outlook.aemedia.com

- Dentsu Aegis Network Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:f0:e7:3e:3e:ad:49:b6:2a:fe:62:89:a0:bd:a2:55 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dentsu Aegis Network Ltd

Organization: Dentsu Aegis Network Ltd
Organization unit: Unified Communications
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:f0:e7:3e:3e:ad:49:b6:2a:fe:62:89:a0:bd:a2:55
Serial Number (int): 19860033355199263140632898522033529429
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:a8:09:e4:07:77:ac:b6:15:e7:b7:10:51:39:5f:5f:a1:8e:a3:f1
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 7e:b0:c3:88:a8:7f:79:1f:23:13:7b:51:d8:6d:fa:fd:b1:30:b6:ea
Fingerprint (sha256): 6f:51:83:23:84:1b:0f:e1:63:74:df:1a:ec:ab:49:7c:4b:bf:3f:57:fd:4c:1b:75:9f:95:ec:b0:b9:c8:ae:9c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate outlook.aemedia.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.aemedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.aemedia.com
autodiscover.dentsuaegis.com
autodiscover.mcgarrybowen.com
macoutlook.aemedia.com
autodiscover.aemedia.com
www.outlook.aemedia.com

Other certificates including the domain name aemedia.com

(limited to 100 certificates)
sipem2.aemedia.com
sip.aemedia.com
*.aemedia.com
sipam1.aemedia.com
outlook.aemedia.com
portalcea.aemedia.com
sip.aemedia.com
sip.aemedia.com
lyncweb.aemedia.com
*.aemedia.com
sipem2.dentsuaegis.com
sipap1.aemedia.com
outlook.aemedia.com
remote.excmplatform.aemedia.com
LYNCWEB.aemedia.com
mail.aemedia.us
sip.aemedia.com
sip.aemedia.com
excmplatform.aemedia.com
sipap1.aemedia.com
lyncdiscover.dentsuaegis.com
sipem2.aemedia.com
extranet.excmplatform.aemedia.com
lyncweb.aemedia.com
remote.mysites.aemedia.com
sipem2.aemedia.com
*.aemedia.com
lyncdiscover.dentsuaegis.com
sipap1.aemedia.com
wireless.aemedia.com
*.aemedia.com
mail.aemedia.us
sip.aemedia.com
outlook.aemedia.com
outlook.aemedia.com
outlook.aemedia.com
lyncweb.aemedia.com
outlook.aemedia.com
remote.excmplatform.aemedia.com
*.springboard.aemedia.com
sip.aemedia.com
*.aemedia.com
outlook.aemedia.com
LYNCWEB.aemedia.com
*.aemedia.com
skypewebem1.dentsuaegis.com
sipap1.aemedia.com
clientextranet.aemedia.com
*.aemedia.com
sip.aemedia.com
extranet.aemedia.com
springboard.aemedia.com
LYNCWEB.aemedia.com
sip.aemedia.com
outlook.aemedia.com
sip.aemedia.com
LYNCWEB.aemedia.com
sip.aemedia.com
sipAM1.aemedia.com
outlook.aemedia.com
sipem2.aemedia.com
LYNCWEB.aemedia.com

Certificate

The complete raw certificate details for outlook.aemedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGzCCBgOgAwIBAgIQDvDnPj6tSbYq/mKJoL2iVTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTA2MTEwMDAwMDBaFw0yMTA2MTAxMjAwMDBaMIGAMQswCQYDVQQGEwJHQjEP
MA0GA1UEBxMGTG9uZG9uMSEwHwYDVQQKExhEZW50c3UgQWVnaXMgTmV0d29yayBM
dGQxHzAdBgNVBAsTFlVuaWZpZWQgQ29tbXVuaWNhdGlvbnMxHDAaBgNVBAMTE291
dGxvb2suYWVtZWRpYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCv7gYko70Ykp7kWmhCccdiOS27OKjVGeClu4gp8oIK/uIn5elfmgc2B9U0P1+a
mwAEkKBJH9PbFpgtUYlTjMehHX6m9ArhePJOwNibCjAorpHML2064puxpRRxl4JI
Ex3mWl6ewmnndo+xQEIdCL7cH9zYeOuW+4cZ3ZAFkd+Lk7ko/ufG+ZDa/YKGJRWQ
EgO2WY3QdJLAb0N42t5bWvkcUnQ9uMi0qx2zfNivia8AHAYevSeK6O0C7W0la0Gq
VxNo08yYb5lNJ+gxVbNYxAoD0SvpqarRgK1+2VLCDBfXPzhJ4LArraU2vNrltFAC
AuSRIQeXgfZB0+r3JOl6ue7tAgMBAAGjggOwMIIDrDAfBgNVHSMEGDAWgBSQWP+w
nHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUc6gJ5Ad3rLYV57cQUTlfX6GOo/Ew
gagGA1UdEQSBoDCBnYITb3V0bG9vay5hZW1lZGlhLmNvbYIcYXV0b2Rpc2NvdmVy
LmRlbnRzdWFlZ2lzLmNvbYIdYXV0b2Rpc2NvdmVyLm1jZ2Fycnlib3dlbi5jb22C
Fm1hY291dGxvb2suYWVtZWRpYS5jb22CGGF1dG9kaXNjb3Zlci5hZW1lZGlhLmNv
bYIXd3d3Lm91dGxvb2suYWVtZWRpYS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRw
Oi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0g
BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUF
BzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0
cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJ
BgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwCkuQmQtBhYFIe7
E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWtHeQh5AAAEAwBIMEYCIQDky0D8xGv3
l4baw1/6K+jKOZR/Nz5CYrF8vxyFtLP86wIhAIva0t9S2vhBi6VRTkZtJCdupw8l
8A17tgRw/YbSKnM5AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8A
AAFrR3kJFwAABAMARzBFAiA6EyiJw2RXfqz6D5HZGOgJcuIJTU5/05JbLCqCcLgW
5AIhAIoXsi9Q9JAsdPZyfDs1IYdNQr8wU2lab9FIG+0JhEFzAHUARJRlLrDuzq/E
QAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFrR3kH0QAABAMARjBEAiBBlOEdkgq8
5EMfAWVaSnrfw9+BtRK0liwbRvlKXkkWnQIgFPavNoptnhZ4HKXMwBvN/8IPyAFd
rMb2e82x9L1li+0wDQYJKoZIhvcNAQELBQADggEBAEpDNWoCdd6gTotN1XzGCha/
B6iIhdyOJG6h+Rr57KtPTcQsgMDuHSfO599CT2Pqislan6i30dThcpXzN6W3GZoN
Vr5zoXPvl1Z+PM3FZkbRZYvpacfOOYdOFWHACDmWRRoZq30/Ik8ZWsjFOGWhGTcW
y5AM7mBXiHMGNmk6WbE9njH8QW2Iei6ajCgsuTK1MVP/T2RYufU4vwZfACnnyuF7
KLnNQ4HkgAoCADdp4VvtR1gQJ4+rNKvoZIB8oq8bpukg7qqY6gD/WE+HXSE15toa
x+HbhbJl6TFvaCBtXvBjt33WdUJK/IwhLOQITxsEfMGBbWOyFLcQLN+ZVyUa0wA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+4GJKO9GJKe5FpoQnHH
Yjktuzio1RngpbuIKfKCCv7iJ+XpX5oHNgfVND9fmpsABJCgSR/T2xaYLVGJU4zH
oR1+pvQK4XjyTsDYmwowKK6RzC9tOuKbsaUUcZeCSBMd5lpensJp53aPsUBCHQi+
3B/c2HjrlvuHGd2QBZHfi5O5KP7nxvmQ2v2ChiUVkBIDtlmN0HSSwG9DeNreW1r5
HFJ0PbjItKsds3zYr4mvABwGHr0niujtAu1tJWtBqlcTaNPMmG+ZTSfoMVWzWMQK
A9Er6amq0YCtftlSwgwX1z84SeCwK62lNrza5bRQAgLkkSEHl4H2QdPq9yTpernu
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19860033355199263140632898522033529429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dentsu Aegis Network Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.aemedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22209077376361040169920774024221937275862557676679694795205646191646489014166636775067866392416436567850915847121089776686865944483106322414089387944768112725198343924280884952629124684378883491640043367921820531104793030067418445739871102022860372984435272470126925038964948736160839792023964139116595249911007564052731111347182408694545772583711430815220180515405505446290208706434371789555078648695309032163559046231843145624404893952795573756392979373259674936364543219220533372355010175329492651562218459202332995597255418334859191252496576750953231900059788635812001768838426464191107390415792210101664277458669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73a809e40777acb615e7b71051395f5fa18ea3f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mcgarrybowen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macoutlook.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outlook.aemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a43356a0275dea04e8b4dd57cc60a16bf07a88885dc8e246ea1f91af9ecab4f4dc42c80c0ee1d27cee7df424f63ea8ac95a9fa8b7d1d4e17295f337a5b7199a0d56be73a173ef97567e3ccdc56646d1658be969c7ce39874e1561c0083996451a19ab7d3f224f195ac8c53865a1193716cb900cee605788730636693a59b13d9e31fc416d887a2e9a8c282cb932b53153ff4f6458b9f538bf065f0029e7cae17b28b9cd4381e4800a02003769e15bed475810278fab34abe864807ca2af1ba6e920eeaa98ea00ff584f875d2135e6da1ac7e1db85b265e9316f68206d5ef063b77dd675424afc8c212ce4084f1b047cc1816d63b214b7102cdf9957251ad300