sipgate.co.uk
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 02:3f:a9:6a:ca:f4:d0:9b:5a:2e:42:f1:70:c6:a3:f1 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sipgate.co.uk
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:3f:a9:6a:ca:f4:d0:9b:5a:2e:42:f1:70:c6:a3:f1Serial Number (int): 2989006881877704532596114019735479281
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 49:9c:06:f7:e5:8c:f0:79:32:6c:8a:46:db:8b:fc:e6:46:2c:bd:0c
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 6e:b1:20:33:2e:5b:7e:5f:5d:9f:15:f2:55:ee:77:90:87:f1:cf:3f
Fingerprint (sha256): e1:35:8e:56:3f:48:d3:28:dd:d3:63:b1:0c:3f:76:e4:7f:6d:c3:d9:3e:d3:6d:48:83:21:60:e2:d5:1d:c5:48
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate sipgate.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sipgate.co.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sipgate.co.uk
Other certificates including the domain name sipgate.co.uk
(limited to 100 certificates)
basicsupport.sipgate.de
tls01.sipgate.co.uk
support.simconnect.de
secure.sipgate.co.uk
sipgate.co.uk
teamhelp.sipgate.co.uk
support.simconnect.de
basicsupport.sipgate.de
basicsupport.sipgate.de
sipgate.co.uk
teamhelp.sipgate.co.uk
basicsupport.sipgate.de
support.simconnect.de
sipgate.co.uk
www.sipgate.co.uk
secure.live.sipgate.co.uk
support.simconnect.de
support.simconnect.de
status.sipgate.co.uk
secure.sipgate.co.uk
support.simquadrat.de
basicsupport.sipgate.de
basicsupport.sipgate.de
basicsupport.sipgate.de
support.simconnect.de
basicsupport.sipgate.de
basicsupport.sipgate.de
teamhelp.sipgate.co.uk
www.sipgate.co.uk
secure.stage.sipgate.co.uk
www.sipgate.co.uk
support.simconnect.de
basicsupport.sipgate.de
secure.live.sipgate.co.uk
basicsupport.sipgate.de
support.simquadrat.de
www.sipgate.co.uk
secure.sipgate.co.uk
support.simconnect.de
basicsupport.sipgate.de
www.sipgate.co.uk
basicsupport.sipgate.de
www.sipgate.co.uk
secure.sipgate.co.uk
tls01.sipgate.co.uk
secure.sipgate.co.uk
sipgate.co.uk
basicsupport.sipgate.de
basicsupport.sipgate.de
basicsupport.sipgate.de
teamhelp.sipgate.co.uk
basicsupport.sipgate.de
support.simconnect.de
basichelp.sipgate.co.uk
support.simconnect.de
status.sipgate.co.uk
secure.live.sipgate.co.uk
sip.sipgate.co.uk
support.simconnect.de
tls01.sipgate.co.uk
support.simconnect.de
signup.dev.sipgate.de
www.sipgate.co.uk
secure.live.sipgate.co.uk
support.simconnect.de
tls01.sipgate.co.uk
secure.sipgate.co.uk
secure.sipgate.co.uk
teamhelp.sipgate.co.uk
teamhelp.sipgate.co.uk
sipgate.co.uk
www.sipgate.co.uk
secure.stage.sipgate.co.uk
basicsupport.sipgate.de
support.simconnect.de
sipgate.co.uk
basicsupport.sipgate.de
tls01.sipgate.co.uk
support.simconnect.de
secure.sipgate.co.uk
sipgate.co.uk
teamhelp.sipgate.co.uk
support.simconnect.de
basicsupport.sipgate.de
basicsupport.sipgate.de
sipgate.co.uk
teamhelp.sipgate.co.uk
basicsupport.sipgate.de
support.simconnect.de
sipgate.co.uk
www.sipgate.co.uk
secure.live.sipgate.co.uk
support.simconnect.de
support.simconnect.de
status.sipgate.co.uk
secure.sipgate.co.uk
support.simquadrat.de
basicsupport.sipgate.de
basicsupport.sipgate.de
basicsupport.sipgate.de
support.simconnect.de
basicsupport.sipgate.de
basicsupport.sipgate.de
teamhelp.sipgate.co.uk
www.sipgate.co.uk
secure.stage.sipgate.co.uk
www.sipgate.co.uk
support.simconnect.de
basicsupport.sipgate.de
secure.live.sipgate.co.uk
basicsupport.sipgate.de
support.simquadrat.de
www.sipgate.co.uk
secure.sipgate.co.uk
support.simconnect.de
basicsupport.sipgate.de
www.sipgate.co.uk
basicsupport.sipgate.de
www.sipgate.co.uk
secure.sipgate.co.uk
tls01.sipgate.co.uk
secure.sipgate.co.uk
sipgate.co.uk
basicsupport.sipgate.de
basicsupport.sipgate.de
basicsupport.sipgate.de
teamhelp.sipgate.co.uk
basicsupport.sipgate.de
support.simconnect.de
basichelp.sipgate.co.uk
support.simconnect.de
status.sipgate.co.uk
secure.live.sipgate.co.uk
sip.sipgate.co.uk
support.simconnect.de
tls01.sipgate.co.uk
support.simconnect.de
signup.dev.sipgate.de
www.sipgate.co.uk
secure.live.sipgate.co.uk
support.simconnect.de
tls01.sipgate.co.uk
secure.sipgate.co.uk
secure.sipgate.co.uk
teamhelp.sipgate.co.uk
teamhelp.sipgate.co.uk
sipgate.co.uk
www.sipgate.co.uk
secure.stage.sipgate.co.uk
basicsupport.sipgate.de
support.simconnect.de
sipgate.co.uk
basicsupport.sipgate.de
Certificate
The complete raw certificate details for sipgate.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIQAj+pasr00JtaLkLxcMaj8TANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMTAxMTAwMDAwMFoXDTI0MTAxMDIzNTk1OVowGDEWMBQGA1UEAxMNc2lw Z2F0ZS5jby51azCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK8kR2b6 v7ScM8F+UGj3w5Iw0oRTfZOGGHuxUKjrTfPYqFayqhqODpVJk+5Na9VIbc55+7Hv 6+NN2t1MqKazKHNeJiII4o6eqpeRN2jMtIBxg3+cZU/v6G57t/nuBJGqtGnaQntl L5sHPmCAXmiyAlMUCgf7ntaYfpsPscdradhaUpTsNmjLsETMqQksHB6JKt6z9toP YbxykfkAVnmJEYnVBc3w5HqLsioBKY9Q0l1RhwrJSxA3DUhFRGf4qPCujWJmKXnE SgytqqgM63Ph1eD7i8KrVNg+xCMvk3XtnA1XEYJ3Jxd1d7gT5V/ZW3GJ5k1syLt1 Yr80VXg3VedQph3879G5T+jyEuu4t18LhIQ7zpg9FfqEuFa1aY6JerQ7i0s0UfTZ ExSX5XWYggxdqm02VAUcvykY1niqMLo/6To1tjPFHedofPdxN1lTILnonf1jGJfL dTLv5HGxV7ILBGy7rQTIdKz1zpuq4oK1WrispFIdeCTS499sLJDjgUkZj/dK43Xs OukO0ygOba/am82qOQ4uSCH6BWOLHbZlb9KhHQeZTQZ7SDqEaF+hOAazaj2OmbBs CBoz+YeuWvuzkgsEbR18re+9wc8UYMl7GIECmFoQhNEZphKol1OsZP5l/F6/RAqa 4jd/Fil7XcJb/fVuhJwTAuTsFXEvpBgMgGw5AgMBAAGjggMYMIIDFDAfBgNVHSME GDAWgBSUT9Rdi+Sk4qaA/v3Y+QDvo74CVzAdBgNVHQ4EFgQUSZwG9+WM8HkybIpG 24v85kYsvQwwGAYDVR0RBBEwD4INc2lwZ2F0ZS5jby51azA+BgNVHSAENzA1MDMG BmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D UFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9U cnVzdFRMU1JTQUNBRzEuY3JsMHYGCCsGAQUFBwEBBGowaDAmBggrBgEFBQcwAYYa aHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9j YWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3J0MAwGA1Ud EwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AHb/iD8KtvuVUcJh zPWHujS0pM27KdxoQgqf5mdMWjp0AAABix1+NbYAAAQDAEgwRgIhAOHs8jfxE1vy +rm4wSL4mDOCZJR6olDx1u4RvrUngNMcAiEAwNoSBsaGQXStCAIJk8uZd2s1o7fN 7MUwP21wZ1qoKdIAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA AYsdfjV4AAAEAwBHMEUCIQDt+Nkp7FEo0XjmlsXDAf73fXoVGRTreNkYi7xxu+qR BQIgev9kWkyKqngTHBbtwy0C+uQJgMlPMim9G+I5u2x8drAAdwDatr9rP7W2Ip+b wrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYsdfjW4AAAEAwBIMEYCIQCOs1KfaxCa 9gbN0GNpBQB6JwIxU4GYG7fofduhg39w0QIhAPCU2WwNdhxJpalPV5bmDKk2wfUi Z0BEs122sJQAsfEqMA0GCSqGSIb3DQEBCwUAA4IBAQBMnUaaZkIdTkhyE+Reda8I wiP4GSDJdzHSPLgOBpIpwx4HOsH1vhN6m3OFMkhdtnWIqFvXCUDvwUDx2fWj1AcQ EaKPIuGsRq8yOAZRBIx7V08GabwAnep7t8ylseLju7dp+KjpY4bHq+CgEOoBmDfB c0zJJdWnR0IN1qrBfFnc4AzkHCRjLDb98zkq5JlpZR8Cai22mlhiTMBYOyP9uA1S /zkGT2GBqBqnkoTZa9BYEGXeCUw4Wz6FGT56okWNQk030xXTL71H4RYKZ25gjvvH 58LGwk4rKdVfyHJOktCU3pyi75IFZJZyG1fwTuQx4wkRMkymd4tFMgKVkKkCHzoR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAryRHZvq/tJwzwX5QaPfD kjDShFN9k4YYe7FQqOtN89ioVrKqGo4OlUmT7k1r1Uhtznn7se/r403a3UyoprMo c14mIgjijp6ql5E3aMy0gHGDf5xlT+/obnu3+e4Ekaq0adpCe2Uvmwc+YIBeaLIC UxQKB/ue1ph+mw+xx2tp2FpSlOw2aMuwRMypCSwcHokq3rP22g9hvHKR+QBWeYkR idUFzfDkeouyKgEpj1DSXVGHCslLEDcNSEVEZ/io8K6NYmYpecRKDK2qqAzrc+HV 4PuLwqtU2D7EIy+Tde2cDVcRgncnF3V3uBPlX9lbcYnmTWzIu3VivzRVeDdV51Cm Hfzv0blP6PIS67i3XwuEhDvOmD0V+oS4VrVpjol6tDuLSzRR9NkTFJfldZiCDF2q bTZUBRy/KRjWeKowuj/pOjW2M8Ud52h893E3WVMgueid/WMYl8t1Mu/kcbFXsgsE bLutBMh0rPXOm6rigrVauKykUh14JNLj32wskOOBSRmP90rjdew66Q7TKA5tr9qb zao5Di5IIfoFY4sdtmVv0qEdB5lNBntIOoRoX6E4BrNqPY6ZsGwIGjP5h65a+7OS CwRtHXyt773BzxRgyXsYgQKYWhCE0RmmEqiXU6xk/mX8Xr9ECpriN38WKXtdwlv9 9W6EnBMC5OwVcS+kGAyAbDkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2989006881877704532596114019735479281 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sipgate.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714515856672078580517212361272302079344084343804210964498997788284726030163371709328613795503133715648371488885030456883989671246115499902136564602261716566153205984812663947437642419504578198004710639289521268227330075846684655394632231791740947265989816571507050311945369189973632013608296057527008732636308038722471516506864970483659620366267075600612677490222928981932358037034845382559761826577848770613481037977431129245752780994534338137287331714782764052059241754625355341523074468857044977530477623597353847839717459930220771007652167203278749963997325617006913285214775834864113145289930768790807042131233150736119489123658374902514868462737709380368220057924058306352450217245371477713280810986762372934631087188547684290598554307846304075995712209756358119892819412022858138626718158638390323586408646526858393366798538932753042645444186452967502904095965029906622738263126868983372818854303334702315365643178491544083317898704535223080421513827321128718758570229257423770081464673334358087144268172454012765033299555099212499474373082621106183901908432374333668636149327687379577849020744078889683520811065746759101855863956206145342348823325258462532817006821796728698766151165186634631879909527131905188933147803282489 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 499c06f7e58cf079326c8a46db8bfce6462cbd0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipgate.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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