www.moll-logistik.de

- MOLL logistik GmbH -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:48:01:78:85:e1:f3:7a:e9:06:49:90:bc:22:c0:ab was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MOLL logistik GmbH

Organization: MOLL logistik GmbH
Organization unit: IT
State / Province: Nordrhein-Westfalen
Locality: Senden
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:48:01:78:85:e1:f3:7a:e9:06:49:90:bc:22:c0:ab
Serial Number (int): 16324611154457267845492304799328288939
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: df:59:03:4e:af:50:55:82:a6:02:02:99:7d:13:62:b8:4e:31:55:42
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c9:a9:2e:2f:1c:a9:e9:12:28:a9:89:48:8c:b7:49:38:05:9b:41:93
Fingerprint (sha256): 96:6e:80:cc:66:dc:87:1d:48:0e:16:30:06:b2:59:70:a4:e5:48:67:11:98:a2:8f:3d:06:97:60:e5:88:6b:1c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.moll-logistik.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.moll-logistik.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.moll-logistik.de
moll-logistik.de
adeccogroup-promotion.com
kelvion-promotion.com
www.belfor-webshop.eu
bremer-leguil-promotion.de
www.kelvion-promotion.com
belfor-webshop.eu
www.adeccogroup-promotion.com
www.zcc-promotion.com
hesse-mustershop.moll-logistik.de
www.bremer-leguil-promotion.de
zcc-promotion.com

Other certificates including the domain name moll-logistik.de

(limited to 100 certificates)
www.shop-wer.de
www.moll-logistik.de
www.shop-wer.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.shop-wer.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
sage.moll-logistik.de
www.moll-logistik.de
mail.moll-logistik.de
www.moll-logistik.de

Certificate

The complete raw certificate details for www.moll-logistik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHYDCCBkigAwIBAgIQDEgBeIXh83rpBkmQvCLAqzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDAxMDMwMDAwMDBaFw0yMTAzMjgxMjAwMDBaMIGFMQswCQYDVQQGEwJERTEc
MBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxlbjEPMA0GA1UEBxMGU2VuZGVuMRsw
GQYDVQQKExJNT0xMIGxvZ2lzdGlrIEdtYkgxCzAJBgNVBAsTAklUMR0wGwYDVQQD
ExR3d3cubW9sbC1sb2dpc3Rpay5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAMi7fN8C6fUXn1uC/M1zJ3pmF1hPr2zutRSHbw7R7asE+zvxKunLK1AJ
cxgWXk5JCyT/OpGJPcQLggb+uP/m8By7+O27dTuCNqSUvQZ8jAua42Jy8pkXTPAp
T5F4q8X5Za64ShrhYEfSIGkXzxuycx5GVapRxbq22rM6jEJsGszpAuedwISDX9Am
IPG4Qc7ctekBfve/JqacQUQA+YRJGSwYm0x0x2KynYYtxyVjYljheZtUDMt8wXvI
Zv1W7+W9FnzTLULyJ6B3aVb30YkV8gDH+0b1gOU3fT0VK7+xotik3fAXSDyNT4Px
Zqd51nKy2NmogC+VYqK0VzqHdGGSMnErRMUF3ocJwFntf/3YxJLYSV5K3aguRAAV
sx1kCvfHtWETogW1LbHcbe11VOD6flJ3Hg7U0ERWWkZP5TgdJUit/FKsjO+Rs6GR
PiQaE8y4Zum5c4JevtPPtF23l0DcNrJBf2jKCO0UkLEh/bdpVoq00dbmEr+lNFlN
lvAb2Xd/4ISi64bjb/9ZDFjRgL5A/coqKgIHGBpbA2PXkIt118YXTUsMlS+zNc3T
lc9QddJjhIcTwISdmPRgCIgZRLxikp3QSb3ezFcXCYgEv4dDV+H/DSN19NSqMB3e
BzRPAtJyO5ooEKXdr/0AEYC0/22Y5tb4cxvsS2K2w6ui78tjIiAvAgMBAAGjggLw
MIIC7DAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU
31kDTq9QVYKmAgKZfRNiuE4xVUIwggFUBgNVHREEggFLMIIBR4IUd3d3Lm1vbGwt
bG9naXN0aWsuZGWCEG1vbGwtbG9naXN0aWsuZGWCGWFkZWNjb2dyb3VwLXByb21v
dGlvbi5jb22CFWtlbHZpb24tcHJvbW90aW9uLmNvbYIVd3d3LmJlbGZvci13ZWJz
aG9wLmV1ghpicmVtZXItbGVndWlsLXByb21vdGlvbi5kZYIZd3d3LmtlbHZpb24t
cHJvbW90aW9uLmNvbYIRYmVsZm9yLXdlYnNob3AuZXWCHXd3dy5hZGVjY29ncm91
cC1wcm9tb3Rpb24uY29tghV3d3cuemNjLXByb21vdGlvbi5jb22CIWhlc3NlLW11
c3RlcnNob3AubW9sbC1sb2dpc3Rpay5kZYIed3d3LmJyZW1lci1sZWd1aWwtcHJv
bW90aW9uLmRlghF6Y2MtcHJvbW90aW9uLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0
dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYB
BQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFo
dHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0
MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAANboq3ZcqqZ6j3fyeA9EjPV6GHyExur9Bt9NVZ/F809LYCQFGpoUsYoeiJO
j1xo55i9TnR+OPQ2hWyCZHmAdp/rXgIsio9zqLm9YUuxkdN9psJS0c/lnlJgWzLL
/Xt3ag8CuaqG2QsbL9btN7hRLJ4CbsBQeUpZ5q7bwuPs3jQHfuCAXbgRQeEBS0iD
om6GvE8VayFHKzwDtbRLHSl8NntYKyaozaJZBIPlcrnJhLnchqlpcEUlXRJgzCzV
gokggEfPDuh9UbPv8xO4SkTD17Rfv55Y8PCOTyRmOLSJBPLdyibOsGGJmH3my0Zy
PysG1abBDBxKZBEkhPksYYu5QOA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16324611154457267845492304799328288939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Senden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MOLL logistik GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.moll-logistik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818916639388671013058698848976998812514801359511451798558622894711591402135245345931711742347893757993183999155895678170999925406534280264680907228863708303857040838392611301797077985431189562186509231954529476337124433678840733165356762370288840492239128898787858041319165023315511608949501774396563030380528482041090699861306909466433167412944033438326955239766026100491221014400676653935955186702287166987988334241256475137128109070150342358200506797784659453072207184676040000301771810927992706234163021719205017199311455775237263917250456907100587070081905685238057894376471549330742147420491457777764129363846765208987246286899634672959940562419381162707383713026587715529986974133112517816483838213117590446059847669938749466054222728940412212148442454204870234396127830540109054557700728060674080204808409482869944799544412715130136187772615333187145716487274788247705494031781605789390939749835378940431046141412824200963701555040339474515341946836426213530921876668105650955324828583940683276642797313110268763551500909695035837346836368081717735151543017315898554715081859917276106443832664057793607244481423372207951503345544029222423703038643953941922292957511648419733132944469588320320662579741713587413928659774480431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df59034eaf505582a60202997d1362b84e315542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moll-logistik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moll-logistik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeccogroup-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelvion-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfor-webshop.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bremer-leguil-promotion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelvion-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfor-webshop.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adeccogroup-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcc-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hesse-mustershop.moll-logistik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bremer-leguil-promotion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zcc-promotion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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