mx-cluster.omc-mail.de

- OMCnet Internet Service GmbH -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:53:ef:1d:87:94:9b:d0:69:bc:22:5d:13:5e:c4:70 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OMCnet Internet Service GmbH

Organization: OMCnet Internet Service GmbH
Organization unit: Technik
State / Province: Schleswig-Holstein
Locality: Quickborn
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:53:ef:1d:87:94:9b:d0:69:bc:22:5d:13:5e:c4:70
Serial Number (int): 9740406445224920624922958198172730480
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a7:2d:ba:61:9c:b6:4f:c7:b6:b7:c1:3f:a0:cf:be:80:f2:60:86:4c
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 10:61:65:d7:5e:42:54:f5:ab:ff:dc:e5:b5:b4:15:50:79:2e:5a:e3
Fingerprint (sha256): c6:a6:e6:cb:30:9a:a4:21:2b:b1:59:43:9f:75:de:14:5b:55:5c:0b:5d:7f:be:e2:0e:6f:c7:e8:03:87:d8:01

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate mx-cluster.omc-mail.de

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx-cluster.omc-mail.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mx-cluster.omc-mail.de
backup-mx.omc-mail.de
mx6.omc-mail.com
relay.omc-mail.de
mx1.omc-mail.com
mx2.omc-mail.de
mx4.omc-mail.de
mx4.omc-mail.com
mx11.omcnet.de
mx5.omc-mail.com
mx6.omc-mail.de
mx2.omc-mail.com
mx3.omc-mail.com
mx05.omc.net
mx3.omc-mail.de
mx5.omc-mail.de
mx1.omc-mail.de
mx10.omc.net

Other certificates including the domain name omc-mail.de

(limited to 100 certificates)
mx-cluster.omc-mail.de
mail-cluster.omc-mail.de
mc01.omc.net
mc01.omc.net
mx-cluster.omc-mail.de
mx-cluster.omc-mail.de
mc01.omc.net
mx-cluster.omc-mail.de

Certificate

The complete raw certificate details for mx-cluster.omc-mail.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHcDCCBligAwIBAgIQB1PvHYeUm9BpvCJdE17EcDANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTE5MDEwNzAwMDAwMFoXDTIwMDIwNjEyMDAwMFowgZgxCzAJBgNVBAYTAkRF
MRswGQYDVQQIExJTY2hsZXN3aWctSG9sc3RlaW4xEjAQBgNVBAcTCVF1aWNrYm9y
bjElMCMGA1UEChMcT01DbmV0IEludGVybmV0IFNlcnZpY2UgR21iSDEQMA4GA1UE
CxMHVGVjaG5pazEfMB0GA1UEAxMWbXgtY2x1c3Rlci5vbWMtbWFpbC5kZTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMTu2sarhCjhfG5BH7RzVwK1REWN
POgfZkSMNVXod/mp8CHhb7vk4UutLsICXRHkC2WkVvaVbtlQLBb6i03uvFWz9iD3
4redfoT3TU5un4Ji8IBbSUmIOQ3sn5KyEg6bd39NQcRpRTjkJ5tg8Dtxd8mS+vtJ
HWdnvrk9jqPRhW+lfuKVs/x3K0FizEN+ot+ffPxQt94ZICuoPybKyOn9rD2uOhvL
kDfAEnjxWUHC76J3oEeXBqPrBN412O3CrIi4vPM9KjSXwsaMNr5gnIJ5jDt9hEpM
62f2E4uu/WsInZ9LBh+mAePNu3OYEcKHv3Jv8G9pItgmN/xpiqMovukHV/AtGbvm
7RkPYmsx1n5dQ2UMFAP+VtcXdNS3E+2JqFX47NBOWL5+vE6MjuPLE4BOB//uFOhn
ZGhHJyCn/1KTnXuz8UrO5ZuTDg5+ShtH9JswrD9lhQ+a4d5WctRyEwLzehL+ADXU
3XJtJyQKlBfBKk+ixLfaMKNZCFcvY/nbkXzgOf8ldYeMNQGqV1MY9vMckysr+zGU
McSHHlZEscP3KtnBFQBOJDxroZC547SWpnpflTPllzSEXOHssEW5vr1LjYGPTJzi
7o0DseCvFBIcRRIMouRI2POji4xTDvBbAblesvy7mGEARVcLbrENx4HBS77DCLkd
mhqu/JiWyeQ0S1uFAgMBAAGjggLrMIIC5zAfBgNVHSMEGDAWgBSUT9Rdi+Sk4qaA
/v3Y+QDvo74CVzAdBgNVHQ4EFgQUpy26YZy2T8e2t8E/oM++gPJghkwwggFNBgNV
HREEggFEMIIBQIIWbXgtY2x1c3Rlci5vbWMtbWFpbC5kZYIVYmFja3VwLW14Lm9t
Yy1tYWlsLmRlghBteDYub21jLW1haWwuY29tghFyZWxheS5vbWMtbWFpbC5kZYIQ
bXgxLm9tYy1tYWlsLmNvbYIPbXgyLm9tYy1tYWlsLmRlgg9teDQub21jLW1haWwu
ZGWCEG14NC5vbWMtbWFpbC5jb22CDm14MTEub21jbmV0LmRlghBteDUub21jLW1h
aWwuY29tgg9teDYub21jLW1haWwuZGWCEG14Mi5vbWMtbWFpbC5jb22CEG14My5v
bWMtbWFpbC5jb22CDG14MDUub21jLm5ldIIPbXgzLm9tYy1tYWlsLmRlgg9teDUu
b21jLW1haWwuZGWCD214MS5vbWMtbWFpbC5kZYIMbXgxMC5vbWMubmV0MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0f
BDgwNjA0oDKgMIYuaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNS
U0FDQUcxLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB
FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB2BggrBgEF
BQcBAQRqMGgwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29t
MD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1
c3RUTFNSU0FDQUcxLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQCakPR1Cf0nSqZzEKVg/O4ncgTtOS5vSVlYHa69
3xTHeQhQNv/7+geaysUBfqkHPj5E6u22lhb0pquMshmnHr/wDPhBeOsDEQp2OqDu
nrI2E06nDy00L5lD0kuNwLzsjzeqvqgiS6OLJTnqQZlXDSEuM2ZZr5molwKDJju/
At7KiwlQwXBJgSCQfuoe5JTk5W2yncWnq9gxPdHd/M7G4zznVlPXv5DSPVXy9Lwn
NiXLlb7X7keacvF+Gl3NxNBuYujMSNtmtQpmdfKdRBsMxEw/4kw2XDsbYycq/kmf
YGfsdi8WU5Xx4Q5+8IjSO+l93lUj4R7RwYrkscmc9oAJomRW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9740406445224920624922958198172730480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quickborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OMCnet Internet Service GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mx-cluster.omc-mail.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803416650329531366947892583184906315120564472521854371866139221678191521580075340234944693045076185285325942051838273203568301065091237962011417722690097078764014527855918400886584256246118516700395990307174357767602435566497475192802112542298577847930824481046862320616147087599936794326842558371380588838394094776954299872240122306666389905785089103005501563039518850398895751562226226727995841389624318829418423767429054404046706848379984323650135431233894757965485941211779993724894653179284126893953921706440061785801869508658579303388747567572911833194133146587073605135673709461697233474329059211456566203424368894320850913381136619181785565596333243332002047026146924473213312418798061541547632287727640386045831750846370563654714553371967307820623744266382160399725864174269769309411037587527953470954312559797159306402672041800235816956989160038481142371804919117520543240517505969343274445577561395319389871390483880476940507160517152975442879121682502529978404057671526831390161479563105900057045506458951267561240316169241684878677849965444343229049108687926621304659328959830815190180752448632488783458668379485797033059089516370745262340721190613000387268170980404263817649574062949139968955206210073413588358968073093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a72dba619cb64fc7b6b7c13fa0cfbe80f260864c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx-cluster.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup-mx.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx6.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relay.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx4.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx4.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx11.omcnet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx5.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx6.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx3.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx05.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx3.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx5.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx10.omc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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