www.fsbmsla.com
- Glacier Bank -
Issued by GeoTrust EV RSA CA 2018
About this certificate
This digital certificate with serial number 06:f1:d8:f9:9b:2b:34:46:a2:10:38:ec:8c:86:e7:b1 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Glacier Bank
Company registration number:
D093435
Organization: Glacier Bank
Organization: Glacier Bank
State / Province:
Montana
Locality: Kalispell
Country: US
Locality: Kalispell
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:f1:d8:f9:9b:2b:34:46:a2:10:38:ec:8c:86:e7:b1Serial Number (int): 9231112293925650707089330886211463089
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 7e:38:84:98:cb:1b:50:a6:21:c2:e6:b8:46:42:e6:5f:90:ab:b3:95
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58
Fingerprint (sha1): ce:08:ff:ca:08:76:6e:fd:7f:96:47:d8:7d:38:af:10:ab:ab:c3:da
Fingerprint (sha256): a2:ce:b3:e5:27:ce:8f:df:5e:39:31:07:31:6e:0f:23:82:69:7a:9e:40:d5:10:bf:fb:35:96:db:2c:1a:39:33
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl
Check the revocation status for certificate www.fsbmsla.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.fsbmsla.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.fsbmsla.com
fsbmsla.com
fsbmsla.com
Other certificates including the domain name fsbmsla.com
(limited to 100 certificates)
mortgage.1stbmt.com.roostify.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
mortgage.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
fsbmsla.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.banksanjuans.com
mortgage.gofirstbank.com
mortgage.gofirstbank.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.banksanjuans.com
www.fsbmsla.com
mortgage.1stbmt.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.valleybankhelena.com.roostify.com
fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.fsbwy.com
mortgage.banksanjuans.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.1stbmt.com
mortgage.fcbutah.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.quickapply.fsbmsla.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
mortgage.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
fsbmsla.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.banksanjuans.com
mortgage.gofirstbank.com
mortgage.gofirstbank.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.banksanjuans.com
www.fsbmsla.com
mortgage.1stbmt.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.valleybankhelena.com.roostify.com
fsbmsla.com
www.fsbmsla.com
www.fsbmsla.com
mortgage.fsbwy.com
mortgage.banksanjuans.com
fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
mortgage.1stbmt.com
mortgage.fcbutah.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
www.quickapply.fsbmsla.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.fsbmsla.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
Certificate
The complete raw certificate details for www.fsbmsla.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG5jCCBc6gAwIBAgIQBvHY+ZsrNEaiEDjsjIbnsTANBgkqhkiG9w0BAQ0FADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdHZW9UcnVzdCBFViBSU0EgQ0EgMjAx ODAeFw0yMTEwMjMwMDAwMDBaFw0yMjEwMjUyMzU5NTlaMIHEMR0wGwYDVQQPDBRQ cml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysGAQQBgjc8AgEDEwJVUzEYMBYGCysG AQQBgjc8AgECEwdNb250YW5hMRAwDgYDVQQFEwdEMDkzNDM1MQswCQYDVQQGEwJV UzEQMA4GA1UECBMHTW9udGFuYTESMBAGA1UEBxMJS2FsaXNwZWxsMRUwEwYDVQQK EwxHbGFjaWVyIEJhbmsxGDAWBgNVBAMTD3d3dy5mc2Jtc2xhLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAPemTEzXP/Z4zvNsTmAiqjH/AwJ9yVYA Ij7UtowpHnsPWO2vR1/U/ptMuqSeglgwHbU8y6U2Ynel7PLrn6omy9nkKggg+bz/ TZh4bhZR8/ZflzIuRZmrfsGVBInyHCtyZSGfBcE5Irlk7FEAQCqg1xltuaMkKBDl t+xzHIu7tOdGAI0+Bdnhy+EqsUWOi20xb3xntOSJOeUM7cp3BQIEaUf24QwOKzAS JqOZbvygUU8EpMI+lFe+Qf7dmlRONnX8fWYhAwAlE87gdZO00EMcukttxhN5MEpJ 8YmqOY0FbIfLewJesUlUpEMrmIiwR3KNSzySzxfeKrb8q0ODH154fIMCAwEAAaOC AzQwggMwMB8GA1UdIwQYMBaAFMqSZ1Jh3q78uiIrfxyHTCX7b5lYMB0GA1UdDgQW BBR+OISYyxtQpiHC5rhGQuZfkKuzlTAnBgNVHREEIDAegg93d3cuZnNibXNsYS5j b22CC2ZzYm1zbGEuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwQAYDVR0fBDkwNzA1oDOgMYYvaHR0cDovL2NkcC5nZW90 cnVzdC5jb20vR2VvVHJ1c3RFVlJTQUNBMjAxOC5jcmwwSgYDVR0gBEMwQTALBglg hkgBhv1sAgEwMgYFZ4EMAQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMHcGCCsGAQUFBwEBBGswaTAmBggrBgEFBQcwAYYaaHR0cDov L3N0YXR1cy5nZW90cnVzdC5jb20wPwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRz Lmdlb3RydXN0LmNvbS9HZW9UcnVzdEVWUlNBQ0EyMDE4LmNydDAMBgNVHRMBAf8E AjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgApeb7wnjk5IfBWc59jpXfl vld9nGAK+PlNXSZcJV3HhAAAAXyqhq90AAAEAwBHMEUCICIcWOgst09arU200ZWN fAjyzwYhyXxtPnUCckj8vnIbAiEAxRodZ82pmXVlYwSci9CQKH661yf9KvqTpBOx qFwbzVsAdwBRo7D1/QF5nFZtuDd4jwykeswbJ8v3nohCmg3+1IsF5QAAAXyqhq+4 AAAEAwBIMEYCIQC2cmtKvyDWWr+oPCj8Gk7I4i1OTspFlZSqzDBjK7n8vwIhAJ1D NsNJZUY6x5XwyE+unO8bEXyL4zfAXiFx7WsTY+XHAHYAQcjKsd8iRkoQxqE6CUKH Xk4xixsD6+tLx2jwkGKWBvYAAAF8qoavfgAABAMARzBFAiEA9gdGt1oUBkWqPXQK byo5JXzhN9SWTmXkm37ovF/5ikwCIAImlo0RP1ml3AVw68Gv/e049+jbD67QuZlh PUWhag++MA0GCSqGSIb3DQEBDQUAA4IBAQB6Y2wON4TFEgz+dTJs3MOqvzgkEbP0 1h4ZooFoHPvym6hXYInrBkOhuAufi3HHUUXA9gQoAH1jT7yzXpKO2HQbATgpzBmO Ozs6/9GtehdIGoR4ihrk5fv6NcLBo5WH6MVqaZ0q4iOUspiW47XJk+1B9tYZ/Sh/ VgszHThsFUh8pyLppIziud9VAuXi49RhRKe9KvOp+7FA/HWQKzQ8DjsAeH3U1bES HqoeVC7GUq0UQF+vtYTZ3IESuhKrQpNs/AlmVcOB9h9TAkU/Zl8xf5/Dk5+iY1fL n7L+UgNW5n1YD/Gfmht5Z6V1Bxmh7dFJmGo60X4h6V3y//A4+ZVjDpCB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96ZMTNc/9njO82xOYCKq Mf8DAn3JVgAiPtS2jCkeew9Y7a9HX9T+m0y6pJ6CWDAdtTzLpTZid6Xs8uufqibL 2eQqCCD5vP9NmHhuFlHz9l+XMi5Fmat+wZUEifIcK3JlIZ8FwTkiuWTsUQBAKqDX GW25oyQoEOW37HMci7u050YAjT4F2eHL4SqxRY6LbTFvfGe05Ik55QztyncFAgRp R/bhDA4rMBImo5lu/KBRTwSkwj6UV75B/t2aVE42dfx9ZiEDACUTzuB1k7TQQxy6 S23GE3kwSknxiao5jQVsh8t7Al6xSVSkQyuYiLBHco1LPJLPF94qtvyrQ4MfXnh8 gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9231112293925650707089330886211463089 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D093435' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kalispell' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glacier Bank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fsbmsla.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31262865950191850546166392753288152116112210796219842402400738041124398478934152570954772441359664570252616424505940403202050214192439877114511612803338078570202098814686987484645229252806105696706550958978589535423626582325027096577149545873681761844395869976766705559582971282283606003049356156547516710578713146385257519016547696240644790551278939938675337261785533958180769461877337311651301232400394705964666288966715438802487173876555874081685516477114751214776564665512798416100847436740042470379365019280604819126711157949695172432123744383955269358295710772573613215284315597390959752986812947245877863939203 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7e388498cb1b50a621c2e6b84642e65f90abb395 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsbmsla.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsbmsla.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007a636c0e3784c5120cfe75326cdcc3aabf382411b3f4d61e19a281681cfbf29ba8576089eb0643a1b80b9f8b71c75145c0f60428007d634fbcb35e928ed8741b013829cc198e3b3b3affd1ad7a17481a84788a1ae4e5fbfa35c2c1a39587e8c56a699d2ae22394b29896e3b5c993ed41f6d619fd287f560b331d386c15487ca722e9a48ce2b9df5502e5e2e3d46144a7bd2af3a9fbb140fc75902b343c0e3b00787dd4d5b1121eaa1e542ec652ad14405fafb584d9dc8112ba12ab42936cfc096655c381f61f5302453f665f317f9fc3939fa26357cb9fb2fe520356e67d580ff19f9a1b7967a5750719a1edd149986a3ad17e21e95df2fff038f995630e9081