www.lefrecce.it
- TRENITALIA S.p.A. -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 07:6b:10:a3:a5:20:52:15:08:6b:4f:d5:2f:5d:76:e0 was issued on by DigiCert Inc.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
TRENITALIA S.p.A.
Organization:
TRENITALIA S.p.A.
Organization unit: TRENITALIA S.p.A.
Organization unit: TRENITALIA S.p.A.
Locality:
Roma
Country: IT
Country: IT
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:6b:10:a3:a5:20:52:15:08:6b:4f:d5:2f:5d:76:e0Serial Number (int): 9860509218205885787182715116713768672
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: bf:ad:04:cc:5d:b8:8b:1d:59:9f:5b:8a:67:e9:bf:b5:50:d6:d2:a5
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): af:d4:ac:0a:08:47:7b:e0:fb:cd:8e:22:e6:a1:2a:d0:3b:af:0d:71
Fingerprint (sha256): cb:0c:19:70:74:65:91:d9:ba:af:f0:7f:23:95:3c:96:31:9c:0b:95:28:a1:8a:15:16:c3:02:a1:c3:e9:ed:16
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.lefrecce.it
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lefrecce.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.lefrecce.it
thello.fr
italyinmotion.it
lefrecce.it
italyinmotion.eu
www.italyinmotion.eu
www.italyinmotion.com
www.italyinmotion.it
www.thello.fr
italyinmotion.com
thello.fr
italyinmotion.it
lefrecce.it
italyinmotion.eu
www.italyinmotion.eu
www.italyinmotion.com
www.italyinmotion.it
www.thello.fr
italyinmotion.com
Other certificates including the domain name lefrecce.it
(limited to 100 certificates)
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it
Certificate
The complete raw certificate details for www.lefrecce.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIQB2sQo6UgUhUIa0/VL1124DANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODAyMjMwMDAwMDBaFw0xOTA1MjUxMjAwMDBaMG4xCzAJBgNVBAYTAklUMQ0w CwYDVQQHEwRSb21hMRowGAYDVQQKExFUUkVOSVRBTElBIFMucC5BLjEaMBgGA1UE CxMRVFJFTklUQUxJQSBTLnAuQS4xGDAWBgNVBAMTD3d3dy5sZWZyZWNjZS5pdDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALwshVq4Jlx58ePYukshA3pH 37TRvD0iyHq6pfM7Dzk6/VA0Cqr9jtgMecQNU3zTAeeviBsEiTVi4opbo1Vl5XPq SgZ4XAnbZZMKd886qf80AOPJ6v2/jMQ8Rw7q8m4ElpS7CbRu2pTAan4IyDzMtysL bh1QTUv4EBD11jjmBpe4F6KBvT3P73BLiwNBBPHcNJrSvZNUy9JFUyixMv0NlX/I CLcRO1ackuUr12PP9VdGyxP9Ui2AvC+ZwcWuFy7JSvge6Hn+B9buzO6WSxC/0jHC onn8hXFST8qY5xyfpuIFgM7Wq5WXRYDKte4JUsm+RAzGqwvyydzjcwpCOm2F5uEC AwEAAaOCA8QwggPAMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0G A1UdDgQWBBS/rQTMXbiLHVmfW4pn6b+1UNbSpTCBvQYDVR0RBIG1MIGygg93d3cu bGVmcmVjY2UuaXSCCXRoZWxsby5mcoIQaXRhbHlpbm1vdGlvbi5pdIILbGVmcmVj Y2UuaXSCEGl0YWx5aW5tb3Rpb24uZXWCFHd3dy5pdGFseWlubW90aW9uLmV1ghV3 d3cuaXRhbHlpbm1vdGlvbi5jb22CFHd3dy5pdGFseWlubW90aW9uLml0gg13d3cu dGhlbGxvLmZyghFpdGFseWlubW90aW9uLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0 dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNV HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYB BQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFo dHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0 MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AKS5CZC0GFgU h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABYcG3cqcAAAQDAEYwRAIgbtfIDYb6 LIbu8kDt/9COywR13Zu+uW6SSakI3r7Kz88CIG+MND2OIdGHgnU6mrRVqKIjezWX 3+6wG5Z3o20leZ3tAHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8A AAFhwbdzbgAABAMARjBEAiAjvyDyJnO54iDoJU5pbYKl/zJ6Qb1GVa2hRs/HHnLJ TgIgdjOBP3E7IudkboWduZxBxZCoMkI6ToQWjwrDREDrpfwAdwC72d+8H4pxtZOU I5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWHBt3NzAAAEAwBIMEYCIQC0JGjD3zRK 9Qh69Il2Up6YWW8AVHwCrgStkjQPDyy/jgIhAO6DeAjnmBlWNzW1WTiiHsKpuJis bDnK7xViDrFJgBMjMA0GCSqGSIb3DQEBCwUAA4IBAQB3oHMPjC6vgxyDaf+f+tJS AVif54+AInrcoK84mfMkNGKBjE2bQ1MhU+7Qchx6mRpXxrEJKeoGxQQMql3rtv+F whoA0lF25XYs7MVXdIm+kZ3Yp5Fo/dWaxbx9kAVyACBLoX0zewUpVvcg7kkh1iAF WKmRKotLpHiHC228g1M9hi3ZK5glSsb63M0n7FWj1CYhRoVwfhllKGOLxPTnOEmQ mL9KMSvjy1/NkJm5ylHlTSnfGlrCnvpRDgDBpJ8DatJ44FPKXrSPjjK7qEtWn4jS JSVPi5ZFFry4yO0mBwFmjxGEcxF3qva7ioH7tug/4H4tvG5EJpRHtUVryRUWGHt/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCyFWrgmXHnx49i6SyED ekfftNG8PSLIerql8zsPOTr9UDQKqv2O2Ax5xA1TfNMB56+IGwSJNWLiilujVWXl c+pKBnhcCdtlkwp3zzqp/zQA48nq/b+MxDxHDurybgSWlLsJtG7alMBqfgjIPMy3 KwtuHVBNS/gQEPXWOOYGl7gXooG9Pc/vcEuLA0EE8dw0mtK9k1TL0kVTKLEy/Q2V f8gItxE7VpyS5SvXY8/1V0bLE/1SLYC8L5nBxa4XLslK+B7oef4H1u7M7pZLEL/S McKiefyFcVJPypjnHJ+m4gWAztarlZdFgMq17glSyb5EDMarC/LJ3ONzCkI6bYXm 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9860509218205885787182715116713768672 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TRENITALIA S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TRENITALIA S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lefrecce.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23754755415300382976272104315713681868727808553788245428793767306191234114583891858016214245663380277782669177448622755310031783290646678262160456029034205563028749993035904917377596373500337058913274104505292009264632245134596177333891793155198731258482975626842169624548177943604497937903968221031125488298914401562415085354643841223708383183281302872774820892203337598237456563141583297228662927520438748888108621154630758436104772553093231944504871831754114604377005736175295723514511402369442331507001411137766706150841928991657899330915791773960042173602413110508771523690472968819101012684695219348078640621281 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bfad04cc5db88b1d599f5b8a67e9bfb550d6d2a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefrecce.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thello.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italyinmotion.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefrecce.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italyinmotion.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italyinmotion.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italyinmotion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italyinmotion.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thello.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italyinmotion.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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