www.egencia.com

- Expedia, Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:50:f4:a4:e2:30:0a:9c:51:a2:25:52:3e:34:d1:dd was issued on by DigiCert Inc.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Expedia, Inc

Organization: Expedia, Inc
State / Province: Washington
Locality: Bellevue
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:50:f4:a4:e2:30:0a:9c:51:a2:25:52:3e:34:d1:dd
Serial Number (int): 16371081669465410798267629926012473821
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 15:16:c6:de:07:c5:fd:f1:90:78:dc:a6:27:d6:0b:2d:52:cb:7a:a7
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ae:e9:20:a5:10:a1:a6:03:1e:66:d0:c4:0f:95:fa:db:1b:e0:f9:17
Fingerprint (sha256): ab:99:71:e6:04:60:94:3c:33:df:78:3f:bd:b3:ce:cb:f6:03:d4:9d:b7:ed:a5:2e:ee:4d:87:3e:23:51:68:26

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.egencia.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.egencia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobile.egencia.cn
mobile.egencia.no
mobile.egencia.com
m.egencia.com
mobile.egencia.nl
mobile.egencia.ch
mobile.egencia.ca
mobile.egencia.com.sg
www.egencia.it
www.egencia.ae
assets.egencia.com
www.egencia.co.uk
www.egencia.se
www.egencia.com
mobile.egencia.dk
mobile.egencia.com.tr
mobile.egencia.de
mobile.egencia.cz
mobile.egencia.com.au
mobile.egencia.com.ph
mobile.egencia.es
www.egencia.co.nz
www.egencia.ca
preprod.egencia.fr
www.egencia.ch
mobile.egencia.com.hk
www.egencia.pl
mobile.egencia.fr
mobile.egencia.fi
egencia.com
www.egencia.ie
www.egencia.com.tr
mobile.egencia.se
www.egencia.be
www.egencia.nl
www.egencia.com.br
www.egencia.dk
www.egencia.no
www.egencia.mx
preprod.egencia.co.uk
www.egencia.com.sg
www.egencia.com.au
mobile.egencia.ie
www.egencia.co.in
www.egencia.cn
www.egencia.co.il
mobile.egencia.co.in
mobile.egencia.it
www.egencia.de
www.egencia.cz
www.egencia.com.ph
www.egencia.com.hk
www.egencia.co.za
www.egencia.fr
mobile.egencia.pl
mobile.egencia.co.uk
mobile.egencia.be
www.egencia.eu
www.egencia.es
www.egencia.fi

Other certificates including the domain name egencia.com

(limited to 100 certificates)
learn.egencia.com
www.egencia.com
events.egencia.com
events.egencia.com
info.egencia.com
events.egencia.com
wwph.egencia.cn
discover.egencia.com
mi.egencia.com
www.egencia.com
akamai-san75.exacttarget.com
discover.egencia.com
discover.egencia.com
www.egencia.com
cloud.email.egencia.com
events.egencia.com
events.egencia.com
productinfo.egencia.com
learn.egencia.com
info.egencia.com
www.egencia.com
learn.egencia.com
lyncweb.expedia.biz
events.egencia.com
wwph.egencia.com
feedback.egencia.com
www.egencia.com
view.email.egencia.com
click.email.egencia.com
learn.egencia.com
feedback.egencia.com
learn.egencia.com
conversations.expedia.com
events.egencia.com
www.egencia.com
events.egencia.com
productinfo.egencia.com
community.egencia.com
community.egencia.com
mail.expedia.com
feedback.egencia.com
events.egencia.com
community.egencia.com
mi.egencia.com
cdn.egencia.com
www.egencia.com
info.egencia.com
conversations.expedia.com
egencia.ae
events.egencia.com
learn.egencia.com
community.egencia.com
egencia.com
lyncphxaccess.expedia.biz
click.email.egencia.com
akamai-san75.exacttarget.com
reporting.egencia.com
events.egencia.com
events.egencia.com
community.egencia.com
metrics.egencia.com
*.int-maui.sb.karmalab.net
discover.egencia.com
go.egencia.com
learn.egencia.com
www.egencia.com
mi.egencia.com
discover.egencia.com
events.egencia.com
egencia.com
events.egencia.com
learn.egencia.com
wwwegenciacom.int-maui.sb.karmalab.net
www.egencia.com
learn.egencia.com
mi.egencia.com
akamai-san75.exacttarget.com
events.egencia.com
www.egencia.com
learn.egencia.com
events.egencia.com
learn.egencia.com
feedback.egencia.com
www.egencia.com
learn.egencia.com
reporting.egencia.com
cloud.email.egencia.com
wwph.egencia.com
go.egencia.com
egencia.com
cloud.email.egencia.com
southwest.egencia.com
click.email.egencia.com
*.egencia.com
events.egencia.com
click.email.egencia.com
www.egencia.com
events.egencia.com
feedback.egencia.com
info.egencia.com

Certificate

The complete raw certificate details for www.egencia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1gdpbwTcVLW6XrhStgY
UrRzq2xRSDGSObK8U2aNrYQ5b2PAsrefXC0Rzh4hx8PYBFyVID9tBQImCw8Vl60i
adEIXBMaXEEfwmZytNbdADEnwdsV0ldw4PRlY8fPIRu1xxSwbk6A02ru8i90NiFG
JUGeNuCvpG03wMAEVOd/Z8OcU7g3oqdJaUgQQXn1+tcFuhIoyLVPjIKGb/L9lMUO
aqOB9P9ECPMkChP+hJ5yPomtog2fGh7mn2hGf3nfijXJGEkEcmMqVYsB4LivLb33
DBk7JoY2dtEY3v+iUENXC4wYv7Y7saF/i1t4/CGFjHDGmMFwgAbLwx2tWd40x6vB
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16371081669465410798267629926012473821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.egencia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23650014554103584703520400989344518896082837820869884738939525117496293364003821308774849424799205807154494202014167362783737101453318693439865478238173945287878830025639068315749088166979796584586009013111608781828060128931444802791783817521531756106004393596304071508711984655131101827611001025734767102648522728732509549590719545385919071197847169457147070684261328190982575112781889134745324774312951753293332613401372769340434093469978259683684617931855824062303842974026358227886973640211661060148099062731907519746035251819738005889151945771263425141811180791275453657259732729704364270044094688017302443245953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1516c6de07c5fdf19078dca627d60b2d52cb7aa7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.egencia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.egencia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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