*.regiscollege.edu
- Regis College -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 04:05:17:a0:0c:85:fb:e6:43:f8:eb:b8:7c:30:24:97 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Regis College
Organization:
Regis College
State / Province:
Massachusetts
Locality: Weston
Country: US
Locality: Weston
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:05:17:a0:0c:85:fb:e6:43:f8:eb:b8:7c:30:24:97Serial Number (int): 5343352643235020713972793988013368471
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 3d:75:d7:1b:db:21:cb:62:94:40:6a:46:60:04:b2:39:a9:ec:34:48
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 31:d2:5f:9a:c4:ab:08:75:98:30:14:e9:3c:b7:3d:78:cb:16:9e:8b
Fingerprint (sha256): 63:44:49:c3:98:b1:53:13:f4:e1:4e:83:66:f4:df:12:59:5b:91:5c:dd:f5:14:44:9a:57:45:c3:83:91:19:96
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate *.regiscollege.edu
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.regiscollege.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.regiscollege.edu
regiscollege.edu
ad.regiscollege.edu
regiscollege.edu
ad.regiscollege.edu
Other certificates including the domain name regiscollege.edu
(limited to 100 certificates)
printing.regiscollege.edu
helpdesk.azdelta.be
mail.regiscollege.edu
grad.regiscollege.edu
learn.regiscollege.edu
filedrop.regiscollege.edu
helpdesk.azdelta.be
shibboleth-idp.regiscollege.edu
fsus-3.freshservice.com
regisaccess.regiscollege.edu
alumni.regiscollege.edu
bot.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
s2.ad.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
mail.regiscollege.edu
voicemail.regiscollege.edu
moodle.regiscollege.edu
passwd.regiscollege.edu
learn.regiscollege.edu
helpdesk.azdelta.be
regisaccess.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
www.regiscollege.edu
easyspooler.regiscollege.edu
*.coursedog.com
www.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
grad.regiscollege.edu
online.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
vpn.regiscollege.edu
bot.regiscollege.edu
printing.regiscollege.edu
changemypassword.regiscollege.edu
regisnet.regiscollege.edu
moodle.regiscollege.edu
changemypassword.regiscollege.edu
shibboleth-idp.regiscollege.edu
mail.regiscollege.edu
adastra.regiscollege.edu
www.regiscollege.edu
adastra.regiscollege.edu
ezproxy.regiscollege.edu
libguides.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
reports.regiscollege.edu
mahara.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
regishub.regiscollege.edu
iron.ad.regiscollege.edu
shibboleth-idp.regiscollege.edu
*.regiscollege.edu
grad.regiscollege.edu
libguides.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
alumni.regiscollege.edu
shibboleth-idp.regiscollege.edu
grad.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
*.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
moodle.regiscollege.edu
libguides.regiscollege.edu
adastra.regiscollege.edu
libguides.regiscollege.edu
apm1.ad.regiscollege.edu
*.ezproxy.regiscollege.edu
vpn.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
graduate.regiscollege.edu
imap.regiscollege.edu
fsus-3.freshservice.com
fortimail1.regiscollege.edu
MYONLINE.REGISCOLLEGE.EDU
apm1.ad.regiscollege.edu
tms-rti.regiscollege.edu
libguides.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
regisnet.regiscollege.edu
fsus-3.freshservice.com
grad.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
helpdesk.azdelta.be
alumni.regiscollege.edu
vpn.regiscollege.edu
helpdesk.azdelta.be
mail.regiscollege.edu
grad.regiscollege.edu
learn.regiscollege.edu
filedrop.regiscollege.edu
helpdesk.azdelta.be
shibboleth-idp.regiscollege.edu
fsus-3.freshservice.com
regisaccess.regiscollege.edu
alumni.regiscollege.edu
bot.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
s2.ad.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
mail.regiscollege.edu
voicemail.regiscollege.edu
moodle.regiscollege.edu
passwd.regiscollege.edu
learn.regiscollege.edu
helpdesk.azdelta.be
regisaccess.regiscollege.edu
dxr.regiscollege.edu
filedrop.regiscollege.edu
www.regiscollege.edu
easyspooler.regiscollege.edu
*.coursedog.com
www.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
grad.regiscollege.edu
online.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
vpn.regiscollege.edu
bot.regiscollege.edu
printing.regiscollege.edu
changemypassword.regiscollege.edu
regisnet.regiscollege.edu
moodle.regiscollege.edu
changemypassword.regiscollege.edu
shibboleth-idp.regiscollege.edu
mail.regiscollege.edu
adastra.regiscollege.edu
www.regiscollege.edu
adastra.regiscollege.edu
ezproxy.regiscollege.edu
libguides.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
reports.regiscollege.edu
mahara.regiscollege.edu
myonline.regiscollege.edu
libguides.regiscollege.edu
regishub.regiscollege.edu
iron.ad.regiscollege.edu
shibboleth-idp.regiscollege.edu
*.regiscollege.edu
grad.regiscollege.edu
libguides.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
alumni.regiscollege.edu
shibboleth-idp.regiscollege.edu
grad.regiscollege.edu
degreeprograms.regiscollege.edu
degreeprograms.regiscollege.edu
*.regiscollege.edu
helpdesk.azdelta.be
apm2.ad.regiscollege.edu
moodle.regiscollege.edu
libguides.regiscollege.edu
adastra.regiscollege.edu
libguides.regiscollege.edu
apm1.ad.regiscollege.edu
*.ezproxy.regiscollege.edu
vpn.regiscollege.edu
helpdesk.azdelta.be
grad.regiscollege.edu
graduate.regiscollege.edu
imap.regiscollege.edu
fsus-3.freshservice.com
fortimail1.regiscollege.edu
MYONLINE.REGISCOLLEGE.EDU
apm1.ad.regiscollege.edu
tms-rti.regiscollege.edu
libguides.regiscollege.edu
degreeprograms.regiscollege.edu
mail.regiscollege.edu
regisnet.regiscollege.edu
fsus-3.freshservice.com
grad.regiscollege.edu
regisaccess.regiscollege.edu
degreeprograms.regiscollege.edu
helpdesk.azdelta.be
alumni.regiscollege.edu
vpn.regiscollege.edu
Certificate
The complete raw certificate details for *.regiscollege.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIQBAUXoAyF++ZD+Ou4fDAklzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMDgxNjAwMDAwMFoXDTI0MDgyODIzNTk1OVowazELMAkGA1UEBhMCVVMx FjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxDzANBgNVBAcTBldlc3RvbjEWMBQGA1UE ChMNUmVnaXMgQ29sbGVnZTEbMBkGA1UEAwwSKi5yZWdpc2NvbGxlZ2UuZWR1MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaqEGlUG3MobpxEHPVOjvXJc BQQXumv4e4w+4ZNTwuwfuHdbQ12moFoxOz6yxSu9XMYCK9T4HedwDJqCFM0i5J+O 6t0VfhpzzZbTV6HIpW0xbNuQIFj966YQ5NJPs/BV38+JEOUc6WkRTQ8tzedxamgP sNxTfwDZLxUdZCWZgDRgfRvK/BFglvYozt4XE+rA+TEoUnMkS3KcmtJTDeek5EZP NT92z/CIUIsaSbb/fTXCWeultD15Iw3zSYf9yjWaUA9OvWJZlsOghhp3SpnvPGUN 8ykVM7FiXrhCfgpCBQfzXrPRx216Wr7paQDpe/ovVju4AZ0DZ7sG8Kee/55EXQID AQABo4IDQDCCAzwwHwYDVR0jBBgwFoAUlE/UXYvkpOKmgP792PkA76O+AlcwHQYD VR0OBBYEFD111xvbIctilEBqRmAEsjmp7DRIMEQGA1UdEQQ9MDuCEioucmVnaXNj b2xsZWdlLmVkdYIQcmVnaXNjb2xsZWdlLmVkdYITYWQucmVnaXNjb2xsZWdlLmVk dTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1Ry dXN0VExTUlNBQ0FHMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEF BQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHYGCCsGAQUFBwEBBGow aDAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYIKwYB BQUHMAKGMmh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JT QUNBRzEuY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABif7jOM8AAAQDAEgw RgIhAOqg5b5dl8/0zLacg862C+NCkMjA3UMCMmNss9sfmW8YAiEAgwWRyeGPhU0o 4GeJcVpjRlEFSfwsLzS3PI3s+kiTw9oAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bd LIHZu7+rOdiEcwAAAYn+4zjQAAAEAwBHMEUCICk4Any34c+mXWL74Pt2fcA+UeTS Uujh0jLDhgWFh6PvAiEAu5ilj18yttebZGzrOgcC7xzPp9CDFs9z/GxrT/xvLKMA dgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYn+4zinAAAEAwBH MEUCIQDE/fvLvDhf4WvcszZbWlBuuHVU/ln24fAdwxDt2FI+5gIgOiX+48/3DCdX 8yFu2a6s10iuO/1b2/IkxI0CZ27ZuaswDQYJKoZIhvcNAQELBQADggEBABgf2xMs leus+WMSs6ouwUzvdLMRbUXqnjVwqiVxe/hScKvSvledEwIQ0SVlBBt6wpdeBzo6 dxZGi3gxK2po3qfRC2D6JCnHoDkRSGIeiSjac/Ht0tTjBKbYsfpSsUTWzAwQE4qw e0bUn/dTf6OEapIu7Fw/fscMHww48SmOdKr3ywQk6qARzjR9OcrmEHG3upidU/ee wT3WigE7Lrg8aHuSJI3GGE7XFkjlH5YfUOo7iL0VeMnDH8g6f96f2KOePu/lt1sn KfJJ9avldtxbWbmWdLYqs31Q1eUkvZTkWDjVs7eNAP46rr/7ULbVV40fnDbLQTlf ZT27ytT/Yq60a2c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaqEGlUG3MobpxEHPVOj vXJcBQQXumv4e4w+4ZNTwuwfuHdbQ12moFoxOz6yxSu9XMYCK9T4HedwDJqCFM0i 5J+O6t0VfhpzzZbTV6HIpW0xbNuQIFj966YQ5NJPs/BV38+JEOUc6WkRTQ8tzedx amgPsNxTfwDZLxUdZCWZgDRgfRvK/BFglvYozt4XE+rA+TEoUnMkS3KcmtJTDeek 5EZPNT92z/CIUIsaSbb/fTXCWeultD15Iw3zSYf9yjWaUA9OvWJZlsOghhp3Spnv PGUN8ykVM7FiXrhCfgpCBQfzXrPRx216Wr7paQDpe/ovVju4AZ0DZ7sG8Kee/55E XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5343352643235020713972793988013368471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Weston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Regis College' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.regiscollege.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19903498466360024902950760840076274947640150563161367081574724595730432226453193859401038969548114509504835241750325941159369378239207286508479388382485266431627099059109172519194370501572360278661667714028122305144879188377826289399164776094263231487163565606404844359922464812607723694867784822261867052062523315997167567275345108896984191539870907755173759715408112900848080663020854569046922857240284303305512831391110004424485896931152772005522559838229078051309836643025479501501972733602591607408950184788538484600523006956145167499084879180001077227386083107363134442116876969769488650520890683860384783156317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3d75d71bdb21cb6294406a466004b239a9ec3448 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regiscollege.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regiscollege.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.regiscollege.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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