*.yspi.ie

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:ea:5c:a7:6b:6f:4e:93:5e:8a:0b:cb:3d:b4:bd:2f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.yspi.ie

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ea:5c:a7:6b:6f:4e:93:5e:8a:0b:cb:3d:b4:bd:2f
Serial Number (int): 5204560698288030999541397804304088367
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7a:2a:8f:ee:d7:cb:65:d7:4f:56:9b:86:1e:d9:55:b4:4e:1a:56:bf
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): ee:3f:26:9e:a4:d1:ac:91:b5:c6:5f:74:74:a7:60:4a:db:39:bd:97
Fingerprint (sha256): 64:d4:70:9b:81:c7:1d:5b:3a:b9:1f:f3:11:3c:8c:d9:49:f2:74:8d:8e:e5:4d:b9:ee:26:19:21:02:db:38:07

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.yspi.ie

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.yspi.ie

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.yspi.ie
yspi.ie

Other certificates including the domain name yspi.ie

(limited to 100 certificates)
students.yspi.ie
*.yspi.ie
m.skydive.yspi.ie
camino.yspi.ie
yspi.ie
data.yspi.ie
media.hirschmann-automotive.com
students.yspi.ie
downloads.yspi.ie
donations.yspi.ie
skydive.yspi.ie
camino.yspi.ie
ucdsu.yspi.ie
www.digital.britishtraveljournal.com
m.yspi.ie
fundraiser.yspi.ie
skytest.yspi.ie
bingo.yspi.ie
data.yspi.ie
ucdsu.yspi.ie
data.yspi.ie
events.yspi.ie
fundraising.yspi.ie
m.skydive.yspi.ie
services.yspi.ie
m.skydive.yspi.ie
fundraising.yspi.ie
publikationen.contipark.de
fasts.yspi.ie
yspi.ie
magazine.elektropraktiker.de
backup.yspi.ie
skydive.yspi.ie
skydive.yspi.ie
*.yspi.ie
ethan.yspi.ie
fundraising.yspi.ie
camino.yspi.ie
bingo.yspi.ie
skydive.yspi.ie
toughmudder.yspi.ie
skydive.yspi.ie
downloads.yspi.ie
bingo.yspi.ie
bingo.yspi.ie
skydive.yspi.ie
m.yspi.ie
data.yspi.ie
corporate.yspi.ie
fundraising.yspi.ie
data.yspi.ie
donations.yspi.ie
fundraising.yspi.ie
rtp01.yspi.ie
school.yspi.ie
sleighrace.yspi.ie
donations.yspi.ie
shop.yspi.ie
assets.yspi.ie
bingo.yspi.ie
m.yspi.ie
camino.yspi.ie
sleighrace.yspi.ie
bingo.yspi.ie
*.yspi.ie
xmas.yspi.ie
m.yspi.ie
m.skydive.yspi.ie
fundraising.yspi.ie
m.yspi.ie
twoeuro.yspi.ie
wirbeicontipark.contipark.de
events.yspi.ie
magazine.elektropraktiker.de
skydive.yspi.ie
magazine.ausemergencyservices.com.au
www.yspi.ie
toughmudder.yspi.ie
m.skydive.yspi.ie
fundraising.yspi.ie
campaigns.yspi.ie
skydive.yspi.ie
fasts.yspi.ie
bingo.yspi.ie
sanda.yspi.ie
donations.yspi.ie
data.yspi.ie
tagesspiegel.kiosk.plus
information.yspi.ie
m.skydive.yspi.ie
downloads.yspi.ie
*.yspi.ie
fasts.yspi.ie
wirbeicontipark.contipark.de
m.yspi.ie
info.independenceaustralia.com.au
data.yspi.ie
www.yspi.ie
appeal.yspi.ie
events.yspi.ie

Certificate

The complete raw certificate details for *.yspi.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIQA+pcp2tvTpNeigvLPbS9LzANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIzMDgyMTAwMDAwMFoXDTI0MDgzMTIzNTk1OVowFDESMBAGA1UEAwwJKi55
c3BpLmllMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxrGJHTDE9IBm
4jmv0qvZwAkwSVFmiK8k3J2QCHphrm1be9RdN+xfgwi95+qohy2FAkLG/Lg7+7fa
dwVzUdIarmEieY99+kHMq/TcJhBbAAh819e0PqhQGqJH+n5LYEEXEa0DrFvjhXp/
3GPuRvNsthIA15f7O6WCV6OCOUSFZsySFdVVLr8t++S5xpdL+101cbD0yQMCwKSn
IPyRpFo7C9LHaMtKNW1Ua6NqFl6rabuQkyzzSCCLo9vVQ8ljhPYj8GsjfHdnyFjy
JWL9heoifSOupvc5umzgCpR2+e3mCoqbgpn0oYXthrdLRqDGro7DkYLMKvBpw+qM
IcYqYzUx9Gs1IY5TKZ+cLJHhXWKq1BaqHyAfj0fX+ex77eHNWP2+5+eLWM9EN2Nt
06sRr5jIGf3MR+DRZpr0FGuwPGfyzYKW3hywtjvNLhgq9ugnC0JEqyDTfxeJki4C
yYYSNacbz/V0dKWOJuC2w9WkYE5TJEoVWtg6MAnwqXoUm5KlWSAhPkm76flAQjNP
Uq4Y44B+ErhHUN97ZJq2+9kWz33lYv5YPcPxYx0D9XwppnBqdPpEh6XHcpXHeKcE
612e65z0Y21leVZxP1vbXG0Sj5FqrTBEaoUAiCCCmh85Oc5JF8agTTqR+sDChv7m
PpdvbpentR+acvfxb+6N5qWsdQnYplUCAwEAAaOCAxgwggMUMB8GA1UdIwQYMBaA
FJRP1F2L5KTipoD+/dj5AO+jvgJXMB0GA1UdDgQWBBR6Ko/u18tl109Wm4Ye2VW0
ThpWvzAdBgNVHREEFjAUggkqLnlzcGkuaWWCB3lzcGkuaWUwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSg
MqAwhi5odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEu
Y3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGG
Gmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD4GCCsGAQUFBzAChjJodHRwOi8v
Y2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNydDAJBgNV
HRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQB2/4g/Crb7lVHCYcz1
h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYoXrqOTAAAEAwBGMEQCIBfYCdiJRlo3lc9T
GI2TCvoqo3cEYY/58B0wFMOSiDUpAiAUQ5OHFHuxtsHnpPJRtqrdxkXG+i67v4DJ
Upgo8XEuCAB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiheu
o3UAAAQDAEgwRgIhAJhE49ycGO4nk+6Euacfczo5C1gy3JwRvSaQZ9OVQGeYAiEA
hCxXTLZpxUe+l0I/2NTuMa51YQV8gJseBsrLC+8bEUcAdgDatr9rP7W2Ip+bwrtc
a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYoXrqNKAAAEAwBHMEUCIQC9Fy9TzR+5lE6S
52eYq2YOnMW++MnlsodWVegpgzUWfAIgBdT3GiUFfgzHjqo0B4E+42Q1Dj8cEDE9
5Op8C88ZA8kwDQYJKoZIhvcNAQELBQADggEBAJENUqYaJGrGuCL7+Qvou3gVvbKh
jLDYFZr1rPu8WA9MaNZvofslTY/PzXdEknsE8OT5UTwisGXwqx49gyLXokVJ1TA6
iyf85iA6t9HIE0rASQy8JBU6mP+fP47jNamkOYrNgXESxAGRigOxL1EnUA0HIY8L
GyXGJ41U+LzUJ3rDU/HOY7NFeLG13i/rNBzEgE/t7LAUArsLDIpok0PNTwjEKqbE
d6gs143uQoboMxxnrApNcBCby1e9GBJz6g1lotABxHMptyFGvbokvv5ePp4tIDQF
gFJGbyeRmj0JuxKQc80UevVK/OlVfpeprVfOMVI5R3LVbSOE5UC+mymfv2g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5204560698288030999541397804304088367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yspi.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810598752281195280093840372279294727557702340624746590366742628722735511024210782009767394964864471172642271858542931963498586174633661655427828909026559807247866390945525876119053207853915656157517426515491901389497064745898747646583478376871381640719893032694449056346301981065511248660087681190256897348998530470222399377144544348722881753923422962607139004179246635139162558837242671519140728840717815468253004890189361549508055237812546640923522026180020779707380807828282771479548851927299437928184594612122469543134867251400054863291347460319889544847262191747412578364807603952075873283785121132112592212014267995576731372721131819471712980868502633440456533968940563925759529368662284571288651788723452903187084214676896505166446436504720205459731292884425762058383162029859798136527856626735495491641250343304278701544256425455844698375263739127796230411820353752589082710085441893296467750879231642860538415423876922110899370030346180751528865821364943948462814644689584372504423362428756038832782435747734118182154748838807101466130970416378540888870115111904067108249471499010412853356183132666347070927759031421050144297753066628600630391404794326117146455239378007544720935553906838024075930064011457606584771769050709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a2a8feed7cb65d74f569b861ed955b44e1a56bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yspi.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yspi.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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