*.ferreiracosta.com

- Ferreira Costa & Cia Ltda -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:0d:bb:d5:fb:33:c9:7c:82:cb:e3:c5:1a:a4:b3:a0 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ferreira Costa & Cia Ltda

Organization: Ferreira Costa & Cia Ltda
Organization unit: IT
State / Province: Pernambuco
Locality: Garanhuns
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:0d:bb:d5:fb:33:c9:7c:82:cb:e3:c5:1a:a4:b3:a0
Serial Number (int): 12034361585163038190420502913055241120
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7d:23:83:99:6a:f0:e5:55:35:0e:0e:46:f3:c7:d1:89:a4:b4:2c:2c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): fe:70:66:0f:e0:54:a6:f1:e6:e4:75:03:ae:6e:51:1f:49:58:c2:87
Fingerprint (sha256): 99:8e:03:60:b4:a5:f3:30:66:58:66:a2:34:ad:6a:23:1a:e9:3a:04:c6:48:20:3e:c5:46:12:dd:14:2d:bd:4c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.ferreiracosta.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ferreiracosta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ferreiracosta.com
ferreiracosta.com

Other certificates including the domain name ferreiracosta.com

(limited to 100 certificates)
www.ferreiracosta.com
m.ferreiracosta.com
*.ferreiracosta.com
*.ferreiracosta.com
atendimento.ferreiracosta.com
atendimento.ferreiracosta.com
*.ferreiracosta.com
*.ferreiracosta.com
*.ferreiracosta.com
vanielson.xyz
e-consequences.com
ferreiracosta.com
www.slweb.info
kainottrodt.de
strollnsanity.com
m.ferreiracosta.com
atendimento.ferreiracosta.com
www.speevi.com
app.dependec.com
atendimento.ferreiracosta.com
*.ferreiracosta.com
atendimento.ferreiracosta.com
dash-dev.churned.io
kristoferdoman.com
*.ferreiracosta.com
bfamily.app
*.ferreiracosta.com
atendimento.ferreiracosta.com
krewinkel.studio
presentes.ferreiracosta.com
a.fanatics.cr
zkbills.com
www.ferreiracosta.com
neochiffrage.neo-btp.fr
atendimento.ferreiracosta.com
testwebmonetization.com
zkbills.com
easyteaching.be
api4ai.com
bnode.vpgonline.co.uk
*.ferreiracosta.com
kristoferdoman.com
commerce.gim.cpa
link.holashop.co
ferreiracosta.com
53bells.com
*.ferreiracosta.com

Certificate

The complete raw certificate details for *.ferreiracosta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgIQCQ271fszyXyCy+PFGqSzoDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODA0MjYwMDAwMDBaFw0yMDA1MjUxMjAwMDBaMIGFMQswCQYDVQQGEwJCUjET
MBEGA1UECBMKUGVybmFtYnVjbzESMBAGA1UEBxMJR2FyYW5odW5zMSIwIAYDVQQK
DBlGZXJyZWlyYSBDb3N0YSAmIENpYSBMdGRhMQswCQYDVQQLEwJJVDEcMBoGA1UE
AwwTKi5mZXJyZWlyYWNvc3RhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAM++u8ZuUAMudqz9toKoCfMrd8qRSOnvbe35Kx8OEvq4sCWSHAagydzW
ER8a9SuTnLXVrjNTi4ydq75HPoqgSvmhiaX/2Uqfajnve4bW/SCmg+HfsJm1MnDQ
Bkao2f6Bvb8G3wJ0T8nCYCcZqF4YnuJ+ppSgtr1jD8CohdtHxy/a9KuzPrUiJC44
VYCT1GfJXO5ifinpTBOgk04Loa8UPKWakHyzjnnOX05A54KVFBirDxk8sdz7NogC
A2gpH2fEKuJcADvLKqk5IDLVqIMPjXt0a2CHcSlYnB9eCV5X/I9+cbxeU+vot8qi
wWXVPI/vnFligk1ht48Zk+ySOoDWtGECAwEAAaOCAzcwggMzMB8GA1UdIwQYMBaA
FJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBR9I4OZavDlVTUODkbzx9GJ
pLQsLDAxBgNVHREEKjAoghMqLmZlcnJlaXJhY29zdGEuY29tghFmZXJyZWlyYWNv
c3RhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29t
L0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAq
MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeB
DAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMu
Z2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVz
dC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggF9BgorBgEE
AdZ5AgQCBIIBbQSCAWkBZwB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I
DdwQAAABYwJ2TFkAAAQDAEYwRAIgUJfj9wk09oN2R0xRBpKIyBN48FLA/slKnP8I
rEPk2coCIC+ugCPhfBrXF4ria5ugQtBS4y0mUueg5KLJhQcKiEaZAHYAb1N2rDHw
MRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFjAnZOBQAABAMARzBFAiEA4eXB
+bg3Qo345q9vxr92iOwODMo0FW7ofSENfjCIXtgCIHkactO+w4C3IynYqN2VASTZ
Sow62IRTNTIXjAGjLt/GAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e
0YUAAAFjAnZNRwAABAMARzBFAiEA9IHnJ2/lkxYISF8VeIij1g8zkWCTnfo4Peb7
3WP54v8CIF5gwq8e1vM1nrlPyOUOs18U9D2Qrz6MBPaOFuP+ixGkMA0GCSqGSIb3
DQEBCwUAA4IBAQCloKb9gqan3f+BqI8wurkNrPB6N8X5o18pdVcETecrPlqWSAgu
IN3otaj/s2195Wik4vsa8kzHz0B3WYEqK3/D2ywyxFEVs0swnJxYBuPXraJlREzI
51NZ5AWbxJ3UPjSUqDiO855UMA9PoVTjKRaP7DXU6TqrRYxp7806cepQi1wvxNrg
0x8dnWKfOFaRURyzvJAByRyzWGXiv5ED1u771RH0054b6L8HhZwqBVbMIDwDuqnt
1QhBINkL+xCfdtygeZXKM8p5ovtP3JxU090fozRD3HWr3PoIoijurA+75G7s9Oli
a/MuLGyUeIlOi3Q2n3c0sFY+dn+c9BIw2H4O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz767xm5QAy52rP22gqgJ
8yt3ypFI6e9t7fkrHw4S+riwJZIcBqDJ3NYRHxr1K5OctdWuM1OLjJ2rvkc+iqBK
+aGJpf/ZSp9qOe97htb9IKaD4d+wmbUycNAGRqjZ/oG9vwbfAnRPycJgJxmoXhie
4n6mlKC2vWMPwKiF20fHL9r0q7M+tSIkLjhVgJPUZ8lc7mJ+KelME6CTTguhrxQ8
pZqQfLOOec5fTkDngpUUGKsPGTyx3Ps2iAIDaCkfZ8Qq4lwAO8sqqTkgMtWogw+N
e3RrYIdxKVicH14JXlf8j35xvF5T6+i3yqLBZdU8j++cWWKCTWG3jxmT7JI6gNa0
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12034361585163038190420502913055241120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pernambuco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Garanhuns'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ferreira Costa & Cia Ltda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ferreiracosta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26225383320578285041065757836724558743648624368721207767039526567624435156033039177798284524135987912818959164684811285109313578652402413765041992062322646207936920567528312427945928560534239739372270760187695603139996708488881904038633013566852580063629447693350897595918285054590494829438408238433947533535396579180369034182478551577237189650301939959799221707516801095967304084619740934510333219971382929100150165971276700441582616002679334802458416245400931327021958297534682644719205994756033785413293709640352868318074892023251224323728800356410946815593872790324254765839604751127387425179871316215431997863009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d2383996af0e555350e0e46f3c7d189a4b42c2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferreiracosta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferreiracosta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a5a0a6fd82a6a7ddff81a88f30bab90dacf07a37c5f9a35f297557044de72b3e5a9648082e20dde8b5a8ffb36d7de568a4e2fb1af24cc7cf407759812a2b7fc3db2c32c45115b34b309c9c5806e3d7ada265444cc8e75359e4059bc49dd43e3494a8388ef39e54300f4fa154e329168fec35d4e93aab458c69efcd3a71ea508b5c2fc4dae0d31f1d9d629f385691511cb3bc9001c91cb35865e2bf9103d6eefbd511f4d39e1be8bf07859c2a0556cc203c03baa9edd5084120d90bfb109f76dca07995ca33ca79a2fb4fdc9c54d3dd1fa33443dc75abdcfa08a228eeac0fbbe46eecf4e9626bf32e2c6c9478894e8b74369f7734b0563e767f9cf41230d87e0e