www.1stbmt.com
- Glacier Bank -
Issued by GeoTrust EV RSA CA 2018
About this certificate
This digital certificate with serial number 08:22:00:42:ba:1f:a4:b0:f9:c2:c7:95:6c:c7:a6:62 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Glacier Bank
Company registration number:
D093435
Organization: Glacier Bank
Organization: Glacier Bank
State / Province:
Montana
Locality: Kalispell
Country: US
Locality: Kalispell
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:22:00:42:ba:1f:a4:b0:f9:c2:c7:95:6c:c7:a6:62Serial Number (int): 10810367346130703323952324918773261922
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2e:d9:10:ad:62:5b:76:3c:e2:be:50:01:96:4e:49:d8:61:8a:14:f5
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58
Fingerprint (sha1): 85:a3:25:7a:57:1f:aa:9e:09:a8:bf:69:db:53:a6:74:22:ea:6d:d2
Fingerprint (sha256): e1:78:39:f2:1e:75:ab:e6:7b:3b:71:08:6f:5a:59:cb:39:00:bc:c1:5a:00:fd:b0:b4:00:37:12:f0:6a:51:e4
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl
Check the revocation status for certificate www.1stbmt.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.1stbmt.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.1stbmt.com
1stbmt.com
1stbmt.com
Other certificates including the domain name 1stbmt.com
(limited to 100 certificates)
www.1stbmt.com
www.1stbmt.com
www.1stbmt.com
mortgage.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
1stbmt.com
mortgage.gofirstbank.com
1stbmt.com
mortgage.gofirstbank.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.1stbmt.com
www.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.1stbmt.com
www.1stbmt.com
www.1stbmt.com
mortgage.1stbmt.com
1stbmt.com
www.1stbmt.com
mortgage.1stbmt.com
mortgage.valleybankhelena.com.roostify.com
1stbmt.com
mortgage.fsbwy.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.1stbmt.com
www.quickapply.1stbmt.com
1stbmt.com
mortgage.fcbutah.com.roostify.com
mortgage.collegiatepeaksbank.com.roostify.com
www.1stbmt.com
www.1stbmt.com
1stbmt.com
www.1stbmt.com
www.1stbmt.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.1stbmt.com
www.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
www.1stbmt.com
www.1stbmt.com
www.1stbmt.com
mortgage.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
1stbmt.com
mortgage.gofirstbank.com
1stbmt.com
mortgage.gofirstbank.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.1stbmt.com
www.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.1stbmt.com
www.1stbmt.com
www.1stbmt.com
mortgage.1stbmt.com
1stbmt.com
www.1stbmt.com
mortgage.1stbmt.com
mortgage.valleybankhelena.com.roostify.com
1stbmt.com
mortgage.fsbwy.com
san-10-s11.tlsprovisioning.exacttarget.com
mortgage.1stbmt.com
www.quickapply.1stbmt.com
1stbmt.com
mortgage.fcbutah.com.roostify.com
mortgage.collegiatepeaksbank.com.roostify.com
www.1stbmt.com
www.1stbmt.com
1stbmt.com
www.1stbmt.com
www.1stbmt.com
mortgage.collegiatepeaksbank.com.roostify.com
san-10-s11.tlsprovisioning.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
www.1stbmt.com
www.1stbmt.com
san-10-s11.tlsprovisioning.exacttarget.com
www.1stbmt.com
Certificate
The complete raw certificate details for www.1stbmt.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIQCCIAQrofpLD5wseVbMemYjANBgkqhkiG9w0BAQ0FADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdHZW9UcnVzdCBFViBSU0EgQ0EgMjAx ODAeFw0yMjA5MjkwMDAwMDBaFw0yMzA5MjkyMzU5NTlaMIHDMRMwEQYLKwYBBAGC NzwCAQMTAlVTMRgwFgYLKwYBBAGCNzwCAQITB01vbnRhbmExHTAbBgNVBA8MFFBy aXZhdGUgT3JnYW5pemF0aW9uMRAwDgYDVQQFEwdEMDkzNDM1MQswCQYDVQQGEwJV UzEQMA4GA1UECBMHTW9udGFuYTESMBAGA1UEBxMJS2FsaXNwZWxsMRUwEwYDVQQK EwxHbGFjaWVyIEJhbmsxFzAVBgNVBAMTDnd3dy4xc3RibXQuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQf6Pm30G0jKnbmbn+4b+CL+bdhsCLDR nXeDnhUN8JItct1YZ+bmGrUs/6C4AgXzVtAR0TswXF677dzOCmtlAMlsItwuTDXE rzjkopytr+PrwAHJLI8DR5v/qwZ4rjuimVsHLw8qZ6/C4roCChwgF0vPIEtFYSPy X4/HKFLuZnwnsqW8a+FEXGPEZRNh3Yz2Q3rjxIWd1ir77+ha5RdD+1MxDVHzbRO3 8U19vMmsxo7X8lNKoe/2ic3uPAczcQHDK6xYOIFE2u+EPoLS1eKnB36iUAQUAA0N 6UwkgE+0u62m6Y/UlUlgFO/TjcQ8g8pnsKbTM1wybEdNa0Jcg1aF6wIDAQABo4ID LjCCAyowHwYDVR0jBBgwFoAUypJnUmHervy6Iit/HIdMJftvmVgwHQYDVR0OBBYE FC7ZEK1iW3Y84r5QAZZOSdhhihT1MCUGA1UdEQQeMByCDnd3dy4xc3RibXQuY29t ggoxc3RibXQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwQAYDVR0fBDkwNzA1oDOgMYYvaHR0cDovL2NkcC5nZW90cnVz dC5jb20vR2VvVHJ1c3RFVlJTQUNBMjAxOC5jcmwwSgYDVR0gBEMwQTALBglghkgB hv1sAgEwMgYFZ4EMAQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMHcGCCsGAQUFBwEBBGswaTAmBggrBgEFBQcwAYYaaHR0cDovL3N0 YXR1cy5nZW90cnVzdC5jb20wPwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRzLmdl b3RydXN0LmNvbS9HZW9UcnVzdEVWUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIB fgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr 7Otp4Xd9bQa9bgAAAYOJk/P7AAAEAwBHMEUCIQCjWgNkpJOc6htjqAgdVqT4A6Mm 24s4eCjPpngwsepI8QIgPeqWv7ionERr2952AZEGmco9MPNmBd11WwfUzJz5jMEA dgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYOJk/RgAAAEAwBH MEUCIQCKvuLlWUt5nkjGZaHs1s8cuVcGOw1dXZKl35nPX7Lv9QIgNrDvDCToRbQ7 93pMStJVITs850egsHObxfIJwNLBy8UAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qf NcSeHQmBJe20mQAAAYOJk/Q0AAAEAwBHMEUCIEoI9oNop5JbL38dv27aPrg4sBUL cNsr2ARu6uRIel33AiEAzF3nHVrlAMz5HcsFrlkPcSfvdsUFhHeHZzX6bXYZvDsw DQYJKoZIhvcNAQENBQADggEBACl4zOAY6phOrKd4188FMcZt1LxgpsBHQC8+YHF4 o8AmamQ14CeCx0YYoV8+2Ic311DHdH/kaH+hPeGOBCURYV+LzUuExsQovf8RWXpd cINqohuCe4psNJrJsdI1y1P3/ymp+MJgXeg9294m58UMTgCxSeAPz/Kpq7aOBFmk N/IDAAMi6a3vcRdverbZfg5JFimAiyjBuJv5lCyjAT9chS0BJj6wvICu/wGYOuha QVzFF3XD92U7xiJQ9/5sEvn7C715A4ReA06w+V60wwE+EU1rcdQxZlmQgTfoM1Sv pQHMFgJrFiAcnlwTmIHW5WVeNTLKW1ymcmEHntGBUtvsCgY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQf6Pm30G0jKnbmbn+4b +CL+bdhsCLDRnXeDnhUN8JItct1YZ+bmGrUs/6C4AgXzVtAR0TswXF677dzOCmtl AMlsItwuTDXErzjkopytr+PrwAHJLI8DR5v/qwZ4rjuimVsHLw8qZ6/C4roCChwg F0vPIEtFYSPyX4/HKFLuZnwnsqW8a+FEXGPEZRNh3Yz2Q3rjxIWd1ir77+ha5RdD +1MxDVHzbRO38U19vMmsxo7X8lNKoe/2ic3uPAczcQHDK6xYOIFE2u+EPoLS1eKn B36iUAQUAA0N6UwkgE+0u62m6Y/UlUlgFO/TjcQ8g8pnsKbTM1wybEdNa0Jcg1aF 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10810367346130703323952324918773261922 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D093435' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kalispell' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glacier Bank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.1stbmt.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24872879937625644050848559057377004268216220335393916314809361191571608350612791292959858736981061895357933054442609784022339412623057078066557901823462963674124168377975624799753969125662203524364425058697240536801477607779164252408288857138532024498389001249118915062912996037082064336588893517463209872689047842666450625954045766420800846551981486310710181237773078433730931073597433874419638010435620140096525984467647731047308347713654556769145792629433941905539547739993288199406322412695057664254849552045450779449530278663866599885290698185928149021420315755315620216866084361997713544362857683885129169536491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ed910ad625b763ce2be5001964e49d8618a14f5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1stbmt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stbmt.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean false . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:10|false] . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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