api.offshore-fool.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 01:e4:d3:c5:c4:39:f8:c4:d7:56:b2:f3:fe:15:53:07 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.offshore-fool.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:e4:d3:c5:c4:39:f8:c4:d7:56:b2:f3:fe:15:53:07Serial Number (int): 2517366936634387859410762800783774471
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 3f:51:ca:3b:71:b1:2f:97:02:b2:bf:00:c0:ae:0d:0f:0d:ac:62:2e
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): a9:e2:87:5e:79:9a:6d:30:41:ce:73:47:32:4c:88:72:8f:a0:c4:36
Fingerprint (sha256): 59:2d:eb:dd:96:fa:81:59:f9:00:41:94:a1:44:8c:04:43:3b:ea:5f:2c:01:32:1b:a4:4e:1f:49:3f:a0:21:93
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate api.offshore-fool.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.offshore-fool.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.offshore-fool.com
Other certificates including the domain name offshore-fool.com
(limited to 100 certificates)
cfanimaldt.turnosweb.app
lead.ctwd.com.au
urbanfarming.ind.in
www.day-one.app
www.diofantino.com
www.navinpai.com
fold.invendio.com
offshore-fool.com
www.maikteshnol.app
controlfolio.cf
itclub.lk
foradonia.com
book.dtaxicabs.com
www.remaining.io
www.jakubkm.xyz
alpha.hisab.co
www.travelli.nz
meterful.com
fbase.oranyelab.com
hookbook.app
myaa.app
new.plazaalempizza.com.ar
s.vpsny.homeworld.life
offshore-fool.com
sspuat.console.aigens.com
offshore-fool.com
test.obandln.app
bogotatimbafest.co
www.offshore-fool.com
test-admin.offshore-fool.com
api.offshore-fool.com
test-admin.offshore-fool.com
localofx.com
gofittraining.com
www.rivercloser.com
baraky.com.br
www.day-one.app
corpogram.pl
offshore-fool.com
pubg.codehox.com
franck.offshore-fool.com
prepaidplus.co.bw
av-painting.com
shuler.dev
ai-sense-data.signage.ninja
new.plazaalempizza.com.ar
epco.console.poc.aicc.abeja.io
offshore-fool.com
table9.restaurant
dp-rem-bud.ga
www.wowtroll.com
test.cocoon.com
app.thinka.hk
studio-scout.co.uk
hangkati.com
humbertofalcao.nerit.app
itqan.app
padronering.com
localnative.app
functions.webcat.app
mail.eeshaggarwal.com
ffbizs.com
staging-secure.honeycombinsurance.com
jdconsignados.tk
www.legevakten.net
tomas.do
fostergrad.com
table9.restaurant
www.atpace.co
app.dezatike.com
beta.releaseit.app
localnative.app
www.devnow.vn
mail.eeshaggarwal.com
www.politichart.uk
geonit.ca
painel.soulsapp.com.br
test.wibib.com
admin.offshore-fool.com
dp-rem-bud.ga
mail.eeshaggarwal.com
www.oversight.ai
insiderjoe.com
rcbeta.wave9.co
www.politichart.uk
www.cartsbuddy.com
vivalaorquesta.de
heihei-applications.com
mail.eeshaggarwal.com
mail.eeshaggarwal.com
yemenschools.app
teachersnow.com.br
www.travelli.nz
www.kerjasama.com
conmunis.net
bluecrowconsulting.com.au
mail.eeshaggarwal.com
insiderjoe.com
tutor.tutorassist.in
lead.ctwd.com.au
urbanfarming.ind.in
www.day-one.app
www.diofantino.com
www.navinpai.com
fold.invendio.com
offshore-fool.com
www.maikteshnol.app
controlfolio.cf
itclub.lk
foradonia.com
book.dtaxicabs.com
www.remaining.io
www.jakubkm.xyz
alpha.hisab.co
www.travelli.nz
meterful.com
fbase.oranyelab.com
hookbook.app
myaa.app
new.plazaalempizza.com.ar
s.vpsny.homeworld.life
offshore-fool.com
sspuat.console.aigens.com
offshore-fool.com
test.obandln.app
bogotatimbafest.co
www.offshore-fool.com
test-admin.offshore-fool.com
api.offshore-fool.com
test-admin.offshore-fool.com
localofx.com
gofittraining.com
www.rivercloser.com
baraky.com.br
www.day-one.app
corpogram.pl
offshore-fool.com
pubg.codehox.com
franck.offshore-fool.com
prepaidplus.co.bw
av-painting.com
shuler.dev
ai-sense-data.signage.ninja
new.plazaalempizza.com.ar
epco.console.poc.aicc.abeja.io
offshore-fool.com
table9.restaurant
dp-rem-bud.ga
www.wowtroll.com
test.cocoon.com
app.thinka.hk
studio-scout.co.uk
hangkati.com
humbertofalcao.nerit.app
itqan.app
padronering.com
localnative.app
functions.webcat.app
mail.eeshaggarwal.com
ffbizs.com
staging-secure.honeycombinsurance.com
jdconsignados.tk
www.legevakten.net
tomas.do
fostergrad.com
table9.restaurant
www.atpace.co
app.dezatike.com
beta.releaseit.app
localnative.app
www.devnow.vn
mail.eeshaggarwal.com
www.politichart.uk
geonit.ca
painel.soulsapp.com.br
test.wibib.com
admin.offshore-fool.com
dp-rem-bud.ga
mail.eeshaggarwal.com
www.oversight.ai
insiderjoe.com
rcbeta.wave9.co
www.politichart.uk
www.cartsbuddy.com
vivalaorquesta.de
heihei-applications.com
mail.eeshaggarwal.com
mail.eeshaggarwal.com
yemenschools.app
teachersnow.com.br
www.travelli.nz
www.kerjasama.com
conmunis.net
bluecrowconsulting.com.au
mail.eeshaggarwal.com
insiderjoe.com
tutor.tutorassist.in
Certificate
The complete raw certificate details for api.offshore-fool.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIExDCCA6ygAwIBAgIQAeTTxcQ5+MTXVrLz/hVTBzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODA1MjQwMDAwMDBaFw0xODA2MjMxMjAwMDBaMCAxHjAcBgNVBAMTFWFwaS5v ZmZzaG9yZS1mb29sLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALUxnKBhPIpvxC3g34csueEjJFd59p1wwdMgis0fi2fIKbBNTjx3ctE/0wwy24aA UvZ2PkM7F9RhUBJpHWpU1KAH0vTlL6Gw+NU9w0jF8L6ctoOV6i0kU4VSjeYDNMs1 x0t5jgH/Vy00dXCviFlMNet0vkll+9M3VNtaBKiR9xttGoLqBGu0rvzakftFTqyQ KLI2Ils/4NZg7I5O6gwKle0IMdX20gW3FKVxFF+cy8ilsUIBIx/LS1I34SjWHKPa E5h6tUGdWBrU1bTjQ+V1D66T6aB1fq/rrjxOHmcZVIGaxTd58EOISeTjTnh/YjCA GQ7Rs2Bt6vAM6f7ZHvS7PC0CAwEAAaOCAbowggG2MB8GA1UdIwQYMBaAFJBY/7Cc dahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBQ/Uco7cbEvlwKyvwDArg0PDaxiLjAg BgNVHREEGTAXghVhcGkub2Zmc2hvcmUtZm9vbC5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAv hi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmww TAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93 d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYG CCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcw AoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4 LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8dagFNxLA/jT4UxJZTTmqOnm9MhvNl2I3b5VtlFG2/yFCI720ohOp 7O869NYNk20dxz37fq29Bw1VUlL50mmAhP6PwQN4PLI8Mxyyz9HW2SE06fjph8ET WcYeBVYL8vqz+diRYk0ug+bTvnN6nE8RxBZGAl8kqrcjV3X2QTaBEERZRfghBHhU pVTiipdTqwo97bzppww/fdilKHsYLdi+88K0e8pHWqXns1G8fFTrOfzq2spMcIXQ JSEeVryhYjGQdNqmccFH4KYxpb7OKrQ1hYRb5c58QZXbNQ57AFL/25ZeujHQfQBT NgfFDW9eMM70845XBDg6o3EO3J087MI8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTGcoGE8im/ELeDfhyy5 4SMkV3n2nXDB0yCKzR+LZ8gpsE1OPHdy0T/TDDLbhoBS9nY+QzsX1GFQEmkdalTU oAfS9OUvobD41T3DSMXwvpy2g5XqLSRThVKN5gM0yzXHS3mOAf9XLTR1cK+IWUw1 63S+SWX70zdU21oEqJH3G20aguoEa7Su/NqR+0VOrJAosjYiWz/g1mDsjk7qDAqV 7Qgx1fbSBbcUpXEUX5zLyKWxQgEjH8tLUjfhKNYco9oTmHq1QZ1YGtTVtOND5XUP rpPpoHV+r+uuPE4eZxlUgZrFN3nwQ4hJ5ONOeH9iMIAZDtGzYG3q8Azp/tke9Ls8 LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2517366936634387859410762800783774471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-23 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.offshore-fool.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22873597700188866433569488382320492692480417059664112241348673913524239387573123876488859920509129374674589493575156821130597927545096263901032851800784639691803141312914443525423650502034204667572698398420635201107416360843428695210369980745507849832093327361077473173571557344818830356514940043828887101977955459280269348265329142655930878696049938080593647450970740527112336454152329466900013997888062370872261672784567586573515937600370970129813882910674029303510403332010373748558453321656034434414405646217876842887707277585550899335563150476028789908033325389580606808855383303533949335048603483862215031471149 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3f51ca3b71b12f9702b2bf00c0ae0d0f0dac622e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.offshore-fool.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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