*.lekam.pl

- PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z.O.O. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:3a:5d:95:15:1c:76:bb:6f:37:40:ab:38:d7:fc:dc was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z.O.O.

Organization: PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z.O.O.
Organization unit: IT
Locality: ZAKROCZYM
Country: PL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:5d:95:15:1c:76:bb:6f:37:40:ab:38:d7:fc:dc
Serial Number (int): 5619963276557633550803247188634238172
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 57:b0:59:f2:e2:b2:23:1b:6d:0f:ca:65:98:c0:a8:69:cf:11:70:99
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): af:01:5d:94:74:4f:fe:59:dd:a7:c1:73:a5:df:90:44:13:95:18:d7
Fingerprint (sha256): 54:85:56:99:a6:58:0a:69:43:46:14:cf:bb:53:03:bd:5a:f8:c6:66:84:47:5e:60:bd:3f:0b:0c:fc:2e:50:50

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.lekam.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lekam.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lekam.pl
lekam.pl

Other certificates including the domain name lekam.pl

(limited to 100 certificates)
*.lekam.pl
*.lekam.pl
*.lekam.pl
pomoc.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
pomoc.lekam.pl
sd.kormotech.com
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
vpn.lekam.pl
dms.lekam.pl
facilitiesdesk.holmes-hills.co.uk
vpn.lekam.pl
dms.lekam.pl

Certificate

The complete raw certificate details for *.lekam.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFjCCBf6gAwIBAgIQBDpdlRUcdrtvN0CrONf83DANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDA2MjYwMDAwMDBaFw0yMTA3MjYxMjAwMDBaMIGAMQswCQYDVQQGEwJQTDES
MBAGA1UEBxMJWkFLUk9DWllNMTswOQYDVQQKDDJQUlpFRFNJxJhCSU9SU1RXTyBG
QVJNQUNFVVRZQ1pORSBMRUstQU0gU1AuIFouTy5PLjELMAkGA1UECxMCSVQxEzAR
BgNVBAMMCioubGVrYW0ucGwwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQCk92C98TX0n9WPtGtbk674Ij/KYmGJRGZftPzjQq/fJ+UZgc0NZwu2w6rqaEUR
CTf/JEDboEMtZijShbm5AjHpt6Z8KgfHVcsb/x/tNAbeMzXyS0dtVmyI0/mh73cW
B1G8xIwRgyzbs3LH8s2tO0uXvWpskB8tGGnk56aoU0Qldnj0o3eyDD0mCTEK72Tb
0oQtX7q7+BJtdHhS7DtJDzFq+49XsF/CCSWbg7xf1PtUe5YdBn/DZq7nPdS8G6TM
/aSTMSl2vW9SsgFuY6k6OnuGtfHGEjqClEC7jWaH3O6V61+Xuixetgcq1aREeinM
W5uBAfP9Qi/PGsOVwuLSL5flJbhEQ8OcYqgB1GLJXfQAfXJfLdG3ItGvVNeVcnwB
y200YVodkmG8ZC5gdnhEeWCgw3a4p4j4rRDDbUun6kv6dgWdP80olVbAHTGyyJN+
yJRu6SERtQs8vRp/Vpapz6I/fJXqvm5hr5udpR0fJXTc3pQBWEGzaHiYSkI6zqjC
KvUSOFUBEEAjPUcCBiUIsFmt7HfA8yRQG8uuT4d5xiyhNw7ZmCEWjUviDzTKFoFw
Cgm1i258FYJZW6eLDP/zVRtvG9IFJ+06Q4EkBOuYxdB4pk0SBWgZmr4jouHeFA5L
+Fj0BxVilvOUWjevbmqHrlAPiCx8PPOSAGVvewQgfinGowIDAQABo4ICqzCCAqcw
HwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYEFFewWfLi
siMbbQ/KZZjAqGnPEXCZMB8GA1UdEQQYMBaCCioubGVrYW0ucGyCCGxla2FtLnBs
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
PgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1
c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB
BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUG
CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz
dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB2APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABcvEC
NOkAAAQDAEcwRQIgL/5oEov2Vp4Q+kTGna/ml7tAthUBY1BnuThTTU5WwhQCIQDG
75IeGvO8P3EhPAboNQHlTcjnes+We9LAcqlnesJlAgB1AFzcQ5L+5qtFRLFemtRW
5hA3+9X6R9yhc5SyXub2xw7KAAABcvECNRgAAAQDAEYwRAIgOtA3TL4kJ4K7Eeph
vQsqa2M739W8N2nlgGoDlizd2eECICODaG8dam4wqxS0zSj/HUlL2Vjb4Wpu2kZy
fgDjDkvSMA0GCSqGSIb3DQEBCwUAA4IBAQBbp0z2xaLNVePFHFDQJqyMGEJ9pfa5
zCgMAMTf8sf4CQdJtlMbfz4fJidSQ8oNdxEzAsozf5H7dGuWGhZ3n4hhYE90vo/X
LGSyHim7F8uI288Orq1E/RLSpd6QntHuCg0dt8gbZFZvuDQlPK8pRaOOwfF6u526
fXmo+UfA7CkebUxD8Uf3gvVs9CYds33/gPoh01ou6ARSeEVJ2seD9jetPQ7QEayo
1OFFoJX0acHafQZiP2VUN/7p/1tRKrL0outr+s1NAg5VKppNMUXV1IvDb3mDNkdV
M9cq5XIoFQRMdC45YT5fmzwjXUz1MzAhJDi4zaKHjtzMcScIp3kPZaSR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5619963276557633550803247188634238172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZAKROCZYM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z.O.O.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lekam.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673003868465111830079513345431477030004134000650915587113302415059723305504371675509594596939780559096057100977296457610350745449898210739560584187362862424341647174270171345645249341628014701058083971653065991343353458679407405083440810988368620771440442377064195507422720452984757754839899691995724601172617763273738186915753405783124166132263087133001895220904008711083250056829662695281039995032700975795701051577989650110359706125996238230796707751661522043348046393817390196201454105783234082918422668432703198515488209357936060797097721421991833992535866944198132490424864871595180858246944959837338897351928738551917630977819886735212390708305108767162777467232264098605397434238515186008699230991263159885882806000115366305482253862821566667224558750754986745728376000782038060958199325127553739441809263130207642906294060988467363488095088764697428748203971609268233200235678319963386082018358798165914829434062318510916213960872169463079124846786296391170936871314677831037825580996021915660832216395356334610227067403329724080414976159607780952672061911092965442779481897746808823351323871367552299396081693273497878661261427155172677584237014968740493096876918058394505458676185128377783533312675692940835485834285794979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57b059f2e2b2231b6d0fca6598c0a869cf117099
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lekam.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekam.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000172f10234e9000004030047304502202ffe68128bf6569e10fa44c69dafe697bb40b61501635067b938534d4e56c214022100c6ef921e1af3bc3f71213c06e83501e54dc8e77acf967bd2c072a9677ac265020075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000172f1023518000004030046304402203ad0374cbe242782bb11ea61bd0b2a6b633bdfd5bc3769e5806a03962cddd9e102202383686f1d6a6e30ab14b4cd28ff1d494bd958dbe16a6eda46727e00e30e4bd2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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