www.egencia.com

- AMEX Global Business Travel -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:d7:26:8d:69:f5:04:2b:a5:b1:0a:b1:49:34:92:99 was issued on by DigiCert Inc.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AMEX Global Business Travel

Organization: AMEX Global Business Travel
State / Province: New Jersey
Locality: Jersey City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:d7:26:8d:69:f5:04:2b:a5:b1:0a:b1:49:34:92:99
Serial Number (int): 9092493734822469003966688613396419225
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e2:78:04:56:d7:e5:cb:c7:b4:e5:03:f0:66:39:e4:a9:91:02:70:8a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 73:17:09:ff:b1:0e:09:3f:de:dc:9d:65:33:77:a9:10:57:3e:b9:b9
Fingerprint (sha256): 66:ea:74:d2:e8:f5:2c:fe:9d:44:26:d2:6b:fe:ca:9c:11:c7:08:47:a7:71:b5:9a:e4:ca:ae:45:fa:be:c4:9c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.egencia.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.egencia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.egencia.com
www.egencia.fi
www.egencia.es
www.egencia.eu
mobile.egencia.be
mobile.egencia.co.uk
mobile.egencia.pl
www.egencia.fr
www.egencia.co.za
www.egencia.com.hk
www.egencia.com.ph
www.egencia.cz
www.egencia.de
mobile.egencia.it
mobile.egencia.co.in
www.egencia.co.il
www.egencia.cn
www.egencia.co.in
mobile.egencia.ie
www.egencia.com.au
www.egencia.com.sg
preprod.egencia.co.uk
www.egencia.mx
www.egencia.no
www.egencia.dk
www.egencia.com.br
www.egencia.nl
www.egencia.be
mobile.egencia.se
www.egencia.com.tr
www.egencia.ie
egencia.com
mobile.egencia.fi
mobile.egencia.fr
www.egencia.pl
mobile.egencia.com.hk
www.egencia.ch
preprod.egencia.fr
www.egencia.ca
www.egencia.co.nz
mobile.egencia.es
mobile.egencia.com.ph
mobile.egencia.com.au
mobile.egencia.cz
mobile.egencia.de
mobile.egencia.com.tr
mobile.egencia.dk
www.egencia.se
www.egencia.co.uk
assets.egencia.com
www.egencia.ae
www.egencia.it
mobile.egencia.com.sg
mobile.egencia.ca
mobile.egencia.ch
mobile.egencia.nl
m.egencia.com
mobile.egencia.com
mobile.egencia.no
mobile.egencia.cn

Other certificates including the domain name egencia.com

(limited to 100 certificates)
learn.egencia.com
www.egencia.com
events.egencia.com
events.egencia.com
info.egencia.com
events.egencia.com
wwph.egencia.cn
discover.egencia.com
mi.egencia.com
www.egencia.com
akamai-san75.exacttarget.com
discover.egencia.com
discover.egencia.com
www.egencia.com
cloud.email.egencia.com
events.egencia.com
events.egencia.com
productinfo.egencia.com
learn.egencia.com
info.egencia.com
www.egencia.com
learn.egencia.com
lyncweb.expedia.biz
events.egencia.com
wwph.egencia.com
feedback.egencia.com
www.egencia.com
view.email.egencia.com
click.email.egencia.com
learn.egencia.com
feedback.egencia.com
learn.egencia.com
conversations.expedia.com
events.egencia.com
www.egencia.com
events.egencia.com
productinfo.egencia.com
community.egencia.com
community.egencia.com
mail.expedia.com
feedback.egencia.com
events.egencia.com
community.egencia.com
mi.egencia.com
cdn.egencia.com
www.egencia.com
info.egencia.com
conversations.expedia.com
egencia.ae
events.egencia.com
learn.egencia.com
community.egencia.com
egencia.com
lyncphxaccess.expedia.biz
click.email.egencia.com
akamai-san75.exacttarget.com
reporting.egencia.com
events.egencia.com
events.egencia.com
community.egencia.com
metrics.egencia.com
*.int-maui.sb.karmalab.net
discover.egencia.com
go.egencia.com
learn.egencia.com
www.egencia.com
mi.egencia.com
discover.egencia.com
events.egencia.com
egencia.com
events.egencia.com
learn.egencia.com
wwwegenciacom.int-maui.sb.karmalab.net
www.egencia.com
learn.egencia.com
mi.egencia.com
akamai-san75.exacttarget.com
events.egencia.com
www.egencia.com
learn.egencia.com
events.egencia.com
learn.egencia.com
feedback.egencia.com
www.egencia.com
learn.egencia.com
reporting.egencia.com
cloud.email.egencia.com
wwph.egencia.com
go.egencia.com
egencia.com
cloud.email.egencia.com
southwest.egencia.com
click.email.egencia.com
*.egencia.com
events.egencia.com
click.email.egencia.com
www.egencia.com
events.egencia.com
feedback.egencia.com
info.egencia.com

Certificate

The complete raw certificate details for www.egencia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wbP4MO9/n4ibvBwVsn0
fT2wTE51ZWq3ClZKkHkU3s646Wle7X7c7tELrpxJuqGO6KSJi+4bqpJ8dNJYU7uu
MoHOWIoesxI2ff22lAHW3Bm4nJBs27OvrXojaB408fa3D6a2x4Y+NV1VH+jTpklR
nuSUm/HAbLygXzirqtJTepGaANcDuyejNVDVxt2TlIzEJGsTxMm0E6zuHQVYWgQU
7JFRAle4o2ZYLmvlz8gI34P2PdtS2G9gu4MZbreo9wWehQLKVklYpTfVrqvVUyfl
8NhLiBW6mKAwCV4KFX7VNPmMi2OdUnXBmZxEdFm/8qWoBbopDij/z4UPhOCjAA2u
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9092493734822469003966688613396419225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMEX Global Business Travel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.egencia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26639641481766588754060201962328861722625704137436466677496202412080343284945325708757418093156720885306155684385711253855993760914821855096794952476853473089269782093872279881543615377853534014240284340774732829460695572113889156803890811607875420249293219360153387838086892442406530618243866129279035841042005529993560688129622179801123043292518236065187174773434438204201784428185362049645841334048608817437323517381565906067436199340394080777041554996067773257713775597440124969685997301993183072902552599558312556843453053895520046493926122757195287658045868378781882159772495011566244889137675077145600314945099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2780456d7e5cbc7b4e503f06639e4a99102708a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.egencia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.egencia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183aa0b252d0000040300473045022079f39c0dd67a253a6ac4029ce4b386e7e3d6a0b3f3ae7fdbb7e1017d0274b94a0221008238cfaf2c197edc96f744f5be407d320402aa30839f6a00bf348d8dc2cf2209007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000183aa0b255f000004030046304402200b72785b9dfade7f212e43f7befa17a18f7669e9081f2b0a67543ed7687a3099022070bac73b5d0c894708de3519c67a137a314168d0bc5625c94c0531a66ce74c67007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183aa0b25380000040300473045022035e8e2e41f095fcd242caf699ad27cb67b0711b89c2df8c89bdbd0335b8af37d022100d460dc34bef2d8ce06bcab398c91400d2374fa929d00b772240e88aab51bbec7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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