*.indmoney.com

- Finzoom Investment Advisors Private Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:3b:58:3a:d2:98:9e:63:52:9c:fc:b7:e3:26:a8:f2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Finzoom Investment Advisors Private Limited

Organization: Finzoom Investment Advisors Private Limited
State / Province: Haryana
Locality: Gurugram
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:3b:58:3a:d2:98:9e:63:52:9c:fc:b7:e3:26:a8:f2
Serial Number (int): 13600414984957617486599013112035584242
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8c:3e:4e:fb:d8:b6:05:48:43:eb:c0:6f:68:d2:aa:d5:05:8f:08:b3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): cc:28:ec:81:1e:07:2b:f5:41:c8:a8:a9:c0:c4:7c:55:92:57:47:3d
Fingerprint (sha256): 94:53:a0:c5:f2:8d:d4:fe:b0:73:1c:39:6b:41:1a:ec:94:9c:af:60:cc:33:1d:ba:67:f0:6d:e6:98:91:be:f2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.indmoney.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.indmoney.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.indmoney.com
indmoney.com

Other certificates including the domain name indmoney.com

(limited to 100 certificates)
support.infinityfincorp.com
cloud-support.itsm-presales.in
servicedesk.puravankara.com
itservicedesk.greenply.com
support.infinityfincorp.com
helpdesk.arbp.online
servicedesk.brueckner-india.com
servicedesk.cosmos.in
helpdesk.arbp.online
*.indmoney.com
newesupport.comviva.com
indmoney.com
servicedesk.brueckner-india.com
hr.itsm-presales.in
Finzoom Investment Advisors Pvt Ltd
*.indmoney.com
helpdesk.arbp.online
Finzoom Investment Advisors Pvt Ltd
helpdesk.arbp.online
helpdesk.arbp.online
indmoney.com
indmoney.com
icm.tvsscs.com
servicedesk.sudlife.in
helpdesk.arbp.online
cloud-support.itsm-presales.in
enterprise.duggads.co.in
ssl426190.cloudflaressl.com
*.indmoney.com
cloud-support.itsm-presales.in
newesupport.comviva.com
enterprise.duggads.co.in
Finzoom Investment Advisors Pvt Ltd
pulse.indmoney.com
helpdesk.arbp.online
helpdesk.quickparts.com
helpdesk.quickparts.com
itservicedesk.greenply.com
helpdesk.arbp.online
indmoney.com
servicedesk.maveric-systems.com
crmdmshelpdesk.royalenfield.com
helpdesk.quickparts.com
iportal.crsinxt.com
helpdesk.arbp.online
ithelpdesk.appstekcorp.com
servicedesk.indmoney.com
test.sunilk.xyz
Finzoom Investment Advisors Pvt Ltd
support.infinityfincorp.com
hrsupport.ziomart.great-site.net
servicedesk.cosmos.in
Finzoom Investment Advisors Pvt Ltd
support.infinityfincorp.com
itdesk.shreecement.com
Finzoom Investment Advisors Pvt Ltd
itdesk.rchilli.com
*.indmoney.com
servicedesk.maveric-systems.com
helpdesk.quickparts.com
sni.cloudflaressl.com
hr.itsm-presales.in
helpdesk.arbp.online
ithelpdesk.appstekcorp.com
servicedesk.indmoney.com
support.tridentindia.com
servicedesk.puravankara.com
ithelpdesk.appstekcorp.com
servicedesk.brueckner-india.com
itdesk.shreecement.com
ithelpdesk.apcerls.com
Finzoom Investment Advisors Pvt Ltd
*.indmoney.com
helpdesk.quickparts.com
servicedesk.puravankara.com
hr.itsm-presales.in
helpdesk.arbp.online
test.sunilk.xyz
enterprise.duggads.co.in
helpdesk.arbp.online
it-help.mountmerugroup.com
helpdesk.quickparts.com
test.sunilk.xyz
servicedesk.maveric-systems.com
support.infinityfincorp.com
indmoney.com
gbshelpdesk.indorama.net
helpdesk.arbp.online
ithelpdesk.appstekcorp.com
support.tridentindia.com
indmoney.com
hrsupport.ziomart.great-site.net
test.sunilk.xyz
crmdmshelpdesk.royalenfield.com
itdesk.rchilli.com
iportal.crsinxt.com
ssl426189.cloudflaressl.com
*.indmoney.com
support.sequentialtech.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for *.indmoney.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjDCCBnSgAwIBAgIQCjtYOtKYnmNSnPy34yao8jANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMzAzMDMwMDAwMDBaFw0yNDAzMDUyMzU5NTlaMIGBMQswCQYDVQQGEwJJTjEQ
MA4GA1UECBMHSGFyeWFuYTERMA8GA1UEBxMIR3VydWdyYW0xNDAyBgNVBAoTK0Zp
bnpvb20gSW52ZXN0bWVudCBBZHZpc29ycyBQcml2YXRlIExpbWl0ZWQxFzAVBgNV
BAMMDiouaW5kbW9uZXkuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAz5l3H2itXrgLeYFkZk/rO8NcM1OEorsUUhHEIO08o4ponwvf1QibS8WM37QE
Htop2tP1ZFvKE19EYBkN9LuGhdPUoQJQfAicY84s8ya6P10/AnkSX/n9olfHnj2K
Pjh/jeo+KuFtmEoVQqUwiEvjEbEPhAowhGsD/1gB52tIBUlH+I2HUeYXDS/Trv98
utH+wu7RRJsRjwtYhwEyszLiShqqRV04/XKtxbf0ShT6wMG+g7zFQkJZRwPzS9PG
qHTG4ubG5iPkUTB4VVKH3nmmdItCuzPJi7V5lCSInDqN9YYZ4Hkl2HmQkqsGsMSD
MRO4knRiXaqCEQNoHpj2Ek8aOrtpTCUh2OduAbOInDe3IkB8sybWtd7h6Ct4vv98
a/ZmgaWecbOMTN7PTkeJx9ayzC8mkDTtdP5GEntLl4HOTBv4Ee2dftgsHczSmpHa
QG6H/O5bL9v9cOzrqNKLnWEm8nN7Brd6q+f/r6ftLSvwxuZLes11CRHQ6OQoR7Uv
2GgJPpTganhap08nCmld6J3EL9AMVk1ohpkrLGBGHWUE44/Us/e8RL2kBLmOb4eJ
Z00m7kCkFo+5eBHuofxb3WSLRKiQqvom8Qfb9dEyWzPObZhnOCGN1hAQJYERojam
g1Rhu/JVGcwcPUskatUqMNcAlO+GIsYWUZvLwTL8QSEQlisCAwEAAaOCAyAwggMc
MB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBSMPk77
2LYFSEPrwG9o0qrVBY8IszAnBgNVHREEIDAegg4qLmluZG1vbmV5LmNvbYIMaW5k
bW9uZXkuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5j
b20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkw
JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB1BggrBgEF
BQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29t
MD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1
c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSC
AWoBaAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhqZT7egA
AAQDAEYwRAIgY7k/4brYQmsHn2/J2KYD6khatcWtDvXz16lWjWkyihsCIFDi7et7
3lf0uQdWvD/2qT4GAaQR/cn9RMTLQfWo5RDiAHYAc9meiRtMlnigIH1HneayxhzQ
UV5xGSqMa4AQesF3crUAAAGGplPuGAAABAMARzBFAiEAmnI2jjr4uWlN1584rJ+7
FMUxZvMnT4h/e7CZQf9uc4gCIAFZ6T3/4KK2OGfS9keZXaNp8Lgv4jgW/33eAL3F
WXWEAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGGplPuEwAA
BAMASDBGAiEAiG/VjZG0eQjkzl6KtdEnfc2zNOFu7pCCcZ8QwEmPPg0CIQDZlIk7
kmj5hVBXEi3eBgMxxwXVrJTeqDoxg2o21caafzANBgkqhkiG9w0BAQsFAAOCAQEA
pfiLJdgYK/eriNxc+aBKDA0Dk1sIsKeLsvIlJzYIiZLg6BMKUr6KoB6Sat4SicgS
bbZe+glF5PeRppdjFQwgHH6gjMzOCzwQiO0wmZZGj9JhXkH2iMVbmvh8J75KaXUt
NLbN1iT8bDNzk55GRDKU5vsL6uwUrJV6ReiU5Ign1ElUf6oMrgqiC9NK394D8OWJ
u8oIj/omJ/L0kX3Bidio4IRkS+kIcKQz2n/9mxGuwg+lDTHpRFxvT95Nv5QKGSYK
R3JusWrRothyHAQ/fjLeB2KP1jeNPvEjDsYKW2jXcSdf7eeTZgiJvLP2Ou303eIS
loffvYAI6PYPuoYb+anTMQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13600414984957617486599013112035584242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gurugram'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Finzoom Investment Advisors Private Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.indmoney.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846931962293726889177425097968168082592754653778916590473083669916297348185814563580300939271312696539312434523978423251565407127059524994840543061669074414135189189884526497344885287342929862637188610438604350163639947198700252067753033514592246392013999649621235011850235243362966009969230173367336977104029414926928330520903497278562482202714025193938455831855720603788096381979683800964431201467649470161040693260045302714274779775198395972938224927701336925540581895452184759238428811033135826170587105488850667135056316331207071069340197594386869991316366571390542153925799555104548263759188235413724190644029723495981086089470745973077950460904411194245327790984559667802048966076056134060870632508448054439066290471447010914513647718250671850745967549436568928320017282541325074993207682607521015841622745808722144572319305521188939570949728344950844408014944659691817910712648430869920433247607843417089663027191876266375623047156126556769205898134037904737836067491578745546108283744991322682441225805447291045695347122974501481104924284582673197179789583822989103762543288230601410153494641436309118970781991941307022864844100972497947801986492911652798769179864783748782342772361851379399723321615579280173714754476480043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c3e4efbd8b6054843ebc06f68d2aad5058f08b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indmoney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000186a653ede80000040300463044022063b93fe1bad8426b079f6fc9d8a603ea485ab5c5ad0ef5f3d7a9568d69328a1b022050e2edeb7bde57f4b90756bc3ff6a93e0601a411fdc9fd44c4cb41f5a8e510e200760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000186a653ee1800000403004730450221009a72368e3af8b9694dd79f38ac9fbb14c53166f3274f887f7bb09941ff6e738802200159e93dffe0a2b63867d2f647995da369f0b82fe23816ff7dde00bdc559758400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000186a653ee130000040300483046022100886fd58d91b47908e4ce5e8ab5d1277dcdb334e16eee9082719f10c0498f3e0d022100d994893b9268f9855057122dde060331c705d5ac94dea83a31836a36d5c69a7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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