17vgisweb.hfl17do1.wfl.fld.fhwa.dot.gov
marapps.dot.gov
ask.fmcsa.dot.gov
crashstats.nhtsa.dot.gov
TSMART.VOLPE.DOT.GOV
www.dot.gov
acquia-sites.com
mcmis.fmcsa.dot.gov
its2010.ornl.gov
safeconsole.volpe.dot.gov
nhtsa.dot.gov
acquia-sites.com
NHTHQNF5B-M.nhtsa.dot.gov
fhw2xavwmup02.dmz.fhwa.dot.gov
pmars.marad.dot.gov
acquia-sites.com
dotcmsreporting.dot.gov
oetcrt.dot.gov
itsassets.ornl.gov
acquia-sites.com
acquia-sites.com
safercar.gov
enepa.fhwa.dot.gov
rspcb.safety.fhwa.dot.gov
itsassets.ornl.gov
marapps.dot.gov
www-odi.nhtsa.dot.gov
PoolSFC.dot.gov
fhw1xavwmup01.dmz.fhwa.dot.gov
flh.fhwa.dot.gov
swim.volpe.dot.gov
Access.dot.gov
www.dot.gov
www-nass.nhtsa.dot.gov
itsassets.ornl.gov
ftp.nhtsa.dot.gov
its.dot.gov
ftajira.ad.dot.gov
sphome.volpe.dot.gov
crashstats.nhtsa.dot.gov
www.environment.fhwa.dot.gov
scm.nhtsa.dot.gov
www.faa.gov
www.dot.gov
test.cdlis.dot.gov
elmsstaging.dot.gov
eas.dot.gov
crashviewer.nhtsa.dot.gov
PoolSFC.dot.gov
eas.dot.gov
transportation.gov
safety.fhwa.dot.gov
nhthqnlas865.ad.dot.gov
nhthqnwas603.ad.dot.gov
sftp.phmsa.dot.gov
score.fmcsa.dot.gov
eas.dot.gov
origin-www-odi.nhtsa.dot.gov
www.npms.phmsa.dot.gov
slfts.fhwa.dot.gov
CSAM.DOT.GOV
email.dot.gov
itsdpro.ornl.gov
www.dot.gov
fhfl15gisweb.flhd.fhwa.dot.gov
*.phmsa.dot.gov
VOLPEPHONEMGR.VOLPE.DOT.GOV
mscs.marad.dot.gov
faces.fta.dot.gov
facesdev5.fta.dot.gov
dtrack2013.ornl.gov
sra.volpe.dot.gov
hostedsites.volpe.dot.gov
smtp10.dot.gov
*.infopave.fhwa.dot.gov
www.faa.gov
nhthqnwas813.ad.dot.gov
transitapp.ost.dot.gov
elmsstaging.dot.gov
acquia-sites.com
nhthqnlas803.ad.dot.gov
rspcb.safety.fhwa.dot.gov

Certificate

The complete raw certificate details for www.dot.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIODDCCDPSgAwIBAgIQAm3h6j28pWz2jA0o8BPEhTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjEwMDEwMDAwMDBaFw0yMzEwMDQyMzU5NTlaMIGMMQswCQYDVQQGEwJVUzEd
MBsGA1UECBMURGlzdHJpY3QgT2YgQ29sdW1iaWExEzARBgNVBAcTCldhc2hpbmd0
b24xMzAxBgNVBAoTKlVuaXRlZCBTdGF0ZXMgRGVwYXJ0bWVudCBvZiBUcmFuc3Bv
cnRhdGlvbjEUMBIGA1UEAxMLd3d3LmRvdC5nb3YwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgAr4g8eT8yCCmV/3RkpATgbu8mllljMEHs0HZ3X6Zw95V
rsoJ/5iOlvGkQ8uyJOAPAGuwEUjsgVX0WkFqxRjFNKLF7WC+CbUp+Hu2OoV33SJe
0O34wAPuHwqG4xW/HwYVpbKcZPMGFa8YPhYJsu7ZJeTEmSpJYnu6z6q1Mcu7aa4B
nviHFiIDK6wo5hBjk04FqAWCiIkitVQwLahBMnkXP7+rTCYBEmfoadSZ5JhPaQu8
vqpBb3E/Ub5GuK56TuNP116I5qxCUR6CDnq0l8hb4Itiipwcz1T/A8Wi6i65sm4E
Q2B2naRN+P8FPGZjdpAkb/aRiIFUSnBkOiVlOlepAgMBAAGjggqVMIIKkTAfBgNV
HSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU2SvEtE6M75VK
F18Lq3Ao1YCrxUYwggedBgNVHREEggeUMIIHkIILd3d3LmRvdC5nb3aCFGJ1aWxk
YW1lcmljYS5kb3QuZ292ghNjaGVja3RoZWJveC5kb3QuZ292ghNjaXZpbHJpZ2h0
cy5kb3QuZ292ghRjbXMuYXZpYXRpb24uZG90LmdvdoIPY21zLmJ0cy5kb3QuZ292
ggtjbXMuYnRzLmdvdoIYY21zLmJ1aWxkYW1lcmljYS5kb3QuZ292ggtjbXMuZG90
LmdvdoIQY21zLmZod2EuZG90LmdvdoIRY21zLmZtY3NhLmRvdC5nb3aCGGNtcy5m
bWNzYS5zZWN1cmUuZG90LmdvdoIPY21zLmZyYS5kb3QuZ292gg9jbXMuZnRhLmRv
dC5nb3aCFGNtcy5pbnRyYW5ldC5kb3QuZ292ghFjbXMubWFyYWQuZG90LmdvdoIb
Y21zLnBlcm1pdHMucGVyZm9ybWFuY2UuZ292ghFjbXMucGhtc2EuZG90LmdvdoIS
Y21zLnNlYXdheS5kb3QuZ292ghJjbXMuc2VjdXJlLmRvdC5nb3aCDWNtcy51c21t
YS5lZHWCEWNtcy52b2xwZS5kb3QuZ292ghBjbXM3LmJ0cy5kb3QuZ292ggxjbXM3
LmRvdC5nb3aCEWNtczcuZmh3YS5kb3QuZ292ghJjbXM3LmZtY3NhLmRvdC5nb3aC
EGNtczcuZnJhLmRvdC5nb3aCEGNtczcuZnRhLmRvdC5nb3aCEmNtczcubWFyYWQu
ZG90LmdvdoISY21zNy5waG1zYS5kb3QuZ292ghBjbXM4LmJ0cy5kb3QuZ292ggxj
bXM4LmRvdC5nb3aCEWNtczguZmh3YS5kb3QuZ292ghJjbXM4LmZtY3NhLmRvdC5n
b3aCEmNtczgubWFyYWQuZG90LmdvdoISY21zOC5waG1zYS5kb3QuZ292ggdkb3Qu
Z292ghJkb3RjbXMuZnJhLmRvdC5nb3aCDWZtY3NhLmRvdC5nb3aCEWZtY3NhLmxt
cy5kb3QuZ292ghRmbWNzYS5wb3J0YWwuZG90LmdvdoISZnJhLnBvcnRhbC5kb3Qu
Z292ggtmdGEuZG90LmdvdoIOaGF6bWF0LmRvdC5nb3aCFGhhem1hdHNhZmV0eS5k
b3QuZ292ghBoaWdod2F5cy5kb3QuZ292ghVoaWdod2F5cy5maHdhLmRvdC5nb3aC
DW1hcmFkLmRvdC5nb3aCEG1hcml0aW1lLmRvdC5nb3aCHm5hdGlvbmFscmVnaXN0
cnkuZm1jc2EuZG90LmdvdoIabnRjc2NoZWR1bGVyLmZtY3NhLmRvdC5nb3aCC250
bC5idHMuZ292gg1vc2RidS5kb3QuZ292gg1waG1zYS5kb3QuZ292ghZwaXBlbGlu
ZXNhZmV0eS5kb3QuZ292ghBwbnQucml0YS5kb3QuZ292gg5wb3J0YWwuZG90Lmdv
doITcHJvdGVjdHlvdXJtb3ZlLmdvdoIRcmFpbHJvYWRzLmRvdC5nb3aCFXJhaWxy
b2Fkcy5mcmEuZG90LmdvdoITc2NvcmUuZm1jc2EuZG90LmdvdoIOc2Vhd2F5LmRv
dC5nb3aCDnNlY3VyZS5kb3QuZ292ghFzZm0uZm1jc2EuZG90LmdvdoIWc2hhcmV0
aGVyb2Fkc2FmZWx5LmdvdoIRdHJhbnNlcnZlLmRvdC5nb3aCD3RyYW5zaXQuZG90
LmdvdoILdHNpLmRvdC5nb3aCC3V0Yy5kb3QuZ292gg12b2xwZS5kb3QuZ292gg93
d3cuYnRzLmRvdC5nb3aCC3d3dy5idHMuZ292ghd3d3cuY2hlY2t0aGVib3guZG90
LmdvdoIXd3d3LmNpdmlscmlnaHRzLmRvdC5nb3aCFHd3dy5kYXRhLmZyYS5kb3Qu
Z292ghF3d3cuZm1jc2EuZG90LmdvdoIYd3d3LmZtY3NhLnBvcnRhbC5kb3QuZ292
gg93d3cuZnRhLmRvdC5nb3aCEXd3dy5tYXJhZC5kb3QuZ292ghR3d3cubWFyaXRp
bWUuZG90LmdvdoIRd3d3Lm9zZGJ1LmRvdC5nb3aCG3d3dy5wZXJtaXRzLnBlcmZv
cm1hbmNlLmdvdoIRd3d3LnBobXNhLmRvdC5nb3aCEnd3dy5wb3J0YWwuZG90Lmdv
doIXd3d3LnByb3RlY3R5b3VybW92ZS5nb3aCEHd3dy5yaXRhLmRvdC5nb3aCEnd3
dy5zZWF3YXkuZG90LmdvdoISd3d3LnNlY3VyZS5kb3QuZ292ghp3d3cuc2hhcmV0
aGVyb2Fkc2FmZWx5LmdvdoITd3d3LnRyYW5zaXQuZG90LmdvdoIWd3d3LnRyYW5z
cG9ydGF0aW9uLmdvdoIPd3d3LnRzaS5kb3QuZ292gg13d3cudXNtbWEuZWR1ghF3
d3cudm9scGUuZG90LmdvdoIQd3d3Ny5idHMuZG90LmdvdoISd3d3Ny5mbWNzYS5k
b3QuZ292ghB3d3c3LmZ0YS5kb3QuZ292ghV3d3c3LmhpZ2h3YXlzLmRvdC5nb3aC
End3dzcucGhtc2EuZG90LmdvdoIXd3d3Ny50cmFuc3BvcnRhdGlvbi5nb3YwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNV
HR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJT
QUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYb
aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUGCCsGAQUFBwEBBGkwZzAmBggr
BgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKG
MWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5j
cnQwCQYDVR0TBAIwADCCAXsGCisGAQQB1nkCBAIEggFrBIIBZwFlAHUA6D7Q2j71
BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGDkPRaBQAABAMARjBEAiBmjQo4
yrRgxOQIoBZKRrvZdDHx2HiJ6JypZIvr+UocIgIgFMtEtpXGr7kDmrEo8VeJObK7
+z2qr/gT8SAjBiBta+sAdQCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTal
mgAAAYOQ9FpUAAAEAwBGMEQCIDsqDob9cemYN0J/CGv55DHt4jTnE/oA6Q4yJ03Y
qlzzAiBRICFwpsvzfRKfTa3nOrtlKkUc1cBdEQHvbkL3POgf7gB1ALc++yTfnE26
dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABg5D0WikAAAQDAEYwRAIgRM1TbHOE
3vFUGVgvgqfDvdoYF7HRhexVcEBe8S1CENcCIBihh3Vvca1jEzNw1knKyTijuRnn
y0p5kycd43Ya03yEMA0GCSqGSIb3DQEBCwUAA4IBAQAdUyRP82NCSd6cMrecCFuz
atTJEI2ZPL6vnIuByMoVgsVEn48E6avttIiAEsZln6/BMZpQnWwgSlVaFhg4RVgU
vWPTuquCXxeRCqdTfnAMPLLj+gvDQmqOsZx9SSMcUIL2D7ZMzQ6xJhDkMKN2vIua
zFFjLowL4wmwuvHfhMl/Gex9pHcuKWVbwb5lfmir+viYfQnrYSlIcSkIkbh/9TjC
BPEfPNva3AecrZajTl2A2DuyI2K6yah8rVye2TV4QToRgZ9Td22PPjLXqj5NTwvo
y1zgo5GLTKHdTBJiazQn52KnNJQZbgCi3XmFAOjZSzc5JwUPTUiaBb5oRtwKzW1j
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAK+IPHk/Mggplf90ZKQ
E4G7vJpZZYzBB7NB2d1+mcPeVa7KCf+YjpbxpEPLsiTgDwBrsBFI7IFV9FpBasUY
xTSixe1gvgm1Kfh7tjqFd90iXtDt+MAD7h8KhuMVvx8GFaWynGTzBhWvGD4WCbLu
2SXkxJkqSWJ7us+qtTHLu2muAZ74hxYiAyusKOYQY5NOBagFgoiJIrVUMC2oQTJ5
Fz+/q0wmARJn6GnUmeSYT2kLvL6qQW9xP1G+Rriuek7jT9deiOasQlEegg56tJfI
W+CLYoqcHM9U/wPFououubJuBENgdp2kTfj/BTxmY3aQJG/2kYiBVEpwZDolZTpX
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3228998449807622774691045269965096069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District Of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Department of Transportation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dot.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20199481265513929249249787874779976141099545096144732478822991999940663651599174281665223579412762283978426669744566195677024194146695711418741044501599115569675532557316313796455920147725218588546690590662382776295414946736093863575900883467134263166411274660713389025912129906144143959591509761205889501717328114769662658735025855368886722646846455573014358715776685030035104453438920508234351793100148929721303539556923490163313012197889412009725867423309907796390105533738818316235513034718559719764302002460121642077679365797921849408111838759822856842204428672743302409236362759355772769475993445656853397264297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d92bc4b44e8cef954a175f0bab7028d580abc546
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildamerica.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkthebox.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilrights.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.aviation.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.buildamerica.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fmcsa.secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.intranet.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.permits.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.seaway.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.usmma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.volpe.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms7.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms8.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcms.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcsa.lms.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcsa.portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fra.portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazmat.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazmatsafety.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highways.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highways.fhwa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritime.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalregistry.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntcscheduler.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntl.bts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osdbu.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipelinesafety.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnt.rita.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectyourmove.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railroads.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railroads.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'score.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaway.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfm.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharetheroadsafely.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transerve.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transit.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsi.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utc.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volpe.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkthebox.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilrights.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.fra.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmcsa.portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marad.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritime.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osdbu.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.permits.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectyourmove.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rita.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaway.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharetheroadsafely.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transit.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transportation.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsi.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usmma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volpe.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.bts.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.fmcsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.fta.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.highways.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.phmsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.transportation.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018390f45a0500000403004630440220668d0a38cab460c4e408a0164a46bbd97431f1d87889e89ca9648bebf94a1c22022014cb44b695c6afb9039ab128f1578939b2bbfb3daaaff813f1202306206d6beb007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018390f45a54000004030046304402203b2a0e86fd71e99837427f086bf9e431ede234e713fa00e90e32274dd8aa5cf3022051202170a6cbf37d129f4dade73abb652a451cd5c05d1101ef6e42f73ce81fee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018390f45a290000040300463044022044cd536c7384def15419582f82a7c3bdda1817b1d185ec5570405ef12d4210d7022018a187756f71ad63133370d649cac938a3b919e7cb4a7993271de3761ad37c84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d53244ff3634249de9c32b79c085bb36ad4c9108d993cbeaf9c8b81c8ca1582c5449f8f04e9abedb4888012c6659fafc1319a509d6c204a555a161838455814bd63d3baab825f17910aa7537e700c3cb2e3fa0bc3426a8eb19c7d49231c5082f60fb64ccd0eb12610e430a376bc8b9acc51632e8c0be309b0baf1df84c97f19ec7da4772e29655bc1be657e68abfaf8987d09eb61294871290891b87ff538c204f11f3cdbdadc079cad96a34e5d80d83bb22362bac9a87cad5c9ed93578413a11819f53776d8f3e32d7aa3e4d4f0be8cb5ce0a3918b4ca1dd4c12626b3427e762a73494196e00a2dd798500e8d94b373927050f4d489a05be6846dc0acd6d63