*.cue-monitor.jp

- INTAGE Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:e4:a9:65:b1:40:f0:ea:b4:c9:ce:17:70:3f:6a:c9 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INTAGE Inc.

Organization: INTAGE Inc.
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e4:a9:65:b1:40:f0:ea:b4:c9:ce:17:70:3f:6a:c9
Serial Number (int): 6504191451010390952274510829152332489
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: df:ad:2c:74:ce:03:ba:a9:8e:90:d4:d3:90:52:67:aa:79:35:71:33
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 70:10:6c:95:78:9f:a3:ef:24:99:07:a3:d3:98:88:c6:5e:58:d5:4b
Fingerprint (sha256): 62:eb:c5:21:4a:81:06:54:74:4a:f9:38:59:f4:8f:b8:1a:e0:52:39:61:09:c2:c3:99:10:9a:06:bb:e4:a6:15

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.cue-monitor.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cue-monitor.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cue-monitor.jp
cue-monitor.jp

Other certificates including the domain name cue-monitor.jp

(limited to 100 certificates)
mb.cue-monitor.jp
mypage.cue-monitor.jp
www.cue-monitor.jp
st-eq.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
sv.cue-monitor.jp
*.cue-monitor.jp
sv.cue-monitor.jp
nr.cue-monitor.jp
www.cue-monitor.jp
*.cue-monitor.jp
m.cue-monitor.jp
sv.cue-monitor.jp
st-eq.cue-monitor.jp
*.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
nr.cue-monitor.jp
nr.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
api.cue-monitor.jp
eq.cue-monitor.jp
www.cue-monitor.jp
cuemot.cue-monitor.jp
ecsurvey.cue-monitor.jp
enq-mps.cue-monitor.jp
enq.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
*.cue-monitor.jp
eq.cue-monitor.jp
st-sv.cue-monitor.jp
www.cue-monitor.jp
enq-mps-st.cue-monitor.jp
mypage.cue-monitor.jp
api.cue-monitor.jp
mb.cue-monitor.jp
cuemot.cue-monitor.jp
cuemot.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
mypage.cue-monitor.jp
cauth.cue-monitor.jp
nr.cue-monitor.jp
sv.cue-monitor.jp
eq.cue-monitor.jp
myreco-webservice.cue-monitor.jp
st-eq.cue-monitor.jp
cuemot.cue-monitor.jp
*.cue-monitor.jp
st-eq.cue-monitor.jp
cuemot.cue-monitor.jp
nr.cue-monitor.jp

Certificate

The complete raw certificate details for *.cue-monitor.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgIQBOSpZbFA8Oq0yc4XcD9qyTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMzA1MTcwMDAwMDBaFw0yNDA1MTYyMzU5NTlaMGMxCzAJBgNVBAYTAkpQMQ4w
DAYDVQQIEwVUb2t5bzETMBEGA1UEBxMKQ2hpeW9kYS1rdTEUMBIGA1UEChMLSU5U
QUdFIEluYy4xGTAXBgNVBAMMECouY3VlLW1vbml0b3IuanAwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDcKjoMRBaID596Zgm3nl1CaID+CBJH6SJMXirq
6WXXzgVM4LHFiOh3MGxlUsL/z/NthP6nxLT+S/C5CQKKxVAhTa3UUEJXRuQ/fNqf
+M2Dy2NiqM00phyT8lhEhH1QyF+LKTxA6ltxaNCf7AVIL2qujV15UndIQkSZCNAA
SwbGKL5cEbGkH4DsJ4O+T6mUUzddl+g9J6b18MEgHt1dQokAGqCfvi1E1r+J22sN
CPwm6gg4ehYI8Zj3j1kB/l2sxr/E484saONs3ozggxk/p72G1blNSLnh6jy897l5
SRKenxKBT0DfDiCubSN2zk+ZNipFv8Pcebl2hi65pPsd0dFjAgMBAAGjggMkMIID
IDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU360s
dM4DuqmOkNTTkFJnqnk1cTMwKwYDVR0RBCQwIoIQKi5jdWUtbW9uaXRvci5qcIIO
Y3VlLW1vbml0b3IuanAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3Ry
dXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwB
AgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUG
CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz
dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIE
ggFuBIIBagFoAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGI
KQ2lgQAABAMARzBFAiEArCMIUNBktHd/SQAhdI2X+T5YEkcncE81mgLrjZG8fJMC
IAaAsVPUdedzIPf39H6G6kvayeLdqAHEr7hk4nfz2s3gAHcASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGIKQ2lVwAABAMASDBGAiEAyFeGn4zDLi6u
O/Zy6eK80DKaBU5t4YOCS2bA3gLL1K0CIQDl6wjMIwjz/qmuKwQY2HOLTc9Yc0Yw
5RV/5bZB3haN3AB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB
iCkNpVgAAAQDAEYwRAIgfQt0tonioczjcNHu1SZidNR11Pag2U0LPvAI5W5IYUUC
IFmiPXOyDJJzZHWQSg6bg6lEGhDZ1KmWZViLq8ieKLtfMA0GCSqGSIb3DQEBCwUA
A4IBAQBnGhC23IUS1usKgfjwxwvsd38kcDnk86gdRXH+NBeP9Hvy5nvhH67qGSoB
S2nQU5CoxBLScSsJuj6u2NyOinhT8sLRLy3OOuykpbOuqx+rsXQQd3VjHCyG8cFz
medvZ8hs1AinB3WGMkyg44Kd4SU5pttpYJdXDfjq3hNjDeL2NAO3Xdvx8+vIokPO
n+CxW3TY1MImsue20vvStcmUZq5vOvYJ8okaVexGJ6lus8Kle06wzXt5dZOozz63
v831Pc+4nmZcGecAmZpPOjAQNyHmGRNYQXqZw1xBADXkzwQbsCqfLsQtQhHAr6eu
NVBbmR/0oPDGs+Vwxdu61IEX6lbt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Co6DEQWiA+femYJt55d
QmiA/ggSR+kiTF4q6ull184FTOCxxYjodzBsZVLC/8/zbYT+p8S0/kvwuQkCisVQ
IU2t1FBCV0bkP3zan/jNg8tjYqjNNKYck/JYRIR9UMhfiyk8QOpbcWjQn+wFSC9q
ro1deVJ3SEJEmQjQAEsGxii+XBGxpB+A7CeDvk+plFM3XZfoPSem9fDBIB7dXUKJ
ABqgn74tRNa/idtrDQj8JuoIOHoWCPGY949ZAf5drMa/xOPOLGjjbN6M4IMZP6e9
htW5TUi54eo8vPe5eUkSnp8SgU9A3w4grm0jds5PmTYqRb/D3Hm5doYuuaT7HdHR
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6504191451010390952274510829152332489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INTAGE Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cue-monitor.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27793249878868006518851096127415689841244716362025095682187541640896965203729637712667769656692055568181152061824828963256244226282151784619059954232231730082458037774079476447126417495335542566496581310809581715111480273429429086931996101991759808979668438784503670699492801562656499972902978251602666125188141699986955250173510485309063032820955163030550221246012049875533869413949298060385902382324320111999386657145253603232897080212881731574566558729617067176879886060304718264637595024415352053154529562613155590595700528790832945942443120231511187156066247231960765169427714014344055336287078154363728978628963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfad2c74ce03baa98e90d4d3905267aa79357133
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cue-monitor.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue-monitor.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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