ad.designweek.co.uk

- Centaur Communications Ltd -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 05:8b:42:cc:13:7a:2f:8b:a6:77:80:b6:74:14:62:a5 was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centaur Communications Ltd

Company registration number: 01595235
Organization: Centaur Communications Ltd
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:8b:42:cc:13:7a:2f:8b:a6:77:80:b6:74:14:62:a5
Serial Number (int): 7369224049867842988973483730396275365
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fe:42:17:35:46:09:a2:2e:74:c3:f3:71:32:02:1c:8b:41:77:80:b1
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 7e:99:75:54:0e:e1:0e:ba:33:19:70:71:bb:21:21:72:9b:43:1d:10
Fingerprint (sha256): 5c:ff:a4:a9:15:bf:17:6d:e4:7a:0a:b0:6d:ec:b9:e1:d0:2a:c3:bc:c0:cb:5e:cb:e0:ea:01:cb:95:f0:89:f3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate ad.designweek.co.uk

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ad.designweek.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ad.designweek.co.uk
ad.marketingweek.com
secure.thelawyermarketintelligence.com
ad.mortgagestrategy.co.uk
prefs.centaur.co.uk
ad.moneymarketing.co.uk
ad.thelawyer.com
account.tpg.centaurmedia.com
account.fashionmonitor.com
account.celebrityintelligence.com
account.platforum.co.uk
account.yearahead.com
ad.theengineer.co.uk
ad.employeebenefits.co.uk
account.creativereview.co.uk
account.foresightnews.com
account.econsultancy.com

Other certificates including the domain name designweek.co.uk

(limited to 100 certificates)
ad.designweek.co.uk
*.jobs.designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
jobs.designweek.co.uk
www.marketingweek.com
academyclass.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
*.jobs.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
jobs.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
jobs.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
www.centaur.co.uk
centaurmedia.com
www.centaur.co.uk
econsultancy.com
designweek.co.uk
www.centaur.co.uk
academyclass.designweek.co.uk
awards.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
*.designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
www.centaur.co.uk
*.designweek.co.uk
academyclass.designweek.co.uk
www.centaur.co.uk
academyclass.designweek.co.uk
myaccount.designweek.co.uk
jobs.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
www.centaur.co.uk
awards.designweek.co.uk
www.centaur.co.uk
www.designweek.co.uk
*.designweek.co.uk
ad.designweek.co.uk
www.marketingweek.com
academyclass.designweek.co.uk
designweek.co.uk
www.centaur.co.uk
www.marketingweek.com
designweek.co.uk
ad.designweek.co.uk
jobs.designweek.co.uk
centaurmedia.com
ad.designweek.co.uk
www.centaur.co.uk
jobs.designweek.co.uk
jobs.designweek.co.uk
ad.designweek.co.uk
*.designweek.co.uk
*.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
designweek.co.uk
www.centaur.co.uk
ad.designweek.co.uk
academyclass.designweek.co.uk
ad.designweek.co.uk
www.centaur.co.uk
academyclass.designweek.co.uk
academyclass.designweek.co.uk
designweek.co.uk
ad.designweek.co.uk
designweek.co.uk
econsultancy.com

Certificate

The complete raw certificate details for ad.designweek.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEQvH8ygTnajcFFCcSI7
HB8ry43lYZT9OP34WENtgmS95TEMbTX7X1dfNj+Hhf54FqGrXEvXROZOS638I1Kn
6RLSiXsylflB++eIoKPbrg0XKS+mDuKKmvMGvRvB0DNQzM1Nzx8HNoQoxn66MKLe
fO35dFaJCQrm/jx2mqw4UV+T8mX9PDwTteZnBsuzKnWp40UM2PVJ9B+ruhUtrb1N
mdfdUfBxFyFFOu7BHHCFFVpIltLuF6HcBDXwWZbUJQTAcI6lLVHkaEFTcgRpNHpn
E/io0B8UIstk7Euf1oRdWxq8gYFOlAEKl365tyko1j/At+CWJPUtFpNZB7CG5z2m
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7369224049867842988973483730396275365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01595235'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centaur Communications Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ad.designweek.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17706985517727641502056671347012996240743292816991800506605793842009726176639733488921624291113949816191070751946233470841295695336256108979554682298151885363462033754100523392374508081000599546884130280400410411480952506677337746593949501843655983812616731233656313152301929825166743585874304773899912425913644738184536519002361149549504011348397829507652081079443555700958379268028334830851341502147410545957260811305087513364253432700758971289070811113384387191398486711301269104092516134082318980345481197085435868349097597224985807038778444927971641290168136211496362232698148427684263900126931992570911591868149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe4217354609a22e74c3f37132021c8b417780b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (451 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.designweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.marketingweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thelawyermarketintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.mortgagestrategy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefs.centaur.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.moneymarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.thelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.tpg.centaurmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.fashionmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.celebrityintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.platforum.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.yearahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.theengineer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.employeebenefits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.creativereview.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.foresightnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.econsultancy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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