createyourowncareer.de

- Arvato Systems GmbH -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:5a:ba:21:6a:4b:47:32:88:ba:98:ae:14:21:ae:2a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Arvato Systems GmbH

Organization: Arvato Systems GmbH
State / Province: Nordrhein-Westfalen
Locality: Gütersloh
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:5a:ba:21:6a:4b:47:32:88:ba:98:ae:14:21:ae:2a
Serial Number (int): 17751045838084099713482748140437220906
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:e1:a1:9a:19:c6:03:4c:44:10:55:f3:6c:fa:86:37:28:ca:ac:b3
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 82:9e:2e:27:63:21:4c:79:87:20:c2:4e:4a:e3:ce:93:4b:7c:8d:26
Fingerprint (sha256): 50:9f:66:70:db:95:2c:03:5d:b7:77:b3:e5:bd:f2:91:fc:20:e8:b4:7f:fe:c2:1c:40:d4:42:11:f3:5e:82:eb

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate createyourowncareer.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for createyourowncareer.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

createyourowncareer.de
www.createyourowncareer.de

Other certificates including the domain name createyourowncareer.de

(limited to 100 certificates)
createyourowncareer.de
alumni.bertelsmann.com
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
createyourowncareer.de
alumni.bertelsmann.com
ausbildung.bertelsmann.de
jobsearch.createyourowncareer.de
createyourowncareer.de
jobsearch.createyourowncareer.de
alumni.bertelsmann.com
ausbildung.bertelsmann.de
alumni.bertelsmann.com
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
createyourowncareer.de
createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
alumni.bertelsmann.com
ausbildung.bertelsmann.de
createyourowncareer.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
jobsearch.createyourowncareer.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
ausbildung.bertelsmann.de
jobsearch.createyourowncareer.de

Certificate

The complete raw certificate details for createyourowncareer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpjCCBo6gAwIBAgIQDVq6IWpLRzKIupiuFCGuKjANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIzMTEwNzAwMDAwMFoXDTI0MTEyNzIzNTk1OVowfzELMAkGA1UEBhMCREUx
HDAaBgNVBAgTE05vcmRyaGVpbi1XZXN0ZmFsZW4xEzARBgNVBAcMCkfDvHRlcnNs
b2gxHDAaBgNVBAoTE0FydmF0byBTeXN0ZW1zIEdtYkgxHzAdBgNVBAMTFmNyZWF0
ZXlvdXJvd25jYXJlZXIuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDbgvSxWX5gfpALHqsdD1w344X31YjC8L8cfpbrL7mJSvn2FOSLuDw/fGAJSNCe
ua0xCFlJXzGGcT0pXIuktTJHe+abBtT7Vr0+ivJmdGXG9oUbuY/eZH2UD3R5Gcjj
h4Wk7xC+jPBVlC/TjSTd3yNFC1KEfDEUDXH+ncRCSIhuOatFxXruMBhSss0jnMzw
FKEk1giorqDnfVxq7szcQ2p+FEKRi5+4kaD3LS9k5s0CXCgnyIdWPkIsSQoNlA/C
TmZYKkULPVDOWZPtd2/51LHCwEOcO1gEmyUSb+tEEBn632yMyGe9DZM1c/ioNXPW
uFQwptBN59Aj64d4by6X1gekljiubJeqYrwOAozVCkPg3wnWKyDroLknesJEn8q6
NoxMHPxKxDpNAkkpoWyQgsDqPltrs34QnfBTWgYZ+t35q2hCsWuelLZGPIoZX9xK
KSWkc0qqYXPQQ4EQC/qH4qKcPFpPmUNaHaH2bdd9DeOm8QV3dnKog9jhVIrAlHo7
aFmH2DtSy3n+RyM23id4/lnwtgZAN+QAyyJ8DIA/YB+w7QoLmkkYdpC4Biw1HbmP
HB2D2JqspfKMjU+TdMmVHQvfcLUT0GTprBv8utkV5EMkT2wn2CP9Pj5etEOtrQ0E
8KEpaMRx+hjjfdl4E4ktGUlAUVvDNxZ2ErvtdYYcUuYSIQIDAQABo4IDOzCCAzcw
HwYDVR0jBBgwFoAUlE/UXYvkpOKmgP792PkA76O+AlcwHQYDVR0OBBYEFLHhoZoZ
xgNMRBBV82z6hjcoyqyzMD0GA1UdEQQ2MDSCFmNyZWF0ZXlvdXJvd25jYXJlZXIu
ZGWCGnd3dy5jcmVhdGV5b3Vyb3duY2FyZWVyLmRlMD4GA1UdIAQ3MDUwMwYGZ4EM
AQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8G
A1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0
VExTUlNBQ0FHMS5jcmwwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRw
Oi8vc3RhdHVzLmdlb3RydXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2Vy
dHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwDAYDVR0TAQH/
BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAdv+IPwq2+5VRwmHM9Ye6
NLSkzbsp3GhCCp/mZ0xaOnQAAAGLqRKy9wAABAMARzBFAiAd6oz+vvDFxf+skFlu
SUk7+T0CVmeqSNLk0VyZmje8GAIhAPSbsgd3o2gEGo+fXhr2ZUe22SSdDf92x+TY
q7zy67e4AHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLqRKy
lwAABAMASDBGAiEAt5UlEiLmbR8va3KNYcuRpY9GfdFlJ7rF6DFMhbj11U0CIQCj
6OWOoU7H78trcHSpSGDWddit3cPUEfedZIdIQQs+VAB1AD8XS0/XIkdYlB1lHIS+
DRLtkDd/H4Vq68G/KIXs+GRuAAABi6kSsuEAAAQDAEYwRAIgXVr52wE9hE5X+/s9
zkkh4urqQV27vCLwgUSlsJrKpQ4CIA0e1P3R8q4XNc5/kHr1S6K9cSvcpJZog0w5
1ufsENtbMA0GCSqGSIb3DQEBCwUAA4IBAQBabLa9BLMr1mMUN122peMPyC1sXkQ6
GgUkCP5QD+4C7BWkUKTbP071e3EVHPM0eNkLKAPw8lVxIGd4iQ9CdIXTzXsSQ6ps
PJzhw4QOshrzr3SuoSrlAObZUIvulip2ihgW8o8Npi2hdD+Q7SCCfoqiPf7saOnk
pjHrjODqM4eqwspBLHaxS0VVQD8kjhkom18bJrGkDk9vNRxBoJx8W0OBGngv/thR
SnPUCimvtMx7gdQUKQaD3yAHLphqgUzGuHt159AgevqZc3YbmD2xiuW6IdC48NyZ
yxjVspP0otg8OW6EB+EfSkD/uzU7YG6G2vQhqlG8kDBNLanxl0FyEX0Q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17751045838084099713482748140437220906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gütersloh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arvato Systems GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'createyourowncareer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895528977379542754108549540144119784255664196111936500619618578810691892158314546782108028806353003906507910757118870047876135545219166421007274802691771794699175125217315367616824597916949858097529508252766292462180568318726505735550060882697621670520050021377855275912375917564713261358943728229260829621084795150508620955448644270149349221280931786785148002172579849176325189362003022870448695266988089057665029411554552052457529924137725684376106329979534961361413587077208620697050849916122459314684867847084827321571762313243936732323018995518905888768908771508722840702765746371510300070403105235639936830631904239109484930522427917900411951261779938268447700424919327325229231724655171625494342616614323258314972975641183147731623507484858365558230459332074303421039218033078552224799496322854900802176320356710746173864110494252554758594050463337595062519765254198962512748827426551186063592534175731574042559581041251871388208483437137682200252647799138338730763292083838529731082929557635979562913556609540640978142010624464895733822974108993358122153098077175003792689900777158477394739266470982563543806647362820916707602665104859965067596306389969857809615664145664737996726840977740479885639065949992851641914796413473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1e1a19a19c6034c441055f36cfa863728caacb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createyourowncareer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createyourowncareer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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