www.moll-logistik.de

- MOLL logistik GmbH -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:44:62:fd:ed:8d:af:8f:3a:07:57:50:2f:3e:0f:33 was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MOLL logistik GmbH

Organization: MOLL logistik GmbH
Organization unit: IT
State / Province: Nordrhein-Westfalen
Locality: Senden
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:44:62:fd:ed:8d:af:8f:3a:07:57:50:2f:3e:0f:33
Serial Number (int): 1684311976550793048647594318636126003
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: df:59:03:4e:af:50:55:82:a6:02:02:99:7d:13:62:b8:4e:31:55:42
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 18:7e:2e:6e:89:f8:64:01:64:e1:fd:89:10:b2:cb:bc:d8:22:39:37
Fingerprint (sha256): a3:2e:fe:ae:c1:04:9a:8d:ea:9c:79:23:b4:27:d2:98:39:6f:c5:4b:2c:6c:ae:54:39:58:07:41:c6:76:0f:4a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.moll-logistik.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.moll-logistik.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.moll-logistik.de
moll-logistik.de
www.zcc-promotion.com
adeccogroup-promotion.com
zcc-promotion.com
www.bk-international-promotion.com
belfor-webshop.eu
hesse-mustershop.moll-logistik.de
bremer-leguil-promotion.de
www.bremer-leguil-promotion.de
kelvion-promotion.com
www.kelvion-promotion.com
www.adeccogroup-promotion.com
www.belfor-webshop.eu
bk-international-promotion.com

Other certificates including the domain name moll-logistik.de

(limited to 100 certificates)
www.shop-wer.de
www.moll-logistik.de
www.shop-wer.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.shop-wer.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
www.moll-logistik.de
sage.moll-logistik.de
www.moll-logistik.de
mail.moll-logistik.de
www.moll-logistik.de

Certificate

The complete raw certificate details for www.moll-logistik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpDCCBoygAwIBAgIQAURi/e2Nr486B1dQLz4PMzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMDAxMTUwMDAwMDBaFw0yMTAzMjgxMjAwMDBaMIGFMQswCQYDVQQGEwJERTEc
MBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxlbjEPMA0GA1UEBxMGU2VuZGVuMRsw
GQYDVQQKExJNT0xMIGxvZ2lzdGlrIEdtYkgxCzAJBgNVBAsTAklUMR0wGwYDVQQD
ExR3d3cubW9sbC1sb2dpc3Rpay5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAMi7fN8C6fUXn1uC/M1zJ3pmF1hPr2zutRSHbw7R7asE+zvxKunLK1AJ
cxgWXk5JCyT/OpGJPcQLggb+uP/m8By7+O27dTuCNqSUvQZ8jAua42Jy8pkXTPAp
T5F4q8X5Za64ShrhYEfSIGkXzxuycx5GVapRxbq22rM6jEJsGszpAuedwISDX9Am
IPG4Qc7ctekBfve/JqacQUQA+YRJGSwYm0x0x2KynYYtxyVjYljheZtUDMt8wXvI
Zv1W7+W9FnzTLULyJ6B3aVb30YkV8gDH+0b1gOU3fT0VK7+xotik3fAXSDyNT4Px
Zqd51nKy2NmogC+VYqK0VzqHdGGSMnErRMUF3ocJwFntf/3YxJLYSV5K3aguRAAV
sx1kCvfHtWETogW1LbHcbe11VOD6flJ3Hg7U0ERWWkZP5TgdJUit/FKsjO+Rs6GR
PiQaE8y4Zum5c4JevtPPtF23l0DcNrJBf2jKCO0UkLEh/bdpVoq00dbmEr+lNFlN
lvAb2Xd/4ISi64bjb/9ZDFjRgL5A/coqKgIHGBpbA2PXkIt118YXTUsMlS+zNc3T
lc9QddJjhIcTwISdmPRgCIgZRLxikp3QSb3ezFcXCYgEv4dDV+H/DSN19NSqMB3e
BzRPAtJyO5ooEKXdr/0AEYC0/22Y5tb4cxvsS2K2w6ui78tjIiAvAgMBAAGjggM0
MIIDMDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU
31kDTq9QVYKmAgKZfRNiuE4xVUIwggGYBgNVHREEggGPMIIBi4IUd3d3Lm1vbGwt
bG9naXN0aWsuZGWCEG1vbGwtbG9naXN0aWsuZGWCFXd3dy56Y2MtcHJvbW90aW9u
LmNvbYIZYWRlY2NvZ3JvdXAtcHJvbW90aW9uLmNvbYIRemNjLXByb21vdGlvbi5j
b22CInd3dy5iay1pbnRlcm5hdGlvbmFsLXByb21vdGlvbi5jb22CEWJlbGZvci13
ZWJzaG9wLmV1giFoZXNzZS1tdXN0ZXJzaG9wLm1vbGwtbG9naXN0aWsuZGWCGmJy
ZW1lci1sZWd1aWwtcHJvbW90aW9uLmRlgh53d3cuYnJlbWVyLWxlZ3VpbC1wcm9t
b3Rpb24uZGWCFWtlbHZpb24tcHJvbW90aW9uLmNvbYIZd3d3LmtlbHZpb24tcHJv
bW90aW9uLmNvbYIdd3d3LmFkZWNjb2dyb3VwLXByb21vdGlvbi5jb22CFXd3dy5i
ZWxmb3Itd2Vic2hvcC5ldYIeYmstaW50ZXJuYXRpb25hbC1wcm9tb3Rpb24uY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
PgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1
c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB
BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUG
CCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVz
dC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9H
ZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgWjX8ZHPRwDkD1gmYYjAp2TV0Y+jR5b
3AW2DA2ZpAXI0FbuD1KBr9Y8r2SSl1BeP+Bvp0jPgvp2WITh77+FNNB92RtljQZB
fep1CMnZHbqvqgK14Ic/8t/lzE3EBwRZx+zUe1kHwEpVLXwvBpMmgsgm3ZkKpMjp
L2zIBZIE0RvC0h6wTZixJoAQj9L7PYC6HPff/jznWkA08DWImIWdQzf0XLPXRw1j
KSraIlwAkKAr9lWTz/yfyh0YvgxMa9HKBgx0i8RHxqmVKGACVgZoROP2zBQ4hFMU
ghLLWYCltfKOx0C9wISNgV1gTUIrousj6ZFrXIhNc08Jjhnsujmrqw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1684311976550793048647594318636126003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Senden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MOLL logistik GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.moll-logistik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818916639388671013058698848976998812514801359511451798558622894711591402135245345931711742347893757993183999155895678170999925406534280264680907228863708303857040838392611301797077985431189562186509231954529476337124433678840733165356762370288840492239128898787858041319165023315511608949501774396563030380528482041090699861306909466433167412944033438326955239766026100491221014400676653935955186702287166987988334241256475137128109070150342358200506797784659453072207184676040000301771810927992706234163021719205017199311455775237263917250456907100587070081905685238057894376471549330742147420491457777764129363846765208987246286899634672959940562419381162707383713026587715529986974133112517816483838213117590446059847669938749466054222728940412212148442454204870234396127830540109054557700728060674080204808409482869944799544412715130136187772615333187145716487274788247705494031781605789390939749835378940431046141412824200963701555040339474515341946836426213530921876668105650955324828583940683276642797313110268763551500909695035837346836368081717735151543017315898554715081859917276106443832664057793607244481423372207951503345544029222423703038643953941922292957511648419733132944469588320320662579741713587413928659774480431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df59034eaf505582a60202997d1362b84e315542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (399 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moll-logistik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moll-logistik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zcc-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeccogroup-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zcc-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bk-international-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfor-webshop.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hesse-mustershop.moll-logistik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bremer-leguil-promotion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bremer-leguil-promotion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelvion-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelvion-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adeccogroup-promotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfor-webshop.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bk-international-promotion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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