xto.ironsight.ca
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 01:4d:c9:eb:61:16:43:29:51:2e:0b:8c:a9:4a:44:e7 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=xto.ironsight.ca
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:4d:c9:eb:61:16:43:29:51:2e:0b:8c:a9:4a:44:e7Serial Number (int): 1733130266887581919597681619199739111
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 47:22:0d:b7:41:26:b7:41:06:dc:1f:cf:37:02:9e:d5:ee:41:b5:2d
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 36:71:e5:cf:60:8c:c8:f2:79:b7:ec:ff:f3:03:d7:0f:b2:9c:5e:63
Fingerprint (sha256): 8a:85:9c:b0:52:ba:9a:0c:84:48:29:db:c3:da:25:08:06:83:f8:f4:81:46:1c:c5:f2:4f:aa:30:d2:7c:68:bd
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate xto.ironsight.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xto.ironsight.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
xto.ironsight.ca
Other certificates including the domain name ironsight.ca
(limited to 100 certificates)
login.ironsight.ca
ironsight.ca
ironsight.ca
login.ironsight.ca
ironsight.ca
www.ironsight.ca
pevachcorp.ironsight.ca
login.ironsight.ca
bme.ironsight.ca
chemco.ironsight.ca
imperialcoldlake.ironsight.ca
demo.ironsight.ca
chemco.ironsight.ca
staging.paperless.ironsight.ca
www.ironsight.ca
www.ironsight.ca
demo.ironsight.ca
platinum.ironsight.ca
www.ironsight.ca
ironsight.ca
ironsight.ca
ironsight.ca
www.ironsight.ca
www.overt.com.br
pevachcorp.ironsight.ca
demo.ironsight.ca
demo.ironsight.ca
staging.ironsight.ca
ironsight.ca
ajistudios.com
login.ironsight.ca
www.ironsight.ca
www.ironsight.ca
www.ironsight.ca
www.ironsight.ca
accounts.yourarq.com
ironsight.ca
ironsight.ca
www.notah.net
ironsight.ca
securedomain.org
www.ironsight.ca
ironsight.ca
paperless.ironsight.ca
ironsight.ca
www.ironsight.ca
paperless.ironsight.ca
pevachcorp.ironsight.ca
ironsight.ca
imperialcoldlake.ironsight.ca
intelligere.co
app.chroniclebot.com
imperialcoldlake.ironsight.ca
staging.paperless.ironsight.ca
ironsight.ca
www.ironsight.ca
www.ironsight.ca
ironsight.ca
www.ironsight.ca
demo.ironsight.ca
www.ironsight.ca
ior.ironsight.ca
demo.ironsight.ca
xto.ironsight.ca
imperialcoldlake.ironsight.ca
ciscoandmj.com
ironsight.ca
www.ironsight.ca
chemco.ironsight.ca
cnrlthermal.ironsight.ca
chemco.ironsight.ca
admin.tech.hpcindustrial.app
imperialcoldlake.ironsight.ca
www.cinqtortues.ca
ironsight.ca
ironsight.ca
primedenglish.com
demo.ironsight.ca
www.cinqtortues.ca
ironsight.ca
ironsight.ca
www.longanespa.com
dev.ironsight.ca
sabayget.com
ironsight.ca
11521764.peerly.app
demo.ironsight.ca
demmel.be
feedback.cemtrik.com
www.ironsight.ca
login.ironsight.ca
ironsight.ca
polarcode.app
www.ironsight.ca
login.ironsight.ca
imperialcoldlake.ironsight.ca
www.ironsight.ca
platinum.ironsight.ca
platinum.ironsight.ca
pevachcorp.ironsight.ca
ironsight.ca
ironsight.ca
login.ironsight.ca
ironsight.ca
www.ironsight.ca
pevachcorp.ironsight.ca
login.ironsight.ca
bme.ironsight.ca
chemco.ironsight.ca
imperialcoldlake.ironsight.ca
demo.ironsight.ca
chemco.ironsight.ca
staging.paperless.ironsight.ca
www.ironsight.ca
www.ironsight.ca
demo.ironsight.ca
platinum.ironsight.ca
www.ironsight.ca
ironsight.ca
ironsight.ca
ironsight.ca
www.ironsight.ca
www.overt.com.br
pevachcorp.ironsight.ca
demo.ironsight.ca
demo.ironsight.ca
staging.ironsight.ca
ironsight.ca
ajistudios.com
login.ironsight.ca
www.ironsight.ca
www.ironsight.ca
www.ironsight.ca
www.ironsight.ca
accounts.yourarq.com
ironsight.ca
ironsight.ca
www.notah.net
ironsight.ca
securedomain.org
www.ironsight.ca
ironsight.ca
paperless.ironsight.ca
ironsight.ca
www.ironsight.ca
paperless.ironsight.ca
pevachcorp.ironsight.ca
ironsight.ca
imperialcoldlake.ironsight.ca
intelligere.co
app.chroniclebot.com
imperialcoldlake.ironsight.ca
staging.paperless.ironsight.ca
ironsight.ca
www.ironsight.ca
www.ironsight.ca
ironsight.ca
www.ironsight.ca
demo.ironsight.ca
www.ironsight.ca
ior.ironsight.ca
demo.ironsight.ca
xto.ironsight.ca
imperialcoldlake.ironsight.ca
ciscoandmj.com
ironsight.ca
www.ironsight.ca
chemco.ironsight.ca
cnrlthermal.ironsight.ca
chemco.ironsight.ca
admin.tech.hpcindustrial.app
imperialcoldlake.ironsight.ca
www.cinqtortues.ca
ironsight.ca
ironsight.ca
primedenglish.com
demo.ironsight.ca
www.cinqtortues.ca
ironsight.ca
ironsight.ca
www.longanespa.com
dev.ironsight.ca
sabayget.com
ironsight.ca
11521764.peerly.app
demo.ironsight.ca
demmel.be
feedback.cemtrik.com
www.ironsight.ca
login.ironsight.ca
ironsight.ca
polarcode.app
www.ironsight.ca
login.ironsight.ca
imperialcoldlake.ironsight.ca
www.ironsight.ca
platinum.ironsight.ca
platinum.ironsight.ca
pevachcorp.ironsight.ca
Certificate
The complete raw certificate details for xto.ironsight.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIQAU3J62EWQylRLguMqUpE5zANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMDAzMzEwMDAwMDBaFw0yMDA5MzAxMjAwMDBaMBsxGTAXBgNVBAMTEHh0by5p cm9uc2lnaHQuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSvbY ezt1uL4ELcO8i9w208gAhWWAK9jESBuzBGp+FKn9k4qSPT/musbDTjIfvZCIL6Fu e6HGzCXIxqkPHMC74q4Wsqb3ia5xreLozQO+ZiDKCxqQYJ508xjsAxpss9by6w/p fO84zjSKrWscPR8xm18wCq/iPj/U2cTzh5FSKlyOnM/VE2SEJe1nvCSuRrjJCzDr +StF+VZ1bMO8dopLL5o8lOBpA4uFA3QabOpfGdFVc2mjoEgJB17IRuSgTTozSi2r O+uZyXG59crr5X4kahQTUKnQFLjCrmcEAnj+RHT8XJhreUbzK+oeQsaMhIjrXkSO 3bATdp0mkP10KtovAgMBAAGjggG1MIIBsTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3 se3yo0MWOJ5sxTAdBgNVHQ4EFgQURyINt0Emt0EG3B/PNwKe1e5BtS0wGwYDVR0R BBQwEoIQeHRvLmlyb25zaWdodC5jYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9j ZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBD MDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGG Gmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8v Y2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1Ud EwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABvk fGKCoB19nVhU4XjJ5p0rTHfJsgEBclwVKvyoUcOxvERWfYeadzoU/XnZPsqOj4aL 1Se8CYTKTbzEb8FE8NDMuwFBnWW/omFC9F4keDUJVBc3qz+SrMloOPYjHnTqPRb2 GBqFnpV0lLHuTadoWg7U3k2IO20E8ZnCiO/NiY9UVvbSU3M9uln5oTeFlZYv/SCX FvPag0F6/mt9gG62jkX9pOQTknrCW2mdmhb6DfLUH0iiLPI9EJVbc2THHHWkTZbM IpDjub0paALrTpUPzjx1MQmcSzZaJZxSodjQbhPVIcixT8j5wSYWhCI1aTmzP5wU UIpFFm4AmMtmghlWBBI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEr22Hs7dbi+BC3DvIvc NtPIAIVlgCvYxEgbswRqfhSp/ZOKkj0/5rrGw04yH72QiC+hbnuhxswlyMapDxzA u+KuFrKm94muca3i6M0DvmYgygsakGCedPMY7AMabLPW8usP6XzvOM40iq1rHD0f MZtfMAqv4j4/1NnE84eRUipcjpzP1RNkhCXtZ7wkrka4yQsw6/krRflWdWzDvHaK Sy+aPJTgaQOLhQN0GmzqXxnRVXNpo6BICQdeyEbkoE06M0otqzvrmclxufXK6+V+ JGoUE1Cp0BS4wq5nBAJ4/kR0/FyYa3lG8yvqHkLGjISI615Ejt2wE3adJpD9dCra LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1733130266887581919597681619199739111 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xto.ironsight.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25789580457937467887256913756251661233023798900521659330268021237756290570358933843186322620001140578951729080194932501411975960607101405798923526272823130116541587962031468224477405606912580299360838607016107533026245779137664220439648798277982049258557249237732312516592200794046705405876515303610835441841654222739733765584415064643667460760421852988174536144203844801499349899502890182650665318698586946046997643414123374382109702335561878453392287486329356871257755293669565275792835278265100133782342783622658752988130084178387462630282705514205311156768277268838112876630661545953479260578175995857907202316847 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 47220db74126b74106dc1fcf37029ed5ee41b52d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xto.ironsight.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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