www.fsbmsla.com
- Glacier Bank -
Issued by GeoTrust EV RSA CA 2018
About this certificate
This digital certificate with serial number 05:84:dd:ac:30:48:82:8e:fc:37:ae:76:47:97:13:df was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Glacier Bank
Company registration number:
D093435
Organization: Glacier Bank
Organization unit: Online Services
Organization: Glacier Bank
Organization unit: Online Services
State / Province:
Montana
Locality: Kalispell
Country: US
Locality: Kalispell
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:84:dd:ac:30:48:82:8e:fc:37:ae:76:47:97:13:dfSerial Number (int): 7336019218960475759806254013262271455
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: c2:7b:26:00:95:7b:ff:78:da:da:8c:59:e7:1c:8d:cf:07:68:9b:be
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58
Fingerprint (sha1): 20:ab:8a:5d:01:fc:3c:40:e5:f4:32:c7:20:4b:25:31:44:fe:ee:b4
Fingerprint (sha256): 74:30:67:27:fe:db:2d:98:3a:8c:ba:24:e6:04:2e:2f:3f:2f:d3:40:b6:ae:d2:50:63:6b:a6:32:bb:f6:bd:8d
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl
Check the revocation status for certificate www.fsbmsla.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.fsbmsla.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.fsbmsla.com
fsbmsla.com
fsbmsla.com
Other certificates including the domain name fsbmsla.com
(limited to 100 certificates)
mortgage.1stbmt.com.roostify.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
mortgage.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
fsbmsla.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.banksanjuans.com
mortgage.gofirstbank.com
mortgage.gofirstbank.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.banksanjuans.com
www.fsbmsla.com
mortgage.1stbmt.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.valleybankhelena.com.roostify.com
fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.fsbwy.com
mortgage.banksanjuans.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.1stbmt.com
mortgage.fcbutah.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.quickapply.fsbmsla.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
mortgage.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
fsbmsla.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.banksanjuans.com
mortgage.gofirstbank.com
mortgage.gofirstbank.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.banksanjuans.com
www.fsbmsla.com
mortgage.1stbmt.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.valleybankhelena.com.roostify.com
fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.fsbwy.com
mortgage.banksanjuans.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.1stbmt.com
mortgage.fcbutah.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.quickapply.fsbmsla.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
Certificate
The complete raw certificate details for www.fsbmsla.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIQBYTdrDBIgo78N652R5cT3zANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdHZW9UcnVzdCBFViBSU0EgQ0EgMjAx ODAeFw0xODExMDcwMDAwMDBaFw0yMDExMDYxMjAwMDBaMIHeMR0wGwYDVQQPDBRQ cml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysGAQQBgjc8AgEDEwJVUzEYMBYGCysG AQQBgjc8AgECEwdNb250YW5hMRAwDgYDVQQFEwdEMDkzNDM1MQswCQYDVQQGEwJV UzEQMA4GA1UECBMHTW9udGFuYTESMBAGA1UEBxMJS2FsaXNwZWxsMRUwEwYDVQQK EwxHbGFjaWVyIEJhbmsxGDAWBgNVBAsTD09ubGluZSBTZXJ2aWNlczEYMBYGA1UE AxMPd3d3LmZzYm1zbGEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgMXoYvIUKUZUHrdDua+1V3L3voTC9yW9VTxsdnax+/v9dDOvWZyyQxbCYY3 285ND1pnDMWPwHpENwKP7l3s2yWpFeOl+eiEAMTcgCkX86Ex+Eka7IAKs27HUZBr UCZqQyAv/YWorXp4QP+9qo/BBYsOafGdDdP791017JDZmQJgHRV8mdYZTyM074pK Z28G+52yV1FpSWZKrTnL82SY5H7Gyt4rOOfdezwVmuwPkhRjrM8AcvEsJC4qKoM2 wnqtFJa9zj7BZbGzrbPBaMLzT+Sm/RjIuv/gQl7uyJ4TQYsl8OXaKeyvUuExtF5v EnkalDpDMdyWkScAXHuQUV8fDQIDAQABo4IDLzCCAyswHwYDVR0jBBgwFoAUypJn UmHervy6Iit/HIdMJftvmVgwHQYDVR0OBBYEFMJ7JgCVe/942tqMWeccjc8HaJu+ MCcGA1UdEQQgMB6CD3d3dy5mc2Jtc2xhLmNvbYILZnNibXNsYS5jb20wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBABgNVHR8E OTA3MDWgM6Axhi9odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdEVWUlNB Q0EyMDE4LmNybDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsGAQUFBwIB FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMHcGCCsGAQUF BwEBBGswaTAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20w PwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVz dEVWUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwE ggFoAWYAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWbutKr2 AAAEAwBHMEUCIQDAc7RcRNfjco0sys8HCfr6kGQUWIC7329RUC7SEzYPXAIgARV2 b20nuv1m8kzLt7pAiIDxlTUH3P1TjnRJjP8ccmQAdQBWFAaaL9fC7NP14b1Esj7H Rna5vJkRXMDvlJhV1onQ3QAAAWbutKsHAAAEAwBGMEQCIGVQagBg5xca2X8HdLPD wz6lfFh/9DISouYBvZg/T27TAiBzpgiTCP8Yt/0a36Q4RaKWGQ9zNtSKJyyUmUuD Yn1SsgB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZu60rIEA AAQDAEYwRAIgf6XdnnjacUOHEFf+IKC4Z9PkKCgB86DdNSvMQRMw/kkCIA9udvof cHkcVslpYsb97y0AITpQlghTG0atA+vRBMytMA0GCSqGSIb3DQEBCwUAA4IBAQCH pWqNqVy+TsAeNV6ESKORejCov4bvN48gq3+AtI01I1eqpe7DRmnYJrD2jwhIZPho KdLVKLOJIS8NLgdOU9KEOEAzBTlO1tc98njH4REMx+MqufkY2DerBK4ldaHVIoyC 3jT9V74bPKD1aizv+OO92w3F+aXijFK1kmd+oPy1ENzJ0YmdAj0ZvBXe7mfCowwh IAKuaIqXifMw6naFeJOsVi4EUNGx+PE3iIpNaXAvuv/jcPB4THTi4T7ve1WpujDo g9UPcx9wxVWuHP1GT3diUn7N02TROR7bZvtk613IL/5Ok6WBReaC0EzsTE1TAxQ9 tc7vLHqYvrq4OL8LFIQp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgMXoYvIUKUZUHrdDua+ 1V3L3voTC9yW9VTxsdnax+/v9dDOvWZyyQxbCYY3285ND1pnDMWPwHpENwKP7l3s 2yWpFeOl+eiEAMTcgCkX86Ex+Eka7IAKs27HUZBrUCZqQyAv/YWorXp4QP+9qo/B BYsOafGdDdP791017JDZmQJgHRV8mdYZTyM074pKZ28G+52yV1FpSWZKrTnL82SY 5H7Gyt4rOOfdezwVmuwPkhRjrM8AcvEsJC4qKoM2wnqtFJa9zj7BZbGzrbPBaMLz T+Sm/RjIuv/gQl7uyJ4TQYsl8OXaKeyvUuExtF5vEnkalDpDMdyWkScAXHuQUV8f DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7336019218960475759806254013262271455 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D093435' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kalispell' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glacier Bank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Online Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fsbmsla.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22471943158234287010594832318316675158510117120391686683169649383710133110395748852086974980584560929446274031171721591677298248846397279059548430778127853345538814808807318211092503211405753665746654270826867316608585333295313005829545497712528127923216585381012762508390039413125310420022367555182304542560482588743890986765810973393700422155778316906533790453931161207207758247244389128540905133112072085680264438881339164552991789625376283859589813487196741625819817460709914712852527776883391107820148292868869862826495935146703090105736035634924943515294554078947772047231723298090257252393591925266867132768013 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c27b2600957bff78dada8c59e71c8dcf07689bbe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsbmsla.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsbmsla.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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