www.highmarkfcu.com
- Highmark Federal Credit Union -
Issued by GeoTrust EV RSA CA 2018
About this certificate
This digital certificate with serial number 02:e8:03:fd:e4:21:b4:a1:88:e2:ab:4e:8a:33:ec:b1 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Highmark Federal Credit Union
Company registration number:
4122
Organization: Highmark Federal Credit Union
Organization unit: Online Services
Organization: Highmark Federal Credit Union
Organization unit: Online Services
State / Province:
South Dakota
Locality: Rapid City
Country: US
Locality: Rapid City
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:e8:03:fd:e4:21:b4:a1:88:e2:ab:4e:8a:33:ec:b1Serial Number (int): 3863149825307168616585677600413969585
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 09:84:89:a9:f0:84:84:1d:26:40:60:bb:b1:9c:1f:ec:bd:33:48:9b
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58
Fingerprint (sha1): b4:19:db:94:68:8a:ee:c6:44:7b:36:16:c8:fc:c0:3d:98:50:6b:3b
Fingerprint (sha256): 90:f9:56:b5:66:c2:80:5d:89:d5:ad:0d:ac:0f:88:00:19:99:b1:0d:34:7d:d1:d3:1e:6f:2e:a2:6c:88:3d:5b
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl
Check the revocation status for certificate www.highmarkfcu.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.highmarkfcu.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
Other certificates including the domain name highmarkfcu.com
(limited to 100 certificates)
highmarkfcu.com
mail.highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
www.highmarkfcu.com
highmarkfcu.com
supportdesk.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
mail.highmarkfcu.com
mail.highmarkfcu.com
mail.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
supportdesk.highmarkfcu.com
mail.highmarkfcu.com
highmarkfcu.com
sslvpn.highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
www.highmarkfcu.com
start.highmarkfcu.com
monitor.highmarkfcu.com
mail.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
start.highmarkfcu.com
highmarkfcu.com
synapsys.highmarkfcu.com
highmarkfcu.com
cm.helpdesk.carimed.com
monitor.highmarkfcu.com
secure.highmarkfcu.com
sslvpn.highmarkfcu.com
ithelp.mainecc.edu
sd.globalrateset.com
mail.highmarkfcu.com
www.highmarkfcu.com
secure.highmarkfcu.com
start.highmarkfcu.com
highmarkfcu.com
start.highmarkfcu.com
highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
sslvpn.highmarkfcu.com
*.highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
mail.highmarkfcu.com
supportdesk.highmarkfcu.com
*.highmarkfcu.com
highmarkfcu.com
synapsys.highmarkfcu.com
start.highmarkfcu.com
supportdesk.highmarkfcu.com
highmarkfcu.com
start.highmarkfcu.com
mail.highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
www.highmarkfcu.com
highmarkfcu.com
supportdesk.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
mail.highmarkfcu.com
mail.highmarkfcu.com
mail.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
supportdesk.highmarkfcu.com
mail.highmarkfcu.com
highmarkfcu.com
sslvpn.highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
www.highmarkfcu.com
start.highmarkfcu.com
monitor.highmarkfcu.com
mail.highmarkfcu.com
highmarkfcu.com
highmarkfcu.com
start.highmarkfcu.com
highmarkfcu.com
synapsys.highmarkfcu.com
highmarkfcu.com
cm.helpdesk.carimed.com
monitor.highmarkfcu.com
secure.highmarkfcu.com
sslvpn.highmarkfcu.com
ithelp.mainecc.edu
sd.globalrateset.com
mail.highmarkfcu.com
www.highmarkfcu.com
secure.highmarkfcu.com
start.highmarkfcu.com
highmarkfcu.com
start.highmarkfcu.com
highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
sslvpn.highmarkfcu.com
*.highmarkfcu.com
sslvpn.highmarkfcu.com
highmarkfcu.com
mail.highmarkfcu.com
supportdesk.highmarkfcu.com
*.highmarkfcu.com
highmarkfcu.com
synapsys.highmarkfcu.com
start.highmarkfcu.com
supportdesk.highmarkfcu.com
highmarkfcu.com
start.highmarkfcu.com
Certificate
The complete raw certificate details for www.highmarkfcu.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIQAugD/eQhtKGI4qtOijPssTANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdHZW9UcnVzdCBFViBSU0EgQ0EgMjAx ODAeFw0yMDAzMTkwMDAwMDBaFw0yMjAzMTkxMjAwMDBaMIHcMR0wGwYDVQQPDBRQ cml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysGAQQBgjc8AgEDEwJVUzENMAsGA1UE BRMENDEyMjELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFNvdXRoIERha290YTETMBEG A1UEBxMKUmFwaWQgQ2l0eTEmMCQGA1UEChMdSGlnaG1hcmsgRmVkZXJhbCBDcmVk aXQgVW5pb24xGDAWBgNVBAsTD09ubGluZSBTZXJ2aWNlczEcMBoGA1UEAxMTd3d3 LmhpZ2htYXJrZmN1LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJOe6PgwW4os4/aHV55NCjY6d7nBIKK9x6qFMpcVss44wzbT7uF36/DJPZDq/8HR 90RP2GXp67pWO57znrVtFmhCtQVKw+mKgmgjkE60UQ4DmB1Msla2gvJJZF9MMWXJ jXYekIgTDhOzUIYeA2yz/5GANKBA1XhA4uF/XAfe1usdbqRd4wjL8RYW+YMH3/5X 3dU07Wwwj5UPsLUbeUCzlSBW+fh1dVLQ+GHNsx11wNW3qf/9cBdvBioQu5iWVV0R LiF86QAN30NS8dzrGS2s/kzAQ64dj5NMSQ/o1xUN9ib6gIQVDL6TDLBGnoh5aX3a rzGXYS79JdAOYN6feF687I0CAwEAAaOCAzowggM2MB8GA1UdIwQYMBaAFMqSZ1Jh 3q78uiIrfxyHTCX7b5lYMB0GA1UdDgQWBBQJhImp8ISEHSZAYLuxnB/svTNImzAv BgNVHREEKDAmghN3d3cuaGlnaG1hcmtmY3UuY29tgg9oaWdobWFya2ZjdS5jb20w DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBA BgNVHR8EOTA3MDWgM6Axhi9odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVz dEVWUlNBQ0EyMDE4LmNybDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsG AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMHcG CCsGAQUFBwEBBGswaTAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz dC5jb20wPwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H ZW9UcnVzdEVWUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIE AgSCAW8EggFrAWkAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAA AXDzBPUBAAAEAwBIMEYCIQDnHo0xXGTx+BibN+XqoHJOipt/+BbNkEs+r4QzYQwx nAIhAL+rzwvc2HGXwg1/aA9GIrulf9UoAotT6fmFGcKOX6eQAHYAVhQGmi/XwuzT 9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFw8wT1LgAABAMARzBFAiB0SkdxfOvc n07Di+tKyFsLnbwDisq6Kzd6Rcv1o2xYgwIhAMG+Z24Df7BXcBlGE41uyytyJUH8 6H3mD1n3ZDxyw2EgAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUA AAFw8wT07wAABAMARzBFAiEA44x1KD6l+Jr1ndpWSF5wy91U05BoC5WBLMW5gSQ2 i2sCIDtU6euvCecVeolFwvzLBo1OEu8tV0GxijM04NPG+CRdMA0GCSqGSIb3DQEB CwUAA4IBAQB9ew4awWjbEYGrasOVSW+B5dk40yMRdJl7kVqgychl/NpzXM7qhnrl TZpdBPYsLVt/f80zf08NFwQ/mAz+Ww4MT2sgHnL+lScTgCfVDeH8kgFT3a9xe9e7 XBpiu8notzoA61n+RDsWOS0/Ak+b0FOvftuFrug0uCeLcE0qI8D+Tk6VzLEb1NuS EsLvKJxIo2365PfBAV3zOtCCpJmBotdkQqgD4S3crOhxDWMSvtVF3LmXpUDLSXi9 /h1im81PDXx/zDQZ46Koxhv45dXl9g1szgPWnQ0TRam3vyKV1j9U+GVdyp1Fpv3p N40f4/nV66V6w0XzyNitcpFN+IaIeRdt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk57o+DBbiizj9odXnk0K Njp3ucEgor3HqoUylxWyzjjDNtPu4Xfr8Mk9kOr/wdH3RE/YZenrulY7nvOetW0W aEK1BUrD6YqCaCOQTrRRDgOYHUyyVraC8klkX0wxZcmNdh6QiBMOE7NQhh4DbLP/ kYA0oEDVeEDi4X9cB97W6x1upF3jCMvxFhb5gwff/lfd1TTtbDCPlQ+wtRt5QLOV IFb5+HV1UtD4Yc2zHXXA1bep//1wF28GKhC7mJZVXREuIXzpAA3fQ1Lx3OsZLaz+ TMBDrh2Pk0xJD+jXFQ32JvqAhBUMvpMMsEaeiHlpfdqvMZdhLv0l0A5g3p94Xrzs jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3863149825307168616585677600413969585 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4122' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Dakota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rapid City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Highmark Federal Credit Union' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Online Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.highmarkfcu.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18635392289857505860632360312576521792401130873232479415237412114479530923277176516763321579134038956174550270668563172392448821545901515613513996535754600949275981203963783433092298905973122455174051373471174089898779492832003373437156609403897168784642740468035824487595636017805436306263373921148731807605007193693399637855507858141389717449594714784327738499084945777593942345200695115966713040648203187166222640126362024052041937017833307237431236469470916349324044591182441375819122189784270341918165899793762712485236024998542101284589140846834435378767652833478142276024788948817398648580051050588887202983053 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 098489a9f084841d264060bbb19c1fecbd33489b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highmarkfcu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highmarkfcu.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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