edge1.townebank.net
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 06:e1:f0:67:a4:7d:f8:0f:50:4a:fb:f3:26:81:ce:15 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=edge1.townebank.net
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:e1:f0:67:a4:7d:f8:0f:50:4a:fb:f3:26:81:ce:15Serial Number (int): 9148510757593275591497769899503242773
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: c4:6d:2b:ec:c9:19:c2:ad:ea:b4:c7:bf:90:cf:90:bc:4a:56:5c:3a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 26:b6:ce:08:70:c1:14:30:e8:12:c5:5f:04:db:89:76:76:2d:6d:7b
Fingerprint (sha256): 5b:6a:9c:3b:91:7c:75:95:73:5d:a6:a4:ef:19:d3:0d:8f:43:44:8f:45:f2:0c:e3:0a:71:18:a4:cf:82:25:19
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate edge1.townebank.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for edge1.townebank.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
edge1.townebank.net
tow5969ewe1p01den.townebank.net
tow5969ewe1p01den.townebank.net
Other certificates including the domain name townebank.net
(limited to 100 certificates)
edge1.townebank.net
mfa.townebank.net
mvproxy.townebank.net
mfa.townebank.net
appian.townebank.net
adfs.townebank.net
tbentspsolutions.townebank.net
adfs.townebank.net
tbshare.townebank.net
entise01.townebank.net
fisopendcitest.townebank.net
mfa.townebank.net
a.townebank.net
edge4.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
tbshare.townebank.net
edge1.townebank.net
edge4.townebank.net
rcvpn.townebank.net
bnkvproxy.townebank.net
mfa.townebank.net
appian2.townebank.net
appian.townebank.net
rcvpn.townebank.net
edge4.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
appian.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
appian.townebank.net
mvproxy.townebank.net
edge1.townebank.net
fisopendci.townebank.net
appian.townebank.net
mfa.townebank.net
tbentspsolutions.townebank.net
mfa.townebank.net
adfs.townebank.net
scanner.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
adfs.townebank.net
adfs.townebank.net
mfa.townebank.net
mvproxy.townebank.net
mfa.townebank.net
appian.townebank.net
adfs.townebank.net
tbentspsolutions.townebank.net
adfs.townebank.net
tbshare.townebank.net
entise01.townebank.net
fisopendcitest.townebank.net
mfa.townebank.net
a.townebank.net
edge4.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
tbshare.townebank.net
edge1.townebank.net
edge4.townebank.net
rcvpn.townebank.net
bnkvproxy.townebank.net
mfa.townebank.net
appian2.townebank.net
appian.townebank.net
rcvpn.townebank.net
edge4.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
appian.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
appian.townebank.net
mvproxy.townebank.net
edge1.townebank.net
fisopendci.townebank.net
appian.townebank.net
mfa.townebank.net
tbentspsolutions.townebank.net
mfa.townebank.net
adfs.townebank.net
scanner.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
adfs.townebank.net
adfs.townebank.net
Certificate
The complete raw certificate details for edge1.townebank.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIQBuHwZ6R9+A9QSvvzJoHOFTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA0MDEwMDAwMDBaFw0yMTAzMzExMjAwMDBaMB4xHDAaBgNVBAMTE2VkZ2Ux LnRvd25lYmFuay5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDg /LSoz0tG30Q2HoJuDQBPQ2uywx7i6OvufWKEodwaMd8u+EqG79/KFdJlyBTxl92p zNKBftP3l3NuoCkH8Lujnzdigf6Tr1QMyaYtJRI6UljbBVHsPCkJDtUGj1kGidwU CSTO+J+9pNP6tT24erGgqZT5Sv4zCg8nEOpAYAvWPobMEPdRCzFLcNyDf0biHG3e FDcmHyykL1IkyAmvc3zcdZPPc0/acBtj4p1KZU7GEj6U96qQmbpcK7oKCD64sXOM NDmeXNWp9Rm3X3PpaVIj8tBb23DRIgGAb5zoFfOpv1+JRAAumEHkGAv92SPt8UlF q5TMzMcXSUYeVDPWg4nmS5w4bXPEXWJmFnu7kDMqLNJWb5NrxOf4NwkJfCvFeYQo JNNt0zu/EHBcOJjG15frmrUk2/1D0uaqKnrgK/T4rWNh0QBedhg5qcnSRD3IIKqT TjCFQzfO5btgKDU9WQ4vQqsvIoJAL4HqalDPAtz2W0aFims5juRGe1AHk9fSNHE+ Z0vt3HxfjNVutUmY7WqoWj+VKdcOt5VJdXw7ArO1sfD3PU6mO5Upd9D+vOCxihsU 9fioHSMsbYB/3lGdvkx+AhwDWcwDSoQeIs6ogODW+YDt9BB5M0vfD7RtVZAPzui3 0XJbLS496zz4RF91UWcehVQyyru3XiWoxGre24A+pQIDAQABo4IB2TCCAdUwHwYD VR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYEFMRtK+zJGcKt 6rTHv5DPkLxKVlw6MD8GA1UdEQQ4MDaCE2VkZ2UxLnRvd25lYmFuay5uZXSCH3Rv dzU5Njlld2UxcDAxZGVuLnRvd25lYmFuay5uZXQwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1o dHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYD VR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsG AQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYx aHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNy dDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQB0h9rK0wTIVHPJJlm5nqRvStg4JT5XlCMp+wB3kG87VMM/b7XukZDrL4TT /uSiJhmQWU5Rcz1hFB/SdCcxhr9Q4H8ZC3muyy+ymKqytxNGbu9iIvri6LgftBCp I45DhYp+X1Nwu4yGoQ7L/pPrKSTFBxMi52WwgjroImhuMd2AUlkmc8xXFkjRp2em C/K07NZjaP2Rkn2pMt9bCrCVFAGpLBVw+vZ0t444oetnKdeodiiS4d0BXbmzg9K4 rxDrXWWsRDOxTmxhGqixvag7iQ20/QTsAU1hziIomWGMR8UK8AzrT1hDmpUj5xra ynUL0DC0QxABv7iw8pkPM+t+xkuc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4Py0qM9LRt9ENh6Cbg0A T0NrssMe4ujr7n1ihKHcGjHfLvhKhu/fyhXSZcgU8ZfdqczSgX7T95dzbqApB/C7 o583YoH+k69UDMmmLSUSOlJY2wVR7DwpCQ7VBo9ZBoncFAkkzvifvaTT+rU9uHqx oKmU+Ur+MwoPJxDqQGAL1j6GzBD3UQsxS3Dcg39G4hxt3hQ3Jh8spC9SJMgJr3N8 3HWTz3NP2nAbY+KdSmVOxhI+lPeqkJm6XCu6Cgg+uLFzjDQ5nlzVqfUZt19z6WlS I/LQW9tw0SIBgG+c6BXzqb9fiUQALphB5BgL/dkj7fFJRauUzMzHF0lGHlQz1oOJ 5kucOG1zxF1iZhZ7u5AzKizSVm+Ta8Tn+DcJCXwrxXmEKCTTbdM7vxBwXDiYxteX 65q1JNv9Q9Lmqip64Cv0+K1jYdEAXnYYOanJ0kQ9yCCqk04whUM3zuW7YCg1PVkO L0KrLyKCQC+B6mpQzwLc9ltGhYprOY7kRntQB5PX0jRxPmdL7dx8X4zVbrVJmO1q qFo/lSnXDreVSXV8OwKztbHw9z1OpjuVKXfQ/rzgsYobFPX4qB0jLG2Af95Rnb5M fgIcA1nMA0qEHiLOqIDg1vmA7fQQeTNL3w+0bVWQD87ot9FyWy0uPes8+ERfdVFn HoVUMsq7t14lqMRq3tuAPqUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9148510757593275591497769899503242773 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge1.townebank.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917867416991802039191798673719743942068161670859477822414133731741243640558854646561099823453719298480910510784099339813395095824380450351478735659173832418096433289661548461509455409743510696486109478888898207497101793771740218075363260256133731076257316942309379167662221982955465520129180396752366857205430765693213740307253393656651643926287452625518675087442131943369610202855483177630157902080714423011695220617776691910662347055198129646188972434179214207155652344552719557160493235976349750016282270561283171956403527613560219428687262463556052685343627568521235971176737365535108734938139882319488570587213657803509716792586877868654551680833264165326788479063665141876733475294449585358040816285835668599287684733457685315338438811886453092381055880327628112229271722800338432946731912478560989094750509344063187543369122617738482332187424295302828378500594600778222451976799677902531433561044807295772497894678070558478159783123330515995091129493608237449789556776824627930616286998594888441586949261941574397073954144114986813997437303163851766091647190226347287252159631674952569531015385320561404405868178074428188203397065700203385217305373588105355410262572998813764657523320182908323377260439307476196715655447199397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c46d2becc919c2adeab4c7bf90cf90bc4a565c3a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge1.townebank.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tow5969ewe1p01den.townebank.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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