*.pensplan.com
- PENSPLAN CENTRUM S.P.A. -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 03:f1:bb:50:a2:cb:2c:cb:b0:9c:04:0d:82:95:5a:bb was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
PENSPLAN CENTRUM S.P.A.
Organization:
PENSPLAN CENTRUM S.P.A.
State / Province:
Trentino-Alto Adige
Locality: BOLZANO
Country: IT
Locality: BOLZANO
Country: IT
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:f1:bb:50:a2:cb:2c:cb:b0:9c:04:0d:82:95:5a:bbSerial Number (int): 5242826729492720154683571602111945403
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 06:d6:5e:41:6c:ab:7b:f6:2a:c6:74:0e:30:c2:52:79:d0:8d:4c:3a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): db:18:cf:4d:34:a1:c3:07:2f:bd:48:04:bf:b6:07:93:97:a3:2b:de
Fingerprint (sha256): 60:8b:16:ff:19:9f:c6:94:c4:1e:82:a3:33:71:87:dd:68:d8:26:42:b6:4c:e3:08:49:1c:5e:f3:42:39:1b:b2
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.pensplan.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.pensplan.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.pensplan.com
pensplan.com
pensplan.com
Other certificates including the domain name pensplan.com
(limited to 100 certificates)
segnalazioni.pensplan.com
whistleblowing.mairetecnimont.com
segnalazioni.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
academy.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
*.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
www.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.mairetecnimont.com
borgwarnerbrossysystemitaly.wbisweb.it
crm.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
*.pensplan.com
segnalazioni.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.mairetecnimont.com
segnalazioni.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
academy.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
*.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
www.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.mairetecnimont.com
borgwarnerbrossysystemitaly.wbisweb.it
crm.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
*.pensplan.com
segnalazioni.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
Certificate
The complete raw certificate details for *.pensplan.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgIQA/G7UKLLLMuwnAQNgpVauzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMzA5MjUwMDAwMDBaFw0yNDEwMDEyMzU5NTlaMHgxCzAJBgNVBAYTAklUMRww GgYDVQQIExNUcmVudGluby1BbHRvIEFkaWdlMRAwDgYDVQQHEwdCT0xaQU5PMSAw HgYDVQQKExdQRU5TUExBTiBDRU5UUlVNIFMuUC5BLjEXMBUGA1UEAwwOKi5wZW5z cGxhbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBRQzPKZb BvBPOOW70nr5U8CAA8iNQsu0nIio8BMt/IlMQOMtdTC8vIumdz/Oc3po6ovcf5Kp C/N5fVgTOG4j/DuBR4AXj5iko5lXgZ2pNgsfJncj4lblhMbjkD3abNfV/VXNJev2 ByxNFuzAmE7g6wEa5MKpZ99YgAvBQwHcAky4OQDUIvi6WLSYELTF32Bu4yEj4VIw Awm3HH6GOMWfzaaj/wELmteKscHol8sa7dHrGP+IcfpjYJR/Oe/qRd+5iiuPmQf8 sVFFXUAocWwhGHPdOFjF4qMiPR5RT5+TtpNxbspn1PcirKQsNJUt8UCAhHCYRq5s pcqyaNOXcbvxAgMBAAGjggMkMIIDIDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3y o0MWOJ5sxTAdBgNVHQ4EFgQUBtZeQWyre/YqxnQOMMJSedCNTDowJwYDVR0RBCAw HoIOKi5wZW5zcGxhbi5jb22CDHBlbnNwbGFuLmNvbTA+BgNVHSAENzA1MDMGBmeB DAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+ BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVz dFJTQUNBMjAxOC5jcmwwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRw Oi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2Vy dHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAMBgNVHRMBAf8E AjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYrMaRIxAAAEAwBHMEUCIFo19SIvXTosQAp7Sg7h ADDq+XjOM3zlXdqHqjV+UoLvAiEAuyCb988AZEKuZ+ENrOGZ91p/KTYcZsehLrYU CN4SAmgAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYrMaRJ6 AAAEAwBHMEUCIQDyi2E41p/rL7XZZ5u4dW+EdhqIQs2Dfy1Pz5vBPr27SQIgHuXe BaM3DI0diVhrixhN2pyQ75eE2LXob9or14Xoh0YAdwDatr9rP7W2Ip+bwrtca+hw kXFsu1GEhTS9pD0wSNf7qwAAAYrMaRKNAAAEAwBIMEYCIQDs2z8q/keySEoGmMDm sJ29ooMdWPqVWVL67jCdrY/ouwIhAM8ranYXvQ7hiIRlGNN57E4/mYtWhXZg3Jzo ixK7mMWJMA0GCSqGSIb3DQEBCwUAA4IBAQCEwQgwQSPKFM/YSGncPtn6bt+Jsi6M FstV0MqYKBSc8mSwXLKt7xQyXEIrp0p60GJ3x5ay5BG6w2H+fLI+3msUoiW4UaMl zBr88Tv1SarUsXs7mWMRgflanTHv1TTnAeLubzg9xDfwJfvkY8BoQ/9WAbQw0eQK dQ097gFqKuJQ7nrwUDHywSxUJPbdv7NtJBvLfyWmHLw7Ug00P8NIt+zfjuJ/94JO CQZIcIjxzh3EQAR33J2/6d+EH0vDhzb4/Ajz0S9q9Uo3TvLoFamvHE1EKiyQ7Sg6 /aq2R9ZTxTMtl3/De0LPl4bbiO6OoYnkJnj+WhkeXx/tesqRxmZvNjUl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUUMzymWwbwTzjlu9J6 +VPAgAPIjULLtJyIqPATLfyJTEDjLXUwvLyLpnc/znN6aOqL3H+SqQvzeX1YEzhu I/w7gUeAF4+YpKOZV4GdqTYLHyZ3I+JW5YTG45A92mzX1f1VzSXr9gcsTRbswJhO 4OsBGuTCqWffWIALwUMB3AJMuDkA1CL4uli0mBC0xd9gbuMhI+FSMAMJtxx+hjjF n82mo/8BC5rXirHB6JfLGu3R6xj/iHH6Y2CUfznv6kXfuYorj5kH/LFRRV1AKHFs IRhz3ThYxeKjIj0eUU+fk7aTcW7KZ9T3IqykLDSVLfFAgIRwmEaubKXKsmjTl3G7 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5242826729492720154683571602111945403 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trentino-Alto Adige' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOLZANO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PENSPLAN CENTRUM S.P.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pensplan.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22346684481286070260785034765057332833518706493375679031973117661007196796562673714618587295448953083653140737158571818014168580109197064798144289563248626325012824501218061531719801520240502619495303424923249179530650882533495231378981710264490122083618387130663881435344043381616719621918025672756385112011402983358839021648646144846144684949602384848046381580954342172038963307806287014565496055689726801595467129584679414502158079012653083038657660647718177531376535818314756357534000843095614563658791061073818583873058738272039589025050848267290952852846405982999653160286361288331901086358531313747398306675697 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06d65e416cab7bf62ac6740e30c25279d08d4c3a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensplan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensplan.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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