*.indecomm.net

- Indecomm Global Services Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:21:ff:41:4e:22:01:fb:50:24:d0:aa:e4:f2:77:b0 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Indecomm Global Services Inc.

Organization: Indecomm Global Services Inc.
State / Province: New Jersey
Locality: Edison
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:ff:41:4e:22:01:fb:50:24:d0:aa:e4:f2:77:b0
Serial Number (int): 4164206972146835135799005866955536304
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 40:68:8d:8c:10:5d:c5:66:df:7d:64:c0:90:4b:92:dc:bd:76:9b:07
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 32:12:cc:7e:7c:ae:a9:df:df:75:e9:64:e5:55:a1:f4:60:5b:4c:1d
Fingerprint (sha256): 6d:fe:52:8e:ff:1b:7f:e3:c1:5c:7f:c8:83:26:15:dc:40:db:39:f1:90:f2:fe:0f:a7:51:7d:ae:23:05:c6:c3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.indecomm.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.indecomm.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.indecomm.net
indecomm.net

Other certificates including the domain name indecomm.net

(limited to 100 certificates)
im.indecomm.net
mortgage.indecomm.net
sni.cloudflaressl.com
mortgage.indecomm.net
*.indecomm.net
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
ssl419618.cloudflaressl.com
webmail.indecomm.net
www.indecomm.net
mortgage.indecomm.net
mortgage.indecomm.net
webmail.indecomm.net
mortgage.indecomm.net
*.indecomm.net
*.indecomm.net
sni.cloudflaressl.com
indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
indecomm.net
webmail.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
indecomm.net
*.indecomm.net
ssl419616.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mortgage.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
sni.cloudflaressl.com
*.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
webmail.indecomm.net
mortgage.indecomm.net
ssl419616.cloudflaressl.com
ssl419616.cloudflaressl.com
ssl419618.cloudflaressl.com
ssl419616.cloudflaressl.com
*.indecomm.net
ssl419618.cloudflaressl.com
indecomm.net
sni.cloudflaressl.com
ssl419618.cloudflaressl.com
mortgage.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419616.cloudflaressl.com
im.indecomm.net
*.indecomm.net
apps.indecomm.net
ssl419617.cloudflaressl.com
bgmonitor.indecomm.net
ssl419616.cloudflaressl.com
sni.cloudflaressl.com
sts.indecomm.net
ssl419618.cloudflaressl.com
apps.indecomm.net
*.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
*.indecomm.net
indecomm.net
webmail.indecomm.net
*.indecomm.net
ssl419618.cloudflaressl.com
im.indecomm.net
webmail.indecomm.net
indecomm.net
mortgage.indecomm.net
sni.cloudflaressl.com
im.indecomm.net
mortgage.indecomm.net
mortgage.indecomm.net
indecomm.net
ssl419617.cloudflaressl.com
mortgage.indecomm.net
bgmonitor.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
im.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
ssl419617.cloudflaressl.com

Certificate

The complete raw certificate details for *.indecomm.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIQAyH/QU4iAftQJNCq5PJ3sDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDEyMDQwMDAwMDBaFw0yMjAxMDQyMzU5NTlaMHQxCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpOZXcgSmVyc2V5MQ8wDQYDVQQHEwZFZGlzb24xJjAkBgNVBAoTHUlu
ZGVjb21tIEdsb2JhbCBTZXJ2aWNlcyBJbmMuMRcwFQYDVQQDDA4qLmluZGVjb21t
Lm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbe31K8l8R14/Tl
36WtpjGEpbpMzUOC4+qs3+LWgNLdIMcYzT0/GYO66qX+3IAz/Bi5AMkAQSN9PSnL
7KTCctsOGZW5S0fi7W3NmCz5m2jdsK9kLMS2gZg9ziEKaXG0nkJy5KUmEisM/35R
jKskOnw0Axc8YzcaYj3H9685J+h0r/MKkeGsoytW+3VEG2cC/N4kniGhMiEhI4N2
dyJUHeCqeGGohBJeR3zymXk3IRrLWYGiahywRmb6rjm6Q+UXjAGbg4OPRp2VKZiW
Ls5BR2BtGr+TSt8fYt4wScM9mkCfVIWbQ629iL20wlaWiAi/4hy3Hsh3IxVPoxy4
Fi4ohRcCAwEAAaOCArYwggKyMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4
nmzFMB0GA1UdDgQWBBRAaI2MEF3FZt99ZMCQS5LcvXabBzAnBgNVHREEIDAegg4q
LmluZGVjb21tLm5ldIIMaW5kZWNvbW0ubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0
cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1Ud
IARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEF
BQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0
dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQw
DAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ACl5vvCeOTkh
8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABdizrTRMAAAQDAEcwRQIhAPCKeVtI
yx1mgeSMDSk5FvR5OFDdCEpcpoP7j5iS7Jl1AiBo//Ge+zqrZ4IQAP9oz5Ytq9Gr
PbKRuiyiEkRiFmLingB1AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2
AAABdizrTTMAAAQDAEYwRAIgFPDlEtNkOkJ6OwKorD6n1z5kFvOZQdQyT6yUp/Bi
IrUCIHXp3GiFlHVuTQ+aM00qM37TXBpN+zAP/4LmWaD2qO8CMA0GCSqGSIb3DQEB
CwUAA4IBAQBco4GwjaCuIuCrG0CNQSJJ5zDjcVS0pR3HZXNWn7yFdFFgDmylxEdn
BJORxdi4ol/2InX+uiDh8AZtkDF/YIExPR1s0mn0QoYtc6ELJGQGHjz+mmqVGQVq
0KbNERvJstNZKD+nZ/JVdOxxKX8iMPE8SM/ljfet8h4CmaqVv9/usFpN4srpjZFQ
NgDwXGCL1d2Arb+uuCnWFMuxUg8FGBivp7WttoxzS8AkGs/1Ny8wId+lGUd/Dh6l
NcdZH+SE1GzudtyqUhBEk4L1/X+O5crhaoYo7y9FgARapOHDd8z1bwO5WXV0/pwu
eZKnksrxBg7lcQBQyUHCrhz5lfN97bxX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt7fUryXxHXj9OXfpa2m
MYSlukzNQ4Lj6qzf4taA0t0gxxjNPT8Zg7rqpf7cgDP8GLkAyQBBI309KcvspMJy
2w4ZlblLR+Ltbc2YLPmbaN2wr2QsxLaBmD3OIQppcbSeQnLkpSYSKwz/flGMqyQ6
fDQDFzxjNxpiPcf3rzkn6HSv8wqR4ayjK1b7dUQbZwL83iSeIaEyISEjg3Z3IlQd
4Kp4YaiEEl5HfPKZeTchGstZgaJqHLBGZvquObpD5ReMAZuDg49GnZUpmJYuzkFH
YG0av5NK3x9i3jBJwz2aQJ9UhZtDrb2IvbTCVpaICL/iHLceyHcjFU+jHLgWLiiF
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4164206972146835135799005866955536304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indecomm Global Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.indecomm.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21065461079334318038653814260885958172797406786523752353161449663394604843838268015767626313299389001680767343491178662660817459067055873404245622508082700142762045213830759184041853866202420490104097989367403295069476495022658126124371315202311572419127107606235771992531660669041616547991268973117565593948284901932258998047539719732140895291295839702407808287255720756035441459496136161754418478971517936824393079320785824419714177377993516021290143737849681440672027489597745847370696891721851442520106138876879171474267348700238327754855090003575422492073167798547840740668945440966081923351927063971821676692759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40688d8c105dc566df7d64c0904b92dcbd769b07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indecomm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indecomm.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001762ceb4d130000040300473045022100f08a795b48cb1d6681e48c0d293916f4793850dd084a5ca683fb8f9892ec9975022068fff19efb3aab67821000ff68cf962dabd1ab3db291ba2ca21244621662e29e00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001762ceb4d330000040300463044022014f0e512d3643a427a3b02a8ac3ea7d73e6416f39941d4324fac94a7f06222b5022075e9dc688594756e4d0f9a334d2a337ed35c1a4dfb300fff82e659a0f6a8ef02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ca381b08da0ae22e0ab1b408d412249e730e37154b4a51dc76573569fbc857451600e6ca5c44767049391c5d8b8a25ff62275feba20e1f0066d90317f6081313d1d6cd269f442862d73a10b2464061e3cfe9a6a9519056ad0a6cd111bc9b2d359283fa767f25574ec71297f2230f13c48cfe58df7adf21e0299aa95bfdfeeb05a4de2cae98d91503600f05c608bd5dd80adbfaeb829d614cbb1520f051818afa7b5adb68c734bc0241acff5372f3021dfa519477f0e1ea535c7591fe484d46cee76dcaa5210449382f5fd7f8ee5cae16a8628ef2f4580045aa4e1c377ccf56f03b9597574fe9c2e7992a792caf1060ee5710050c941c2ae1cf995f37dedbc57