ionos.eu

- IONOS SE -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:84:b4:ef:dc:64:6e:da:41:76:b0:42:88:05:af:3e was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IONOS SE

Organization: IONOS SE
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:84:b4:ef:dc:64:6e:da:41:76:b0:42:88:05:af:3e
Serial Number (int): 17969016967998120033646365887428931390
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d9:38:2b:43:cd:a6:6f:14:60:57:44:9d:38:d6:fb:4c:ec:86:78:47
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 17:5b:1e:6d:a3:54:d0:93:b8:02:15:38:1a:22:2d:87:75:fe:bd:6c
Fingerprint (sha256): 5d:ae:f0:93:d9:29:a1:d2:09:39:55:31:26:5a:03:1b:68:06:16:8d:8b:b6:7c:3f:de:0f:6f:ce:e3:82:65:31

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate ionos.eu

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ionos.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ionos.eu
www.ionos.eu
ionos.be
www.ionos.be
ionos.dk
www.ionos.dk
ionos.nl
www.ionos.nl
ionos.se
www.ionos.se
ionos.pt
www.ionos.pt

Other certificates including the domain name ionos.eu

(limited to 100 certificates)
exchange2019.ionos.eu
ionos.eu
ionos.de
exchange2019.ionos.eu
xadmin.exchange.ionos.eu
ionos.de
1.exchange.1and1.eu
1.exchange.1and1.eu
xadmin.exchange.ionos.eu
xadmin.exchange.ionos.eu
1.exchange.1and1.eu
ionos.eu
1.exchange.1and1.eu
ionos.de
1.exchange.1and1.eu
exchange2019.ionos.eu
1.exchange.1and1.eu
smtp.ionos.de
ionos.de
exchange2019.ionos.eu
ionos.de
xadmin.exchange.ionos.eu
ionos.eu
1.exchange.1and1.eu
xadmin.exchange.ionos.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
ionos.de
xadmin.exchange2019.ionos.eu
Exchange.Ionos.eu
xadmin.exchange.ionos.eu
Exchange.Ionos.eu
ionos.de
xadmin.exchange.ionos.eu
Exchange2019.ionos.eu
xadmin.exchange.ionos.eu
xadmin.exchange.ionos.eu
ionos.de
xadmin.exchange2019.ionos.eu

Certificate

The complete raw certificate details for ionos.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH4jCCBsqgAwIBAgIQDYS079xkbtpBdrBCiAWvPjANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIzMDcyODAwMDAwMFoXDTI0MDgxNDIzNTk1OVowYTELMAkGA1UEBhMCREUx
GDAWBgNVBAgTD1JoZWlubGFuZC1QZmFsejESMBAGA1UEBxMJTW9udGFiYXVyMREw
DwYDVQQKEwhJT05PUyBTRTERMA8GA1UEAxMIaW9ub3MuZXUwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCMLquLT+BssCNtLilLFDJSaAGOREEO58YfGx7X
y/rvHipkoOkBGwBtqdZTkF6sSrTVOYKLN3dLcXxgH2ILmD1XZhfSYct1PxXy3mLG
9DBEnr9haVu5FuWNF+5Tt9vlWRp6nTNwK/rZA2CnV2lJMKLTte0qVn+tJ8poT/zh
J58H86IbHR7kJriJ47IXPPGQfTvRp7bRBSiZJDGohMfuYr5V4Ej9nVkwHjNJx9we
3dDX/QT54er86zmNgZ50yA1SnTyQHyTzoEVvJzdsYflEefWHyunNd05pqa+TeQVK
FCcEMqIUa6vh+LuNHEnytS5HItHffvsBHmxeUOL8VjSmB/bqMLcf2uwPS/6fIRU6
Jz6G3eyaET9mH0cIqggz/D9l6ldNxOgh6l+o0/63mO4GvDJ/Yf3KY9x9dK0UyFct
yvSp/3Dgn9tTlbD5jpUYDsKCchaHqp02te68rcNE3pI/R6pRPAbxWi4W663hDvsT
fYcsYWsf9LgggNGbEnc/EOOlV9gusOqmxfozat9hzNGKod9PSUI+2Kaztewgi8kF
Gik5wn94i6DEteRkWFoYYNmXOPS/LzjRZLN4YF/LPvwXgY81U7l98hxUmNqn4Ki+
OQ5etidk/jxOmR8hBlNm+znkQcUhggYa1DxNArNpqnNPs3+JrHxu697mwCt7QK65
ww2vHwIDAQABo4IDlTCCA5EwHwYDVR0jBBgwFoAUlE/UXYvkpOKmgP792PkA76O+
AlcwHQYDVR0OBBYEFNk4K0PNpm8UYFdEnTjW+0zshnhHMIGbBgNVHREEgZMwgZCC
CGlvbm9zLmV1ggx3d3cuaW9ub3MuZXWCCGlvbm9zLmJlggx3d3cuaW9ub3MuYmWC
CGlvbm9zLmRrggx3d3cuaW9ub3MuZGuCCGlvbm9zLm5sggx3d3cuaW9ub3MubmyC
CGlvbm9zLnNlggx3d3cuaW9ub3Muc2WCCGlvbm9zLnB0ggx3d3cuaW9ub3MucHQw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/
BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVz
dFRMU1JTQUNBRzEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUH
AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB2BggrBgEFBQcBAQRqMGgw
JgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD4GCCsGAQUF
BzAChjJodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FD
QUcxLmNydDAJBgNVHRMEAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYmbuRsBAAAEAwBGMEQC
IDf422zQfY86BdQLuPSbWwEbJjAX8IbtkHmRi4ofXERDAiBuzJ8Bo5iyiR64IXlg
Y6igOl0jBJRRfBwLCWN9pw22GAB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABiZu5GxMAAAQDAEYwRAIgLnWMZuRSip5KYO3PsJnLRojeGbdv2uD4
yiZRStqW98sCIBCky7HzWM3Bt2zYvsmbB6urOgmHLvyqOPkjjYbakMWSAHYA2ra/
az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJm7ka5gAABAMARzBFAiBc
3FvsUhlRtkzQWcNzEpqj7GcRfdATDFj7uvtJUWWaFwIhAITcVeymKdW9X1pigV+S
kb5sSk9bGyKWPGZPRzw+QpksMA0GCSqGSIb3DQEBCwUAA4IBAQBCgtR6Rw6UcdJ0
QM6nEnwoAMhnaTRI+xn4LHWSndbQpE213pWhlNKlIpxleI79r/dxHQYm/3DNHDeb
JqHp2ahxdGcdhT0/AtyjLUP6jjE+36mn3NK0WeVQNg7XK/FBZmCDD+hOXIXVZ6gs
DMBx6/TtjJ6caK2eBIeKx4IigKYZABuiL59z6+BEHweQdmGO4aBXM3wKaVGzLU4m
NnBOPXJn7LqcwQqZs1UWWKFLdutGGVMlA3n5/EAwQjlN1lDlsqOR/dm9XkYEL1vZ
k9USA7wJbFrcAHvRrIBJf4ztrVotm/R52Icji+MynZ9fklCCLulEH0saPT78MtL4
N6D1wnTL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17969016967998120033646365887428931390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ionos.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 571893909265436074110908473484857474778770931989194799332762370963339373874715397071117812295115646905764279812653682752790738305403737626072476651335229228294192841004718216416105320299907883318493114253180383188296442165418799279123456497602035922164806176614507241135576036896162361457671191912012675318294068189074251243513561959630577445006062420070401467100491619260638934311095044941244906288229370918093125754255062336052929950002867806613613891608813901769536317149600857843412215801814164207001026506538559491871674735213977548552342147598575319622513504260582745508826133098501647727234946939470257248888735563000039914470687968723551347049143520473897239047254871445496308018103556848344542058534596805248199739201360584645429580429155690885747520677509320333595627637990092779340164665330432315265972083233164427932775763574359530629945537596106940421198437570760887892647524074245432824566881944282916809741472146506248799567172084585119590626151148598967103511413930874389341832451312921740325048544842651253445856505620633888254954171306877761574101813788078525121530799063812545250905848503138233565296913915940649403446870649006042606514358525768116383416639505616996081065646682791599086478347179194258538925764383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9382b43cda66f146057449d38d6fb4cec867847
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionos.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionos.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionos.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionos.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionos.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionos.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionos.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionos.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionos.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionos.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001899bb91b010000040300463044022037f8db6cd07d8f3a05d40bb8f49b5b011b263017f086ed9079918b8a1f5c444302206ecc9f01a398b2891eb821796063a8a03a5d230494517c1c0b09637da70db61800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001899bb91b13000004030046304402202e758c66e4528a9e4a60edcfb099cb4688de19b76fdae0f8ca26514ada96f7cb022010a4cbb1f358cdc1b76cd8bec99b07abab3a09872efcaa38f9238d86da90c592007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001899bb91ae6000004030047304502205cdc5bec521951b64cd059c373129aa3ec67117dd0130c58fbbafb4951659a1702210084dc55eca629d5bd5f5a62815f9291be6c4a4f5b1b22963c664f473c3e42992c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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