edge1.townebank.net
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 09:91:e2:77:99:65:7b:e5:67:61:72:35:6d:7a:ba:8d was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=edge1.townebank.net
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:91:e2:77:99:65:7b:e5:67:61:72:35:6d:7a:ba:8dSerial Number (int): 12720528306747450430521190960609278605
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 45:f7:1d:62:f1:8e:e6:e7:dd:0c:09:be:38:c9:0b:72:eb:b2:3e:87
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 7e:21:20:45:de:9c:7b:b3:7a:c6:8e:32:09:bf:f0:4a:a4:6a:c3:2b
Fingerprint (sha256): c7:e3:a4:df:bc:a1:de:36:c7:2a:3a:47:9d:3b:91:88:ef:48:bf:28:eb:bc:57:bb:23:8a:d2:dd:aa:37:c2:47
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate edge1.townebank.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for edge1.townebank.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
edge1.townebank.net
tow5969ewe1p01den.townebank.net
tow5969ewe1p01den.townebank.net
Other certificates including the domain name townebank.net
(limited to 100 certificates)
edge1.townebank.net
mfa.townebank.net
mvproxy.townebank.net
mfa.townebank.net
appian.townebank.net
adfs.townebank.net
tbentspsolutions.townebank.net
adfs.townebank.net
tbshare.townebank.net
entise01.townebank.net
fisopendcitest.townebank.net
mfa.townebank.net
a.townebank.net
edge4.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
tbshare.townebank.net
edge1.townebank.net
edge4.townebank.net
rcvpn.townebank.net
bnkvproxy.townebank.net
mfa.townebank.net
appian2.townebank.net
appian.townebank.net
rcvpn.townebank.net
edge4.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
appian.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
appian.townebank.net
mvproxy.townebank.net
edge1.townebank.net
fisopendci.townebank.net
appian.townebank.net
mfa.townebank.net
tbentspsolutions.townebank.net
mfa.townebank.net
adfs.townebank.net
scanner.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
adfs.townebank.net
adfs.townebank.net
mfa.townebank.net
mvproxy.townebank.net
mfa.townebank.net
appian.townebank.net
adfs.townebank.net
tbentspsolutions.townebank.net
adfs.townebank.net
tbshare.townebank.net
entise01.townebank.net
fisopendcitest.townebank.net
mfa.townebank.net
a.townebank.net
edge4.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
tbshare.townebank.net
edge1.townebank.net
edge4.townebank.net
rcvpn.townebank.net
bnkvproxy.townebank.net
mfa.townebank.net
appian2.townebank.net
appian.townebank.net
rcvpn.townebank.net
edge4.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
appian.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
appian.townebank.net
mvproxy.townebank.net
edge1.townebank.net
fisopendci.townebank.net
appian.townebank.net
mfa.townebank.net
tbentspsolutions.townebank.net
mfa.townebank.net
adfs.townebank.net
scanner.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
adfs.townebank.net
adfs.townebank.net
Certificate
The complete raw certificate details for edge1.townebank.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIQCZHid5lle+VnYXI1bXq6jTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA4MTUwMDAwMDBaFw0yMTAzMzExMjAwMDBaMB4xHDAaBgNVBAMTE2VkZ2Ux LnRvd25lYmFuay5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCJ cFCsy2IMtm81RRd84/pmPOesq49AoG3Hi6W2kJzva2AV3wln53DBFgoRS7kbJD8m NDMwU33B/4JX61GngPZGGyaDBCsZwZis/x+0h6uFzwD46cIehMnPR6EXBlSru9he CfgxwcHsW0oxbFoHq1Vpe2NolPW0Ydfbw1ycsQ0lnkFgONFM07DSc324OmHiy/Wk Kt0+iQlsUTqiMpchYuOXwazuqd7cd6DXFIgW06b51yJrQmq3PEBhoWzlXRtCp0ot hAKbAZvYl9QBEjxi7yFiFQ8Z7pPeN4KJXrWTY5Ni88fUtjWWw4jjC2dtda7xGIXh iJLYGR3dvq1hnIZFXEgXxhiiLo2kcK6aD7R6e204dVNRB0suQrKq/QmF5MVaclHM m1FfOEQCMMA8r4dZsXY3bWzfx6mSiquopz+QPsd7QSR3oOI1KpfnuyMHB13m7w/q ZJqDb5c9ow/GzgttYPjCMi9qbDI7wyjYFvugGUDx4v6a5qJuGToxe44KhRll1zhL 76o8Ve7DIsTdDJSwF4oyCQ0kSHD48H5T8I7/d/JXwCr8j8aruSY8Ujmvr2Rk87Wr 6LAgyBB+dec9uM6/Vu29DHlxrwkqlpz5REplvNmv0nmpN0PIWBkwsr+ULdIYiB9W wfEkld9VYS4z1IHNvytkftY/VGMjC/rw57NsqTmxhQIDAQABo4IB2TCCAdUwHwYD VR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYEFEX3HWLxjubn 3QwJvjjJC3Lrsj6HMD8GA1UdEQQ4MDaCE2VkZ2UxLnRvd25lYmFuay5uZXSCH3Rv dzU5Njlld2UxcDAxZGVuLnRvd25lYmFuay5uZXQwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1o dHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYD VR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsG AQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYx aHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNy dDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAzB9f5g7geudsJO3Dto4MEC0k/wW1Gipgjzm8GAdw1vOvx5FrU9dscBRFJ V3LTxR6EheyFBG9etffoWHAAskdhKsRb5zfG9g2o7ijih+3EqbT+zXMky3+2d/jc SKSvL/A/SLS3uy39JVm8hRLZCFvzPVfPYfWHsH5d8PM6mNW8AQ8eUfZ9ymR9y7lo mgz2CDv0NcYT+NPXFl3wxeToplifUsN5YdTZ73rn46rc/xzF8kW+9eOb2pTpv/Uc MWVxz8KZIe7nnfUa6A6UWp8UqGs+/oWUi8VDoU/bWMIvQmbed8jZGvAygjklQXLE bLgK0mx0DdYWOjnvb6FA96P29omN -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAiXBQrMtiDLZvNUUXfOP6 ZjznrKuPQKBtx4ultpCc72tgFd8JZ+dwwRYKEUu5GyQ/JjQzMFN9wf+CV+tRp4D2 RhsmgwQrGcGYrP8ftIerhc8A+OnCHoTJz0ehFwZUq7vYXgn4McHB7FtKMWxaB6tV aXtjaJT1tGHX28NcnLENJZ5BYDjRTNOw0nN9uDph4sv1pCrdPokJbFE6ojKXIWLj l8Gs7qne3Heg1xSIFtOm+dcia0JqtzxAYaFs5V0bQqdKLYQCmwGb2JfUARI8Yu8h YhUPGe6T3jeCiV61k2OTYvPH1LY1lsOI4wtnbXWu8RiF4YiS2Bkd3b6tYZyGRVxI F8YYoi6NpHCumg+0enttOHVTUQdLLkKyqv0JheTFWnJRzJtRXzhEAjDAPK+HWbF2 N21s38epkoqrqKc/kD7He0Ekd6DiNSqX57sjBwdd5u8P6mSag2+XPaMPxs4LbWD4 wjIvamwyO8Mo2Bb7oBlA8eL+muaibhk6MXuOCoUZZdc4S++qPFXuwyLE3QyUsBeK MgkNJEhw+PB+U/CO/3fyV8Aq/I/Gq7kmPFI5r69kZPO1q+iwIMgQfnXnPbjOv1bt vQx5ca8JKpac+URKZbzZr9J5qTdDyFgZMLK/lC3SGIgfVsHxJJXfVWEuM9SBzb8r ZH7WP1RjIwv68OezbKk5sYUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12720528306747450430521190960609278605 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge1.townebank.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 560701103650472059107270794905998670477889059731835925326432162236773326724251082171792882373786662941212060285784217948520966134969581313752760867427177280650495817112488031299582484416052943196460517510468323017303215188675540900416668209108873035372887697087062204064219437566114311644751072442651501500710392682978577642065703857016949356981686324231107732166498662475336517790361375466883510266924883473581950883467350367722121415691073274828316655917032457752720829018471124781674066795296426396088294605649721221258441018788975305416051309153749770445852070774446890863706027342067056680342341167323162510879740220680825931243196181644132250240598683336410047427837350289016251907189094610981793588495061250887805671959163655831309556727700722009223032911284178626667588950145058466745022700217538893168031580350971638822699975095485119076872172509407975311873956137219177663920476650223210721627304148227274290457141147635124676587565325307666233057670047867277153323497366756166455206758200834591159974335487522944363545556423036401017884767565552296489600089967669634216390042885272976808269350397799909608510666066234363367504736786019227288959079189704997616798983257497421834897155246703287790518873316071523413455909253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45f71d62f18ee6e7dd0c09be38c90b72ebb23e87 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge1.townebank.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tow5969ewe1p01den.townebank.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003307d7f983b81eb9db093b70eda383040b493fc16d468a9823ce6f0601dc35bcebf1e45ad4f5db1c0511495772d3c51e8485ec85046f5eb5f7e8587000b247612ac45be737c6f60da8ee28e287edc4a9b4fecd7324cb7fb677f8dc48a4af2ff03f48b4b7bb2dfd2559bc8512d9085bf33d57cf61f587b07e5df0f33a98d5bc010f1e51f67dca647dcbb9689a0cf6083bf435c613f8d3d7165df0c5e4e8a6589f52c37961d4d9ef7ae7e3aadcff1cc5f245bef5e39bda94e9bff51c316571cfc29921eee79df51ae80e945a9f14a86b3efe85948bc543a14fdb58c22f4266de77c8d91af0328239254172c46cb80ad26c740dd6163a39ef6fa140f7a3f6f6898d