*.payu.in

- PayU Payments Pvt Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:2b:36:46:35:ef:ca:71:ac:31:c1:e3:bc:a6:17:9b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PayU Payments Pvt Ltd

Organization: PayU Payments Pvt Ltd
State / Province: Haryana
Locality: Gurugram
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:2b:36:46:35:ef:ca:71:ac:31:c1:e3:bc:a6:17:9b
Serial Number (int): 17504333522903471930821544470376748955
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 99:7b:25:c4:ee:92:63:35:31:72:0e:3c:88:f0:b8:17:0a:c5:66:aa
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e4:84:7c:fa:ce:d2:ca:71:87:d0:61:0d:e3:5f:25:48:de:48:8d:c6
Fingerprint (sha256): 57:b2:a7:51:41:5a:34:3d:8b:22:2e:b6:f7:55:fd:4c:84:51:a7:0f:8d:00:61:ec:5a:04:6b:13:b5:a4:9f:9b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.payu.in

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.payu.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.payu.in
payu.in

Other certificates including the domain name payu.in

(limited to 100 certificates)
secure.payu.in
www.payu.com
secure.payu.in
accounts.payu.in
secure.payu.in
signup.payu.in
*.payu.in
secure.payu.in
lp.payu.in
*.payu.in
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
secure.payu.in
*.payu.in
*.payu.in
secure.payu.in
secure.payu.in
info.payu.in
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
www.payu.com
secure.payu.in
www.payu.in
enach.payu.in
nebula.payu.in
*.payu.in
secure.payu.in
secure.payu.in
secure.payu.in
obriskscore.payu.in
www.payu.com
www.payu.com
www.payu.com
www.payu.com
secure.payu.in
*.payu.in
www.payu.com
www.payu.com
secure.payu.in
*.payu.in
tpcs.payu.in
www.payu.com
pages.payu.in
payu.in
secure.payu.in
*.payu.in
www.payu.com
*.payu.in
www.payu.com
*.payu.in
test.payu.in
*.payu.in
secure.payu.in
capital.payu.in
secure.payu.in
*.payu.in
www.payu.com
www.payu.com
www.payu.com
*.payu.in
www.payu.in
secure.payu.in
jshb.payu.in
www.payu.in
*.payu.in
accounts.payu.in
secure.payu.in
*.payu.in
www.payu.com
secure.payu.in
*.payu.in
dataplatform.payu.in
secure.payu.in
dda.payu.in
www.payu.com
secure.payu.in
www.payu.com
www.payu.com
www.payu.com
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
ds-spinnaker.payu.in
mars.payu.in
*.payu.in
accounts.payu.in
accounts.payu.in
secure.payu.in
*.payu.in
secure.payu.in
*.payu.in
*.payu.in
enach.payu.in
*.payu.in
docs.payu.in

Certificate

The complete raw certificate details for *.payu.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIQDSs2RjXvynGsMcHjvKYXmzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjExMjkwMDAwMDBaFw0yMzEyMzAyMzU5NTlaMGYxCzAJBgNVBAYTAklOMRAw
DgYDVQQIEwdIYXJ5YW5hMREwDwYDVQQHEwhHdXJ1Z3JhbTEeMBwGA1UEChMVUGF5
VSBQYXltZW50cyBQdnQgTHRkMRIwEAYDVQQDDAkqLnBheXUuaW4wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmce9IUNw9ZKFZcbnhwBA+kbE9JzeUTmPB
xXwW1JHHeIYYpG+GhF3Q8Omul6IMcVe2eoq5F3d271EDtaA767Gs7annCS1f6vlS
kLCihpt9eOiW5xAIGu6DuPBSyhWnO4R4+E9qEfsEtUIvZAjEaw3lmsoTdBvae5qj
t7TtHyXWCGlDFzUb/u1DJwRZtlK9MKFq3+M/qNyvv3/v7PzAAOFSvWeH4EZ8B963
eVxvK+IP5Azsqh+tHaC8sxFej01Vb+1uQMH00MtdZEFuoiejbNSslD4Z0AjRobqi
UOn++ZCFkcfadL25iY7nYRGksfSMO/5Bkl6rZBemXt6sBB+Prf6FAgMBAAGjggMU
MIIDEDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU
mXslxO6SYzUxcg48iPC4FwrFZqowHQYDVR0RBBYwFIIJKi5wYXl1LmluggdwYXl1
LmluMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2Vv
VHJ1c3RSU0FDQTIwMTguY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB
BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB1BggrBgEFBQcBAQRp
MGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsG
AQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FD
QTIwMTguY3J0MAkGA1UdEwQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1
AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhMMmk7QAAAQDAEYw
RAIgMXTN4iVZbk3tvFvk4lOU3ORJmVIAsBLzQoOg76aqzEcCIGMqmfqDq8DgccAg
t/pc+roZA4UbyohW6AbgCHdV2UR0AHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH
3PADDnk2pZoAAAGEwyaUHwAABAMARjBEAiBVLyzPkgP5XioxZZQY5WcmW+oOFDpx
nIsPwv0dGcraIQIgZiHwMKVZo5WNIZA22p+J0WcuzaKvDroiDm1HJH4IYRYAdgC3
Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYTDJpPxAAAEAwBHMEUC
IQCnOgT/hkoXfcE1XWOltN2tLGxa2Lqhns4FWl5XAbHQogIgCRhdtN8//YckVLQo
I8vVC8ozK/EtO/zhmbtpismJ36gwDQYJKoZIhvcNAQELBQADggEBACXAzUqf2NIV
8RWI9t6DNNVVMDb4JXbgDZ7GwYg5xwFMY9ekti2Neg1nw4XXFXOssikVxM1EZeYw
3m+F/+cB12O7SMmFZgd7VTgyUEtX2mzDKYHwV2geNfisfInH4d5sp4d9qxT0b5kv
LSiFMAld+2QVzEZi6Yu7sjdZKAwcWZdav5UDFKjwUPb7sN+OOxwfgcW6/LNPKzKj
Pc40OCpOwQtY1BBINs8fFQV1fDz94FoWWORcBpchBJA6iiXWhVvIwp24Y9mru6m0
5kznPWT27JC6voA65irJnd+Ovbi1og8F1ZicsrGxs9sOzg0jQAMlXOgygoTWESIF
n9Kri/j+akk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHvSFDcPWShWXG54cAQ
PpGxPSc3lE5jwcV8FtSRx3iGGKRvhoRd0PDprpeiDHFXtnqKuRd3du9RA7WgO+ux
rO2p5wktX+r5UpCwooabfXjolucQCBrug7jwUsoVpzuEePhPahH7BLVCL2QIxGsN
5ZrKE3Qb2nuao7e07R8l1ghpQxc1G/7tQycEWbZSvTChat/jP6jcr79/7+z8wADh
Ur1nh+BGfAfet3lcbyviD+QM7KofrR2gvLMRXo9NVW/tbkDB9NDLXWRBbqIno2zU
rJQ+GdAI0aG6olDp/vmQhZHH2nS9uYmO52ERpLH0jDv+QZJeq2QXpl7erAQfj63+
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17504333522903471930821544470376748955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gurugram'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayU Payments Pvt Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.payu.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21011741917536278278863609784870538795398341617939949729640485419164625917674487036386792219447516603587960245103907858332200336824319037891561405476441567145234899964305920579591861093544764276826886637173118776179858774181081301186807998408789293580824533936448743448311102138820439383872173894285148122213213688152757143470626876257346554407007410324010667302769629086915163285492485636503773485879785956462763886866595531946056019017147201845931775782715473121187654647708957934125492049567232123010679299521696945687977851428233520153090574607613460037467316962411302168865083345443699144001510196560739250863749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							997b25c4ee92633531720e3c88f0b8170ac566aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payu.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0025c0cd4a9fd8d215f11588f6de8334d5553036f82576e00d9ec6c18839c7014c63d7a4b62d8d7a0d67c385d71573acb22915c4cd4465e630de6f85ffe701d763bb48c98566077b553832504b57da6cc32981f057681e35f8ac7c89c7e1de6ca7877dab14f46f992f2d288530095dfb6415cc4662e98bbbb23759280c1c59975abf950314a8f050f6fbb0df8e3b1c1f81c5bafcb34f2b32a33dce34382a4ec10b58d4104836cf1f1505757c3cfde05a1658e45c06972104903a8a25d6855bc8c29db863d9abbba9b4e64ce73d64f6ec90babe803ae62ac99ddf8ebdb8b5a20f05d5989cb2b1b1b3db0ece0d234003255ce8328284d61122059fd2ab8bf8fe6a49