www.khaironline.net
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 01:e3:46:a5:bf:00:37:c5:55:3a:dc:eb:00:44:6a:17 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.khaironline.net
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:e3:46:a5:bf:00:37:c5:55:3a:dc:eb:00:44:6a:17Serial Number (int): 2509312283103292461309121390809737751
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 33:da:45:db:a0:03:00:2a:86:aa:c7:a9:15:ac:44:ea:25:b7:83:63
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): fc:e7:a0:4e:92:5d:4b:5e:d4:fd:f9:cf:39:dc:48:47:e1:de:96:16
Fingerprint (sha256): 6a:76:5c:cd:36:24:df:31:c4:49:78:c5:42:a9:76:47:b7:b7:90:54:6b:26:a5:df:af:bc:79:83:0d:1a:b4:09
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.khaironline.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.khaironline.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.khaironline.net
khaironline.net
khaironline.net
Other certificates including the domain name khaironline.net
(limited to 100 certificates)
mail.khaironline.net
www.khaironline.net
itsupport.afmforest.com
ssihelpdesk.shoesensation.com
help-desk.soa.org
ayuda.vinte.com
www.khaironline.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
itsupport.afmforest.com
itsupport.quigleysimpson.com
ssihelpdesk.shoesensation.com
portal.beeyond.co
servicedesk.vermontech.net
www.khaironline.net
servicedesk.vermontech.net
mail.khaironline.net
mail.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
helpdesk.kleysen.com
servicedesk.vermontech.net
support.medicaxl.co.il
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
www.khaironline.net
itsupport.quigleysimpson.com
www.khaironline.net
www.khaironline.net
www.khaironline.net
help-desk.soa.org
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
ssihelpdesk.shoesensation.com
ayuda.vinte.com
helpdesk.kleysen.com
ssihelpdesk.shoesensation.com
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
itsupport.afmforest.com
www.khaironline.net
support.khaironline.net
help-desk.soa.org
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
support.medicaxl.co.il
itsupport.afmforest.com
servicedesk.vermontech.net
itsupport.afmforest.com
www.khaironline.net
support.medicaxl.co.il
mail.khaironline.net
help-desk.soa.org
servicedesk.vermontech.net
servicedesk.vermontech.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
www.khaironline.net
support.khaironline.net
helpdesk.kleysen.com
support.medicaxl.co.il
ayuda.vinte.com
servicedesk.vermontech.net
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
ayuda.vinte.com
helpdesk.kleysen.com
www.khaironline.net
itsupport.afmforest.com
ssihelpdesk.shoesensation.com
help-desk.soa.org
ayuda.vinte.com
www.khaironline.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
itsupport.afmforest.com
itsupport.quigleysimpson.com
ssihelpdesk.shoesensation.com
portal.beeyond.co
servicedesk.vermontech.net
www.khaironline.net
servicedesk.vermontech.net
mail.khaironline.net
mail.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
helpdesk.kleysen.com
servicedesk.vermontech.net
support.medicaxl.co.il
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
www.khaironline.net
itsupport.quigleysimpson.com
www.khaironline.net
www.khaironline.net
www.khaironline.net
help-desk.soa.org
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
ssihelpdesk.shoesensation.com
ayuda.vinte.com
helpdesk.kleysen.com
ssihelpdesk.shoesensation.com
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
itsupport.afmforest.com
www.khaironline.net
support.khaironline.net
help-desk.soa.org
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
support.medicaxl.co.il
itsupport.afmforest.com
servicedesk.vermontech.net
itsupport.afmforest.com
www.khaironline.net
support.medicaxl.co.il
mail.khaironline.net
help-desk.soa.org
servicedesk.vermontech.net
servicedesk.vermontech.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
www.khaironline.net
support.khaironline.net
helpdesk.kleysen.com
support.medicaxl.co.il
ayuda.vinte.com
servicedesk.vermontech.net
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
ayuda.vinte.com
helpdesk.kleysen.com
Certificate
The complete raw certificate details for www.khaironline.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPzCCBSegAwIBAgIQAeNGpb8AN8VVOtzrAERqFzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTAzMTUwMDAwMDBaFw0yMDA5MDkxMjAwMDBaMB4xHDAaBgNVBAMTE3d3dy5r aGFpcm9ubGluZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0 Vhzn9urwxv1G4ZQfIeVwg7kT4G84f/72dGvdCVj7f3edHPk1Wia+r4IqL42aLVOG 1tLu4nA5p4cWtq4nApIs4KRieTUGSoKmh7picGMGPNZw9aGvDnyaq0jn54Cyw/Pn RumdOteqiOxFAnyhlvdirvwcnHGGYfhfyQVtNM1+oypTX9+7JgqzZarFK3C7U4Cp r5TthWOEG+2d84wC0KRteAkvbBbNNM2AGo7JxyWFzdmZ5dDIf/yeDq4Sf2iOckar REfQyZP6+nbTwgq8lA4YgYuRLaI8iZSMf3iQppIwMoZUw2Uf927aNIMRpWHZqMUs 9SRYe8sIDCpMgl8nP3SRAgMBAAGjggM3MIIDMzAfBgNVHSMEGDAWgBSQWP+wnHWo UVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUM9pF26ADACqGqsepFaxE6iW3g2MwLwYD VR0RBCgwJoITd3d3LmtoYWlyb25saW5lLm5ldIIPa2hhaXJvbmxpbmUubmV0MA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYD VR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RS U0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUH AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHUGCCsG AQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5j b20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9U cnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFv BIIBawFpAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFpg7OG oAAABAMASDBGAiEAtiBzAMa+YpLaUWeorXl91e5qCXAZHIaai5FycmxFWW4CIQCF 9DeXBC+41Z5FigbOqP/V260GGUlceRRj0liWzdCPqwB1AF6nc/nfVsDntTZIfdBJ 4DJ6kZoMhKESEoQYdZaBcUVYAAABaYOzhmIAAAQDAEYwRAIgJ7EXg2FY2Y4JSNho wJPK4n0VT1Ibmm7+pRgJu4QM32ICID59Bh9FhJB64XgHBL42ZFfQ8HYqXeusRa3u 8rUd+qBnAHcAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFpg7OH mgAABAMASDBGAiEAn/j83OwP2KiY5Nw8CPmigDedSwQkrXl+SFcEMAhBFlYCIQD5 SMcrfmxkdy+XXuYgHVRhNQnWJJdgBWyre3Dyhfs0dDANBgkqhkiG9w0BAQsFAAOC AQEAZfTzzwDB0j/Pckj51n8KERHGGavONIm8NspP4tGquX4RKRZZPrKiGkoRibY/ abYEUR7suVHRFjjxS3k5T+VSUmyCn4QGe1C4wLLb7m31lfr5KzYTv62DKhF1nTh8 uO54Tgc1tZ+NXifBMr8FqUqig0zakPxDeUGuyAdEt5EzLg1fLxVz5eFG163rxab7 M4hAwMr6GzPb6F6sm9Vt1V2L+sE/qWyFj7AoGBzvwPieGrzSjF0ugEUf4aRtNdhp PZjMylO19Fi2dtRk2msSONBiFQYG4S5oTQ5QKEIkjNN5koMmID9G+95rm4biPwEQ 8CFKUIUKgZZXsPOFJe8jBBoiwA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFYc5/bq8Mb9RuGUHyHl cIO5E+BvOH/+9nRr3QlY+393nRz5NVomvq+CKi+Nmi1ThtbS7uJwOaeHFrauJwKS LOCkYnk1BkqCpoe6YnBjBjzWcPWhrw58mqtI5+eAssPz50bpnTrXqojsRQJ8oZb3 Yq78HJxxhmH4X8kFbTTNfqMqU1/fuyYKs2WqxStwu1OAqa+U7YVjhBvtnfOMAtCk bXgJL2wWzTTNgBqOycclhc3ZmeXQyH/8ng6uEn9ojnJGq0RH0MmT+vp208IKvJQO GIGLkS2iPImUjH94kKaSMDKGVMNlH/du2jSDEaVh2ajFLPUkWHvLCAwqTIJfJz90 kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2509312283103292461309121390809737751 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.khaironline.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22765358754679141778099402737912544000125807210444324768307129674505888532939124748955511027549537565244369344684496067569814915080181001626491902565892154325997501016062773508795567334347807781812392222714074306538795837779970583015360707754663850679232944131932515876525521641925584155133953829514420238500589741294354517252909159889917875068129432049070114074698046891176452129196880569509032636187502260545583098108349969902294018863299417386310628479208517634265993839779785619880523976816010512767140392407233871460983696798743648551568721173322350083496482099205208222994127306206416588102716510155691362579601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33da45dba003002a86aac7a915ac44ea25b78363 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khaironline.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khaironline.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016983b386a00000040300483046022100b6207300c6be6292da5167a8ad797dd5ee6a0970191c869a8b9172726c45596e02210085f43797042fb8d59e458a06cea8ffd5dbad0619495c791463d25896cdd08fab0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016983b386620000040300463044022027b117836158d98e0948d868c093cae27d154f521b9a6efea51809bb840cdf6202203e7d061f4584907ae1780704be366457d0f0762a5debac45adeef2b51dfaa0670077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016983b3879a00000403004830460221009ff8fcdcec0fd8a898e4dc3c08f9a280379d4b0424ad797e4857043008411656022100f948c72b7e6c64772f975ee6201d54613509d6249760056cab7b70f285fb3474 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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