*.uk.novamedia.com
- Novamedia B.V. -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0a:90:b1:16:54:e8:8c:44:50:7a:8a:6e:74:0a:d1:00 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Novamedia B.V.
Organization:
Novamedia B.V.
Organization unit: Novamedia B.V.
Organization unit: Novamedia B.V.
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:90:b1:16:54:e8:8c:44:50:7a:8a:6e:74:0a:d1:00Serial Number (int): 14043562461275469573655805976839377152
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 39:32:68:50:42:6c:34:91:7b:b6:d0:86:55:2d:2e:0c:44:14:e8:12
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 1d:12:c6:7d:48:3f:75:61:e5:95:09:49:0e:65:69:e2:2d:8e:71:47
Fingerprint (sha256): 8e:1e:37:71:09:22:27:ff:a2:bf:3f:0b:1d:34:64:bc:ea:5e:be:6c:70:37:3a:4d:ea:70:6f:df:94:72:b2:ae
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.uk.novamedia.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.uk.novamedia.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.uk.novamedia.com
Other certificates including the domain name novamedia.com
(limited to 100 certificates)
fs.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com
Certificate
The complete raw certificate details for *.uk.novamedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgIQCpCxFlTojERQeopudArRADANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODA4MTMwMDAwMDBaFw0xOTExMTMxMjAwMDBaMIGIMQswCQYDVQQGEwJOTDEW MBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFtMRcwFQYD VQQKEw5Ob3ZhbWVkaWEgQi5WLjEXMBUGA1UECxMOTm92YW1lZGlhIEIuVi4xGzAZ BgNVBAMMEioudWsubm92YW1lZGlhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBAN4WZapQo85ShQd+jL9WXH105s9B6PmqfqneNJL+CVUg8ziNxwme C0e33Fyy77ZSA47XuABeS1Mel+LZh8SVwqftMWDzXfLmdFv3tdo5XC4WyF8oey6M dZQYYKDG8efx09o0eUetyw41ovMkBJhB2NU65V8G/NwvhVEl6tTgc9H2MGreEqDV IiXWoZ2PsIHUzUZqmr/C8uXnU/WgZgpSx3Rv5SlDhXk9EVvR1j9N9n3UnRSUtEZS bb1t2PHOvx2c+ZqS3dPsh5jed7XtKkEFdl+Qa/T9uA62r0iWxdAD522nszjQRAIP qXjWzyCVy2oGj/+DAVIUxwgP/R6AKhEvwLlbd6IGctKn5x48ms7Oto+RkoGWaG/u OQgMjvT8WCeIgimqGej6qDzzw/3vmYfiNdpJNwjnNmBfa9FHFMvmuo6kTgU5QzBS /FylbdbQMA0DWMBYaXrN5QxQyeI/Vl3TqOlXOaNd74t+EjRXr1p87bGRCJf+FnMO LoU7M9JlURXRQULbfvOWtHdDmm1jIGkk8BBfAtaGgnXQ3Vh6Z44Ak23cCrESwEYz 9GT86MnZerzss+pHj0yktmQ5Wy+/g38pzPYY+JN0ZK0Ff8bD5/2FmaSD7LyYiQ67 TJVdBRcDGvV146i3baZkjUWJPnbSEFVtcPC4o+msVvlElA5+qaugvhnNAgMBAAGj ggG3MIIBszAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4E FgQUOTJoUEJsNJF7ttCGVS0uDEQU6BIwHQYDVR0RBBYwFIISKi51ay5ub3ZhbWVk aWEuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20v R2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCow KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM AQICMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5n ZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0 LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkn8t6TBP/DA7gEZNRmyNoZtc pdX2AhwFsHuNuATuEuQ+LdZ02170uAJE6Ce3ynjkU5r2ed6fqwKmANHP3dGMMclw sMyAPU4VzZN4uFPR/SpQHrcMcgRVbU7RYFvuuYIRO5w/xWtTfUS0cpf4ZucSUUiH aeCw2E97xu5di74XeT9KCX9Udv3XX5/Wgooly4y9auTDbenAPdCqqjMG05hfIw7N ViI0HAwTAsdrwmmOEWVuetaHKmM9c6VOSOsN4x2Dg67iCgfnFNW+pFCmzvKsu3ky b54J6ShEo3XvGsWdEpzhyEtb1On2vW0UHlDixS3NxGnouUWPvXy4CorQ6hcV5g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3hZlqlCjzlKFB36Mv1Zc fXTmz0Ho+ap+qd40kv4JVSDzOI3HCZ4LR7fcXLLvtlIDjte4AF5LUx6X4tmHxJXC p+0xYPNd8uZ0W/e12jlcLhbIXyh7Lox1lBhgoMbx5/HT2jR5R63LDjWi8yQEmEHY 1TrlXwb83C+FUSXq1OBz0fYwat4SoNUiJdahnY+wgdTNRmqav8Ly5edT9aBmClLH dG/lKUOFeT0RW9HWP032fdSdFJS0RlJtvW3Y8c6/HZz5mpLd0+yHmN53te0qQQV2 X5Br9P24DravSJbF0APnbaezONBEAg+peNbPIJXLagaP/4MBUhTHCA/9HoAqES/A uVt3ogZy0qfnHjyazs62j5GSgZZob+45CAyO9PxYJ4iCKaoZ6PqoPPPD/e+Zh+I1 2kk3COc2YF9r0UcUy+a6jqROBTlDMFL8XKVt1tAwDQNYwFhpes3lDFDJ4j9WXdOo 6Vc5o13vi34SNFevWnztsZEIl/4Wcw4uhTsz0mVRFdFBQtt+85a0d0OabWMgaSTw EF8C1oaCddDdWHpnjgCTbdwKsRLARjP0ZPzoydl6vOyz6kePTKS2ZDlbL7+DfynM 9hj4k3RkrQV/xsPn/YWZpIPsvJiJDrtMlV0FFwMa9XXjqLdtpmSNRYk+dtIQVW1w 8Lij6axW+USUDn6pq6C+Gc0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14043562461275469573655805976839377152 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uk.novamedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906037906220592465577806030897898641847651766754992947298813411428014249587836461200223371860452680943658586496318309886038883644582891391887861600408689341947569577861862019039381377430031308616254398547144976635012174630871360550188705130298486247762669951788007465199394241396273932308849732539443848932120317714382090107510602886752272332124484749630037014685411698556850635623925099714188023583740201144317318134422408215786210675280219837196944143999515080825525821917641748754241951929322775098378350428853171648067648655777242615154677834933230274220171219185852249395527256108081794644769010085388130846697643232123097557329708708878496307789168973075670689567889119810481853699816840190965102969735019902240628430951970135919911192190864836664164057054462713740857983760716808917528928423022341210513676300582128106705841127546480718774130033706454843253628541788801244462847340195041580772359053709571484014899656232277788458809613754639438876586411089439620077750792408040147118059180785307921421593625100197828532884705641806392076898237128760611387255653927606763535235269566972683750822284704470026122889207557145180624049496902124244972226391703144128905903936479619504109384159080496876497939502439343091909306227149 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 39326850426c34917bb6d086552d2e0c4414e812 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uk.novamedia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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