*.thaipbs.or.th

- Thai Public Broadcasting Service -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:5c:81:d9:d7:4f:11:ee:49:e6:ed:d2:e2:48:81:56 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Thai Public Broadcasting Service

Organization: Thai Public Broadcasting Service
State / Province: Bangkok
Locality: Lak Si
Country: TH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:5c:81:d9:d7:4f:11:ee:49:e6:ed:d2:e2:48:81:56
Serial Number (int): 15101832954604282331831879226704298326
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:31:1c:8d:16:32:9e:0f:2d:fd:8a:a5:a8:eb:c8:53:fb:50:20:6e
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3a:f5:3e:53:26:3f:3c:95:e8:37:ed:39:e1:82:10:f3:93:fe:03:86
Fingerprint (sha256): 9e:29:ca:18:e7:de:b6:16:68:a8:2b:bb:ff:3d:68:25:7c:f2:6f:a1:ef:32:68:49:c5:6e:2b:8c:15:b8:4e:97

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.thaipbs.or.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.thaipbs.or.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.thaipbs.or.th
thaipbs.or.th

Other certificates including the domain name thaipbs.or.th

(limited to 100 certificates)
data.thaipbs.or.th
program.beta.thaipbs.or.th
newsletter.thaipbs.or.th
program.beta.thaipbs.or.th
www.tricapmgmt.com
play.moneyprep.com
catchup.thaipbs.or.th
bwbrody.com
*.thaipbs.or.th
training.thaipbs.or.th
erpnext.thaipbs.or.th
myfootxladmin.estore.business
*.thaipbs.or.th
bshefa.com
www.thaipbs.or.th
training.thaipbs.or.th
program.beta.thaipbs.or.th
bangkokgreenspace.thaipbs.or.th
admin.bot.thaipbs.or.th
agnee.app
program.beta.thaipbs.or.th
vod.thaipbs.or.th
vod.thaipbs.or.th
staging.controle.elemedigital.com
photostory.thaipbs.or.th
program.beta.thaipbs.or.th
vod.thaipbs.or.th
program.beta.thaipbs.or.th
covid19.thaipbs.or.th
dmservice.thaipbs.or.th
acaimaissabor.lupi.delivery
*.thaipbs.or.th
vod.thaipbs.or.th
*.thaipbs.or.th
vod.thaipbs.or.th
training.thaipbs.or.th
thaipbs.or.th
thaipbs.or.th
effectivepython.com
homologacao.quitapay.com.br
training.thaipbs.or.th
reeffactorgames.com
*.thaipbs.or.th
vod.thaipbs.or.th
catchup.thaipbs.or.th
www.juicypopbop.com
bkkelection65.thaipbs.or.th
newvintage.studio
vod.thaipbs.or.th
thaipbs.or.th
*.thaipbs.or.th
*.thaipbs.or.th
backoffice.sawasdee.thaipbs.or.th
program.beta.thaipbs.or.th
media.streamomedia.com
webmail.thaipbs.or.th
thaipbs.or.th
catchup.thaipbs.or.th
console-tts.thaipbs.or.th
vod.thaipbs.or.th
vod.thaipbs.or.th
admin.bot.thaipbs.or.th
www.bestofeden.com
training.thaipbs.or.th
program.beta.thaipbs.or.th
vod.thaipbs.or.th
thaipbs.or.th
training.thaipbs.or.th
admin.bot.thaipbs.or.th
program.beta.thaipbs.or.th
webmail.thaipbs.or.th
vod.thaipbs.or.th
saviastaff.com
*.thaipbs.or.th
catchup.thaipbs.or.th
admin.bot.thaipbs.or.th
training.thaipbs.or.th
*.thaipbs.or.th
vod.thaipbs.or.th
program.beta.thaipbs.or.th
admin.bot.thaipbs.or.th
program.beta.thaipbs.or.th
vod.thaipbs.or.th
vod.thaipbs.or.th
reform.thaipbs.or.th
vod.thaipbs.or.th
*.thaipbs.or.th
online-festa.l-ma.co.jp
briks.technology
www.knewkirk.com
vod.thaipbs.or.th
webmail.thaipbs.or.th
thaipbs.or.th
uat.smartseal.co.za
vod.thaipbs.or.th
program.beta.thaipbs.or.th
program.beta.thaipbs.or.th
program.beta.thaipbs.or.th
boapizza.lupi.delivery
policywatch.thaipbs.or.th

Certificate

The complete raw certificate details for *.thaipbs.or.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIQC1yB2ddPEe5J5u3S4kiBVjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODExMDkwMDAwMDBaFw0xOTA3MDQxMjAwMDBaMHUxCzAJBgNVBAYTAlRIMRAw
DgYDVQQIEwdCYW5na29rMQ8wDQYDVQQHEwZMYWsgU2kxKTAnBgNVBAoTIFRoYWkg
UHVibGljIEJyb2FkY2FzdGluZyBTZXJ2aWNlMRgwFgYDVQQDDA8qLnRoYWlwYnMu
b3IudGgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1wUTLRC9kSwc
yjaKSspKps793JMQcMxKGpk/QxTb40C7QHE6afU8j2SqCM+E8xQfJ4bE5h0QQYfB
K7yp/rYbuGANMz57vDqiROrszmJsgfXc4VU1NkapNoHBBMJHzDzWvpVwC2fI+bsD
6xBSz6XjCYnfwjN6He7kilfJ4hNJ6qrnwV7MRaydV11vsXaHi48BAY+fiRVS0voW
8ogMba5E5JeoR2cmTFlcGMMOs5/c84+pYb61ftBIyC/E3HDOIA3OjD+gyJ5UaX9x
3oEMr1EpLpU0dNMbCN7kSJtT0GLxpZiwMwNQqE8JA/kIvqCuA2w96MjKfdP4og1e
Q/TPYpxbAgMBAAGjggHDMIIBvzAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MW
OJ5sxTAdBgNVHQ4EFgQUBDEcjRYyng8t/YqlqOvIU/tQIG4wKQYDVR0RBCIwIIIP
Ki50aGFpcGJzLm9yLnRogg10aGFpcGJzLm9yLnRoMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4Yt
aHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwG
A1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAmBggr
BgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKG
MWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5j
cnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAjp0kjdNtna1m2FBwkQo5oeiFgeaG4Ysx7y4xkp1EbPbSOvjqPSDbQBkr
TvYttv5TMIthBclfde61Ke2DG1SqfXGm9T37S5M4ZSloQSKihW5+FFgwkwMV5ibJ
p/kLjulR9/8NltgdTWcxof9oZcv2gdh69NrmY0UIqREUv0FKucTwKJzfE9UnfBnZ
Lw2BdOCltXaVj5xqaJy5bBSfrHWMDUyEMu/isEG7QSB0sjhH09532jvSTZpGypx+
3/OpnqKJaf8x3iCCIu1EYyxUt/wsq7txjWV+RT8Eyr4Nbo0ZcOGJ5KxNLKKhyk1D
PURUL3AE3+f5C/e7doyyh0lFuEIV0A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NcFEy0QvZEsHMo2ikrK
SqbO/dyTEHDMShqZP0MU2+NAu0BxOmn1PI9kqgjPhPMUHyeGxOYdEEGHwSu8qf62
G7hgDTM+e7w6okTq7M5ibIH13OFVNTZGqTaBwQTCR8w81r6VcAtnyPm7A+sQUs+l
4wmJ38Izeh3u5IpXyeITSeqq58FezEWsnVddb7F2h4uPAQGPn4kVUtL6FvKIDG2u
ROSXqEdnJkxZXBjDDrOf3POPqWG+tX7QSMgvxNxwziANzow/oMieVGl/cd6BDK9R
KS6VNHTTGwje5EibU9Bi8aWYsDMDUKhPCQP5CL6grgNsPejIyn3T+KINXkP0z2Kc
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15101832954604282331831879226704298326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lak Si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thai Public Broadcasting Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.thaipbs.or.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28888363759204005351589824181712515943080952943142268744264237282664750235467931991404855301152373950720713638703199848774387171802321426254624613278300550150576018602925555251052792663422229420397101206759524479895846320059039783506793142450872611979155863698650397248285297064291851635214397080230105996726248188634020986926532346039784296940036542592947672051926031443082911956989370354252004547016716117976755455531600606974913907649284412004603865703830027341101592168147227837702392394733816088633282631730755836904727492499482206759129674898063934517950820996692947594071472216035599082436683908223606550862939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04311c8d16329e0f2dfd8aa5a8ebc853fb50206e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thaipbs.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaipbs.or.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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