*.payu.in

- PayU Payments Pvt Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:c9:4e:30:76:fd:17:83:b3:e4:b1:32:89:2e:e9:a6 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PayU Payments Pvt Ltd

Organization: PayU Payments Pvt Ltd
State / Province: Haryana
Locality: Gurugram
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c9:4e:30:76:fd:17:83:b3:e4:b1:32:89:2e:e9:a6
Serial Number (int): 19654429477280408524165680388411156902
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 71:ec:b0:1d:5d:c7:01:62:46:a3:15:b7:1e:07:33:12:48:eb:77:f8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c5:73:4c:10:d6:2a:fc:be:b2:46:49:15:28:2f:bc:8e:9d:1e:e9:1b
Fingerprint (sha256): a8:dd:e7:86:fb:5b:e9:97:bb:13:c1:59:95:d3:5a:48:5c:76:b1:75:ac:55:6d:9c:68:81:8f:37:85:e4:3f:23

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.payu.in

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.payu.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.payu.in
payu.in

Other certificates including the domain name payu.in

(limited to 100 certificates)
secure.payu.in
www.payu.com
secure.payu.in
accounts.payu.in
secure.payu.in
signup.payu.in
secure.payu.in
lp.payu.in
*.payu.in
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
secure.payu.in
*.payu.in
*.payu.in
secure.payu.in
secure.payu.in
info.payu.in
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
www.payu.com
secure.payu.in
www.payu.in
enach.payu.in
nebula.payu.in
*.payu.in
secure.payu.in
secure.payu.in
secure.payu.in
obriskscore.payu.in
www.payu.com
www.payu.com
www.payu.com
www.payu.com
secure.payu.in
*.payu.in
www.payu.com
www.payu.com
secure.payu.in
*.payu.in
tpcs.payu.in
www.payu.com
pages.payu.in
payu.in
secure.payu.in
*.payu.in
www.payu.com
*.payu.in
www.payu.com
*.payu.in
test.payu.in
*.payu.in
secure.payu.in
capital.payu.in
secure.payu.in
*.payu.in
www.payu.com
www.payu.com
www.payu.com
*.payu.in
www.payu.in
secure.payu.in
jshb.payu.in
www.payu.in
*.payu.in
accounts.payu.in
secure.payu.in
*.payu.in
www.payu.com
secure.payu.in
*.payu.in
dataplatform.payu.in
secure.payu.in
dda.payu.in
www.payu.com
secure.payu.in
www.payu.com
www.payu.com
www.payu.com
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
*.payu.in
accounts.payu.in
accounts.payu.in
secure.payu.in
*.payu.in
secure.payu.in
*.payu.in
*.payu.in
enach.payu.in
*.payu.in
docs.payu.in
secure.payu.in
secure.payu.in
dda.payu.in

Certificate

The complete raw certificate details for *.payu.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZjCCBU6gAwIBAgIQDslOMHb9F4Oz5LEyiS7ppjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjExMjkwMDAwMDBaFw0yMzEyMzAyMzU5NTlaMGYxCzAJBgNVBAYTAklOMRAw
DgYDVQQIEwdIYXJ5YW5hMREwDwYDVQQHEwhHdXJ1Z3JhbTEeMBwGA1UEChMVUGF5
VSBQYXltZW50cyBQdnQgTHRkMRIwEAYDVQQDDAkqLnBheXUuaW4wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxG7GQ1qDcBi0sA1x3WRRv1UL9Xp24YlW
/AWM82KtT4oFruTbMnuvQnJ+1oWTEVntUdenCSVZ92jTfye87ESXNfLT1QiGbN9A
qWDa4KAtdKDp5VC6Vgi4Un58T2Vmb7RkeW85ZiYy+XgkIgpnhMF89CdlBRX4Of07
AxK/SJiRlNuXmFaHAOlG/dcpfld3+pMwyh8W5t4C0N51O+6CYFkyqFVWwqHN7cwW
IbzmHQomIMD/HmK6yQdqv1BvqxPUYrtnTx028tOlll/8AqTjEpTWlr936U9V11Qf
xlzoHc6lIBgyWAKhADwnb1A/MMX2P0aZATuFPT0KNAV6EAG7IqSBAgMBAAGjggMW
MIIDEjAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU
ceywHV3HAWJGoxW3HgczEkjrd/gwHQYDVR0RBBYwFIIJKi5wYXl1LmluggdwYXl1
LmluMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2Vv
VHJ1c3RSU0FDQTIwMTguY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB
BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB1BggrBgEFBQcBAQRp
MGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsG
AQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FD
QTIwMTguY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3
AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhMMoIWoAAAQDAEgw
RgIhAMLRdzZuDI7zc/MH+JjDLQCTIzFzDQRQy9c2eb+7mrXMAiEAtBaqwfHop7Na
2hBL2ckrLutXebO34RIZsGjVMmfkj9UAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcM
C4fc8AMOeTalmgAAAYTDKCF+AAAEAwBHMEUCIQDJpXhUYwgZpabm4foUybti+C+b
Se8kUtncE4HkI2QyiwIgMcOSo0wp2NClHbSAm4VvxiewKAVd/zrVtltb5C2PwJ8A
dQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYTDKCFLAAAEAwBG
MEQCIDSXMMwAHLco/4YdaoOe4Psf9pWLVVcVhMvBkHchcagOAiB0B9ga+tDiFXrQ
E+1QOGgoaxofCbxM48M/6bfAaZARFTANBgkqhkiG9w0BAQsFAAOCAQEAUQ40AMB+
KKwTaqcAVqtkML4bujUmic7ObApsr2Paijw9mRid4IvGgL/0yfzZooi3NXxXa5G6
0u5fbWvYiauMvKsI4vQ3fGSLGB4UguYzx+MUZgdbtC7Ka5Q27jsCFqJyqck1FRBl
trWQJyh8Tt2KHTUC0rVDaANijx/dQUAo2fNZDmkePiEJG0CnVsgfjum62YCxhuth
0OicjGltVFvmYGL2s/GzHlYWZYj8jKdOSxo8HVn/zHU1usS8oje2oSzdFJRQWiKX
fzSxKhBAYoxUXXuGn5UyhL/KgH1zlz0vWcum8gdpyYWMDwDhK5oBxXv5j54TytVx
1ocFhS4JT4InEg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8RuxkNag3AYtLANcd1k
Ub9VC/V6duGJVvwFjPNirU+KBa7k2zJ7r0JyftaFkxFZ7VHXpwklWfdo038nvOxE
lzXy09UIhmzfQKlg2uCgLXSg6eVQulYIuFJ+fE9lZm+0ZHlvOWYmMvl4JCIKZ4TB
fPQnZQUV+Dn9OwMSv0iYkZTbl5hWhwDpRv3XKX5Xd/qTMMofFubeAtDedTvugmBZ
MqhVVsKhze3MFiG85h0KJiDA/x5iuskHar9Qb6sT1GK7Z08dNvLTpZZf/AKk4xKU
1pa/d+lPVddUH8Zc6B3OpSAYMlgCoQA8J29QPzDF9j9GmQE7hT09CjQFehABuyKk
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19654429477280408524165680388411156902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gurugram'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayU Payments Pvt Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.payu.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22693521169776263482489586085241760408577847430136572699054207384022429068448958721463722953564879567356319247074602314710925463830059468900844329857234042705894925149222691894783130908796678378274564970513158501490834574170866229332128314990572620688339750144430348580577613551562714122827009322060240774624081576474777195540170138819470301798355970754437629000911752178069560745982688593454262722071746476556796532289704896289475791292241919475205895433898439942418004587879730099977870991830432316471949303889319932669190586250571112995377391270426188833674031293967457180942443460976057977374431651849078766216321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71ecb01d5dc7016246a315b71e07331248eb77f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payu.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00510e3400c07e28ac136aa70056ab6430be1bba352689cece6c0a6caf63da8a3c3d99189de08bc680bff4c9fcd9a288b7357c576b91bad2ee5f6d6bd889ab8cbcab08e2f4377c648b181e1482e633c7e31466075bb42eca6b9436ee3b0216a272a9c935151065b6b59027287c4edd8a1d3502d2b5436803628f1fdd414028d9f3590e691e3e21091b40a756c81f8ee9bad980b186eb61d0e89c8c696d545be66062f6b3f1b31e56166588fc8ca74e4b1a3c1d59ffcc7535bac4bca237b6a12cdd1494505a22977f34b12a1040628c545d7b869f953284bfca807d73973d2f59cba6f20769c9858c0f00e12b9a01c57bf98f9e13cad571d68705852e094f822712