*.lekam.pl

- PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:c0:c7:6e:f6:85:8a:db:e5:4c:aa:bb:87:73:f9:25 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o

Organization: PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o
State / Province: MAZOWIECKIE
Locality: ZAKROCZYM
Country: PL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:c7:6e:f6:85:8a:db:e5:4c:aa:bb:87:73:f9:25
Serial Number (int): 6317877970882108940778573924459084069
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 91:d5:6c:2e:f1:d8:88:fd:ff:0f:f4:7a:78:ad:d1:ca:c4:b8:2f:6c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 26:56:21:f7:36:8c:34:6b:7f:00:74:2c:38:aa:eb:9e:cb:a7:45:53
Fingerprint (sha256): 91:fb:25:75:5a:6e:85:98:bf:24:bf:f0:f4:24:6a:c1:d0:97:43:84:a0:f6:56:b5:5f:c3:01:ce:38:ac:ba:49

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.lekam.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lekam.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lekam.pl
lekam.pl

Other certificates including the domain name lekam.pl

(limited to 100 certificates)
*.lekam.pl
*.lekam.pl
*.lekam.pl
pomoc.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
pomoc.lekam.pl
sd.kormotech.com
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
vpn.lekam.pl
dms.lekam.pl
vpn.lekam.pl
dms.lekam.pl

Certificate

The complete raw certificate details for *.lekam.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjDCCBnSgAwIBAgIQBMDHbvaFitvlTKq7h3P5JTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjA3MjgwMDAwMDBaFw0yMzA4MDIyMzU5NTlaMIGIMQswCQYDVQQGEwJQTDEU
MBIGA1UECBMLTUFaT1dJRUNLSUUxEjAQBgNVBAcTCVpBS1JPQ1pZTTE6MDgGA1UE
CgwxUFJaRURTScSYQklPUlNUV08gRkFSTUFDRVVUWUNaTkUgTEVLLUFNIHNwLiB6
IG8ubzETMBEGA1UEAwwKKi5sZWthbS5wbDCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBALgNQsF2hLmTCjyJ5+3+/tAL7HHRksMfpG6e5jxvzSgJrWpPwMGj
8LnFMvAUiJkXinBVjnSw7B4kfFA3kVPXuLZDq9lf58MOTopuWtbuJcXoUMSAvS62
W5lqcFd//FkA8RNP3lLDgRYIBlhrS792+GXfOHDgC0+UX1H0sJVPStV7ORu63+jp
OIcZ1+2c1sdZYeJ7eSgVfJb74D8sqfgMgeUwhKDJKpH8+krnW7kJ70vDW6Rbo058
7NST5yqm/I6PXNMYcQ/84TOm31ry/XwIzhpDz/naCPIkP93/luOHmdhXDI0ap8hp
3N0YWvX11nRpq2mW2DhSVortJjCZD+alRqYaAF+5rxaSGI6QlfaVb/l6uqZY0Gq/
IMTJtvNFKu44f0MCvCoJfzJE+nGVGtHxyN05XOtfZ45B+c1Lk7AEmi2NrRvffqJw
CV1DkG2RZXxM9fZufmUXlNJwfaUvL7RHJh/9hIGvVhVuKnMsuwr24hA5yV9K+6Xw
LjYOBfLMe+k/wMG/xrFo3zdxRI0p0KRUgxe90eewWOx9jK4N+7rhIuH7e1nqku6U
4HHxCsoF2mHhxjs7YDmioAN9DlrG4HCYe/S8zTTa+KyTuvLEm6pi4zFArrX+q4EK
DG3iCPdwTOOpOBS6hykuksqRCvtCFO34/zeALxNLUSGNue0XiZuuhFhpAgMBAAGj
ggMZMIIDFTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4E
FgQUkdVsLvHYiP3/D/R6eK3RysS4L2wwHwYDVR0RBBgwFoIKKi5sZWthbS5wbIII
bGVrYW0ucGwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNv
bS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAn
BggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHUGCCsGAQUF
BwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20w
PQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVz
dFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIB
awFpAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGCQ/wK0gAA
BAMARzBFAiEArioDL6mFPYV2KIBlsxTayvAF8PCu2LVCbyCi4vHMqbACIArDYZ7g
sKy8g/26rscn44NHOmUKk5KB3fd3cq+7GdJNAHYANc8ZG7+xbFe/D61MbULLu7Yn
ICZR6j/hKu+oA8M71kwAAAGCQ/wKoAAABAMARzBFAiAncwbyzYNTDTucpFulQf8H
ESItzzRMtL2YGotXPoqAiQIhAO2PcbKL/hynonZbpeV3Y2B5OrHcUmqMopASstGS
Kcj9AHcAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGCQ/wKzwAA
BAMASDBGAiEApLsBho9Q5eI7YmXzX3uusGAYi/NVQDdp3jSco6b6uq0CIQC/UfSj
+cLtiQ3MO22tSuRDv2YkpFQw7rRGhRWCULr95zANBgkqhkiG9w0BAQsFAAOCAQEA
DKgAIx9U9WhXupKxctZW93RW0GI68C+RYbFs9n+WTg7E/JNLwShqoiP/eIiR+FWU
nz6Fo0lWfUGynPTd8j7QZcjDhrKWMyIDBLOadh9ZyqqP+piEzM06AxBjXmumj6tn
StTFarQLnKqZRrwOZHS4rY6rLlAAvjH7b0u9uvr/MXQI5CZPilCWvNSTOo6XgMDx
8zAknYseI1GJL+g6W/PYSyau0bMCVpGk0/NrOh5lyY2DHxh1Ql6UGY+0LNGpobon
2OaPl1VQbMt86QDeeE24eJ1ZdpU62Nowo0ocR9R1gOK/FOdwG5n5U4ZmVkSlblio
yjDZWgH+KwF2ksXXJfcTHA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6317877970882108940778573924459084069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MAZOWIECKIE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZAKROCZYM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lekam.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750865833512862874258246099602180864799909666975378086720875579263323778255867505176147015982017265646105659958606633800881267265799689321766571828248805310905804712111748384739164192983534009876537686709736077719849484494592225340998390236719355820575267761162385581241320294480606952337435766914380432305325471596177678718760302776155131939493806559361277717952120357609492883036790600330681684164996798962892354362080523817116511602825556921404648745682406505323781045954684054835023320472695117821555802635452468281320101355960938487636339795473567468431118519805082264801265044770032578496434370456383248969345307866799863104739149035607373102228430107471737919586272115371427398670088511237550372772212043039417646822391778622622465084210920238013341866022212570234423262165161511959069045615172735310649968065725014316575662411612483093837912667613724506451264034660781907867957475715027329717532185036308111398013743809721812718275546193759717170227146644428222862503988577296146785444377662974366468300385850864571358778242154301639245138702289406212063329705151838470609393207210230993884976954111462227745906055809577844028266987844364537163945465705351965056902752429074267142628731006890680610987225692756893805853300841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91d56c2ef1d888fdff0ff47a78add1cac4b82f6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lekam.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekam.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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