www.koenenenco.nl

- Maatschap Koenen en Co -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 0d:4d:87:67:a5:6c:2b:9c:db:6c:2e:85:c1:a5:53:3d was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Maatschap Koenen en Co

Company registration number: 14125417
Organization: Maatschap Koenen en Co
Locality: Maastricht
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:4d:87:67:a5:6c:2b:9c:db:6c:2e:85:c1:a5:53:3d
Serial Number (int): 17682517140304116584182563742641640253
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:7e:d5:56:07:02:d6:42:43:ef:ca:63:cc:d3:33:36:b9:a2:0b:27
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 0e:86:ba:cb:52:5c:d6:a1:da:f9:51:c9:88:0a:01:83:fd:b9:32:f1
Fingerprint (sha256): 4f:d6:6f:09:f3:cb:33:96:b6:b3:bf:f4:3d:01:11:72:8e:3e:63:ff:ca:bc:24:f7:51:bf:1d:31:7c:0a:96:4b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate www.koenenenco.nl

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.koenenenco.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.koenenenco.nl
koenenenco.nl
suczesminitest.koenenenco.nl
overstappen.koenenenco.nl
wkrtool.koenenenco.nl
iproef.koenenenco.nl
events.koenenenco.nl

Other certificates including the domain name koenenenco.nl

(limited to 100 certificates)
link.vpngate-connector.com
pricetrends.io
pinkweb.koenenenco.nl
www.secretfriend.fr
kreationfilms.co.in
dev.botin.io
inbox.rest
www.koenenenco.nl
customers.approv.tech
utahtravelpass.com
www.buscontrol.app
my.dev.hudya.no
cartron.b2b4-check.com
test-manheim-dala.cox2m.com
www.koenenenco.nl
portaal.koenenenco.nl
platform-pcm.koenenenco.nl
koenenenco.nl
app.runmyservice.com
dl.webuters.com
mimoinfinito.store
fadyphilips.com
koenenenco.nl
blockprints.net
landing.koenenenco.nl
registration.egraft.org
mindpack.com
imagine.agency
pqs-juridisch.koenenenco.nl
www.sagarwatamkar.com
dev-sps.habrtech.cz
betterbriefs.dev
verify.blueshell.io
eltrasterobar.salvadormares.com
lumin-ideacloud.forgedx.com
www.danielschreitter.de
a061.foodle.su
q1-track.dpd.co.uk
loonheffingencheck.koenenenco.nl
www.koenenenco.nl
www.architex-solutions.net
docs.zax-92.com
cafe.owl2go.de
www.koenenenco.nl
www.dentocurean.com
app.yenisirketkur.com
ac.koenenenco.nl
www.housle.house
wabisabiuploader.com
da.koenenenco.nl
coopertransrotas.ideiadtc.com
evaluate.watani.gov.sa
www.koenenenco.nl
www.koenenenco.nl
app.moxit.com
dev.proxy.valuehr.sokuyaku.jp
app.darum.com.ng
actest.koenenenco.nl
trimurticonventschool.com
www.firebirdmun.com
kadurawebservices.fr
ac.koenenenco.nl
pqs-sturen-op-resultaat.koenenenco.nl
nps.koenenenco.nl
portaal.koenenenco.nl
colegios.mision.education
nsg.koenenenco.nl
marmitanaestrada.com
1956.ai
andyhavlik.it
designfactory.pt
mijn.koenenenco.nl
oolab.co.jp
tirunelveli.yazhdroptaxi.com
actest.koenenenco.nl
incidentally-login.emerging-response.com
gollmann.apoly.de
architext.masonzee.com
portal.koenenenco.nl
www.setagaya-phil.net
volgait.com
rms.motchasoft.com
www.aracolor.cz
pokeremulator.com
www.onsitecarservices.com
login.koenenenco.nl
www.gisua.com
mijn.koenenenco.nl
elshemy.site
www.octanejeans.com.ar
nsg.koenenenco.nl
www.fulsa.org.ar
static.loko.city
loonheffingscan.koenenenco.nl
recover.shopflo.co
page.ouch.ai
tallerdtres.com.ar
www.theaisites.co.in
portal.koenenenco.nl
worldofhensnft.com

Certificate

The complete raw certificate details for www.koenenenco.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2rrEIktTPNVhkTv62r/d
5XgX04T3rIThb79WymhyuUKFqI5l5QutGEyCgxqpYE2a6BmdEu2NZQqes9DFEe/W
idHtnvs91ILQqvOlPxToYStM/iSnLlnrJoaIpXZhuuL39Ew0ZiIe8Wj0BXf029Io
crCOLJF67hXffYGQTG5k8ADdCFyX8qKe26H5LcGZUxE5WVVfZDv+H69UqAyFMx0p
pZR9Ua6aHRjcGk/dXB6kef4uNhF1xTcZ+XT6FRLpfpJgKXpglagxrw6iWiIMQZvV
0sz808n2jxFn0zQzSYxWJ1KkVW+WdR2/Ouge5QXXHvUsjb7ro7Q6w3Pnw8n1ybHr
bbNMLdBuCNzlrrrHCfYKQo1qQA4sIHPKHoL4N0gORbgNBcHyaWmCoyR/WQ+X6hUq
CLhLi/4lfp8riy3T2LKrdCnWjvrX29xMSyRySohBoQXt8x7ChraQN3iZSbqIXiHY
CJiG7bR0SyVSwM7Pu/bBaVUiIS1ZZbV0CyS4iIkT+d7vV+x4zxWQzXMQTxoLQMaA
0RPNEDCbXj3LzhlLnomYH8F/l7iwIdZfpA9KqC0IuLJTZrjkJ5dShzoE7pwSmoak
KlUKqPgi2Wio6Cb5U/BMl8NSKsVeshUDUKujHGpYlCMoqHHptpJhb2Chj2ATKZpT
jajRp4edk2GAFk5J/0fGzaMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17682517140304116584182563742641640253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '14125417'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maastricht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maatschap Koenen en Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.koenenenco.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892338732644686032860654341880751417762286457792217602650183935036787842747278162521625588378614583952518988498666304163204726705169051454080871947006500982207901713742822953760425678817514213893263448458985621912564899598289564217593310106102792196170241818574156699071518615373626289332696481055747662221163049223805143232947767748571815460785899998303251560948206060937181465167255073815387186961472918619671913583530138575194689685576999887792460333743727077866933189842622711319119018459173791292211424574957731126565205295704789061361438226869783692345637614659014319758472505366971929625998594501573354902211059000099319189411371255841093993272875412306422584356125215368458755444336541369712634568977020693767643153092193358949275433371764402620812036628551010725662596201102754592475575384139334795919811229245078003016234510214067044853811522249635729076669926110487081039730456724758676096718963085455456203154601374737923946289037736979587613975920063722723313661169716223821554137326214908948670434891925426090709526027951527944535125616547385795285329068281388626683383995606232249094750570866340873415942884322981509913393778377000150474325027007100747614836029379046263161047095576769121568022029083099594334277127587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b37ed5560702d64243efca63ccd33336b9a20b27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koenenenco.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koenenenco.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suczesminitest.koenenenco.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overstappen.koenenenco.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkrtool.koenenenco.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iproef.koenenenco.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.koenenenco.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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