www.mkspamp.com
- MKS PAMP GROUP B.V. -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0c:1e:27:2f:91:d0:f6:01:88:57:30:a2:80:85:f9:cb was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
MKS PAMP GROUP B.V.
Organization:
MKS PAMP GROUP B.V.
Locality:
Amsterdam
Country: NL
Country: NL
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:1e:27:2f:91:d0:f6:01:88:57:30:a2:80:85:f9:cbSerial Number (int): 16107299638001160614272782879101942219
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 7b:e4:e9:86:00:1a:56:4f:41:9e:4f:06:15:08:7b:0e:ac:eb:a7:56
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 91:db:eb:7d:5b:e9:53:d9:27:54:b3:10:c6:25:b7:be:b5:91:77:91
Fingerprint (sha256): 7c:2b:d1:57:ee:33:83:18:03:f2:94:51:35:30:65:c1:d4:d2:b6:06:11:5b:0f:d7:22:f1:8b:d5:02:99:2d:03
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.mkspamp.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.mkspamp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.mkspamp.com
mkspamp.com
mkspamp.com
Other certificates including the domain name mkspamp.com
(limited to 100 certificates)
ithelp.visionrt.com
www.mkspamp.com
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
mkspamp.com
support.erm.com
ithelp.visionrt.com
mkspamp.com
mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
support.erm.com
mkspamp.com
servicedesk.hermesairports.com
mkspamp.com
helpdesk.fast.eu
uat.mkspamp.com
it.littlegarth.org
it.littlegarth.org
*.mkspamp.com
www.mkspamp.com
uat.mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
itdesk.mkspamp.com
servicedesk.hermesairports.com
support.erm.com
servicedesk.hermesairports.com
uat.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
it.littlegarth.org
*.mkspamp.com
servicedesk.hermesairports.com
www.mkspamp.com
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
mkspamp.com
support.erm.com
ithelp.visionrt.com
mkspamp.com
mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
support.erm.com
mkspamp.com
servicedesk.hermesairports.com
mkspamp.com
helpdesk.fast.eu
uat.mkspamp.com
it.littlegarth.org
it.littlegarth.org
*.mkspamp.com
www.mkspamp.com
uat.mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
itdesk.mkspamp.com
servicedesk.hermesairports.com
support.erm.com
servicedesk.hermesairports.com
uat.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
it.littlegarth.org
*.mkspamp.com
servicedesk.hermesairports.com
Certificate
The complete raw certificate details for www.mkspamp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIQDB4nL5HQ9gGIVzCigIX5yzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODEyMDUwMDAwMDBaFw0yMDEyMDQxMjAwMDBaMFkxCzAJBgNVBAYTAk5MMRIw EAYDVQQHEwlBbXN0ZXJkYW0xHDAaBgNVBAoTE01LUyBQQU1QIEdST1VQIEIuVi4x GDAWBgNVBAMTD3d3dy5ta3NwYW1wLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANxj1SPV7R1dtwrYK3yvtiNNQYlgoeEtWopHkCDuUKt51QCLEjUv o3Dc7pNmUYuX7eqmCFL0SPHZr6ECJBjX7SL/OhLv1n21QJCt8rgR46aPN21ogiy+ 9emF3pkWg+zmOEG2Y4nsqWGOEjifOfeao6ObCs8XaO5JlYe6dV4FnH0/Bw/GZous J6mmBHZylYyTBwB3ylCp6I4l7A1P0wXY8RAfRHA//45zxqjrwegdC4mnJ5r7TVjs 1wTEwTur4oZR43eaO0y97/f24BFz6revIiwcyu3X4BjxTQplsU33jjA8vaSZiv/U HHu1rHRxVqUUpgWqNqp9oHsLn4IrVjybUW0CAwEAAaOCAy0wggMpMB8GA1UdIwQY MBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBR75OmGABpWT0GeTwYV CHsOrOunVjAnBgNVHREEIDAegg93d3cubWtzcGFtcC5jb22CC21rc3BhbXAuY29t MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw PgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1 c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUG CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H ZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAX0GCisGAQQB1nkCBAIE ggFtBIIBaQFnAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFn fcm40QAABAMARjBEAiBWES0HyUxRaX6tolvvOTU1vjqaQ1X6Gsz7QZrfq1U+bwIg CGWIcgCeq69O4PSHK+u1LmopMTuryPr0s22uZ3LWBC4AdgCHdb/nWXz4jEOZX73z bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWd9ybmlAAAEAwBHMEUCIGOq402jJ2oqlqrp JpP+TyqJ+sDtuTjG5KUPiyQ18zuYAiEAgJwfk7FilsRX4a1k4SY03o4YGLDQ8y9A VAAAXfXO4PEAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWd9 yboqAAAEAwBHMEUCIQCcywr3fJN9FV7Q1pfwxBJvwIlYXo86GkK1dka/Xb3GNQIg Gg5KZeck8Xfh3XWGhV9p/YAndEM0QviIz2n5lyD2mykwDQYJKoZIhvcNAQELBQAD ggEBAB+/aMOA72wD28fDyh5q/Quy4BNlGt2H/NM3Sb48ZjKvCJ/9BApnLqZfZ37T 9PY5+Frh4Vtg+x52bcDHgf5F8P09Surg03wKfYt/iU+lz6hyZh1fGeN2MVpvNFN+ OtJ1fxP142OskFzlh6OtVInLDggQOI66k/+ahyvpKO2/AYhOox7Naedv88mTE3PQ zF3tFTiNzRQ7pdhNrzifR+Qu4jm8dwCy+fBNlkxLzjF8m1tbt8NeS3dP/br3rCmB JqAXk5kyS04tuqgaRYWXgTMrjr/st6vnm5x8j8uRhqskuQMAB6pGz1rw7SLsmv14 3mnG4h41qcmMSk3bq11X1hx/SFU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GPVI9XtHV23CtgrfK+2 I01BiWCh4S1aikeQIO5Qq3nVAIsSNS+jcNzuk2ZRi5ft6qYIUvRI8dmvoQIkGNft Iv86Eu/WfbVAkK3yuBHjpo83bWiCLL716YXemRaD7OY4QbZjieypYY4SOJ8595qj o5sKzxdo7kmVh7p1XgWcfT8HD8Zmi6wnqaYEdnKVjJMHAHfKUKnojiXsDU/TBdjx EB9EcD//jnPGqOvB6B0LiacnmvtNWOzXBMTBO6vihlHjd5o7TL3v9/bgEXPqt68i LBzK7dfgGPFNCmWxTfeOMDy9pJmK/9Qce7WsdHFWpRSmBao2qn2gewufgitWPJtR bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16107299638001160614272782879101942219 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MKS PAMP GROUP B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mkspamp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27821656371573956191326667812871931714693599207246227785326666332199652979205076574279795017730513535100452229741942415467130265213914060659719004922143501482391010256286350952342673586513028173119110071976304117548261849734230335726405204884605510139540286885814858860496556268169166639693263557921354015481299920171334146989648907467055676509656158620215415224329145277813256632910561106043573422082951928396854758909968218963253798215857724173196101904308735061935029596143086188975586413340917816331035263646944969957374621645256517041389157101930333318393198386667758732192215672022482052176604486667671621554541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7be4e986001a564f419e4f0615087b0eaceba756 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkspamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkspamp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001fbf68c380ef6c03dbc7c3ca1e6afd0bb2e013651add87fcd33749be3c6632af089ffd040a672ea65f677ed3f4f639f85ae1e15b60fb1e766dc0c781fe45f0fd3d4aeae0d37c0a7d8b7f894fa5cfa872661d5f19e376315a6f34537e3ad2757f13f5e363ac905ce587a3ad5489cb0e0810388eba93ff9a872be928edbf01884ea31ecd69e76ff3c9931373d0cc5ded15388dcd143ba5d84daf389f47e42ee239bc7700b2f9f04d964c4bce317c9b5b5bb7c35e4b774ffdbaf7ac298126a0179399324b4e2dbaa81a45859781332b8ebfecb7abe79b9c7c8fcb9186ab24b9030007aa46cf5af0ed22ec9afd78de69c6e21e35a9c98c4a4ddbab5d57d61c7f4855