goldenbrokers.my
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 09:9e:53:11:67:ea:b7:4f:8c:86:5c:53:2b:84:59:f3 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=goldenbrokers.my
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:9e:53:11:67:ea:b7:4f:8c:86:5c:53:2b:84:59:f3Serial Number (int): 12785119684749321766454403272777423347
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 66:b9:3c:3b:66:2b:11:5c:66:8d:85:d4:89:23:cd:af:29:9a:34:e3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): a5:c4:b9:15:19:b5:41:ca:75:a0:85:e9:d5:38:fd:dd:22:10:dc:21
Fingerprint (sha256): e4:b7:7b:aa:6f:b6:03:76:c2:2d:c3:42:0e:67:c5:2d:d5:d1:b5:4e:64:fb:32:6b:7b:4c:3f:d3:43:a8:a3:46
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate goldenbrokers.my
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for goldenbrokers.my
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
goldenbrokers.my
www.goldenbrokers.my
my.goldenbrokers.my
www.goldenbrokers.my
my.goldenbrokers.my
Other certificates including the domain name goldenbrokers.my
(limited to 100 certificates)
quickrisk.module.demo.pentech.hu
goldenbrokers.my
www.datalire.com
datasaurus.us
haby.academy
www.yaytext.com
app.goldenbrokers.my
action.tatianatsoir.com
eventdrc.com
goldenbrokers.my
phadonia.com
www.liveathome.no
www.liveathome.no
paringandhi.tech
stringdb.com
datasaurus.us
hub-dev.frend.app
action.tatianatsoir.com
goldenbrokers.my
eventdrc.com
quickrisk.module.demo.pentech.hu
goldenbrokers.my
paringandhi.tech
goldenbrokers.my
goldenbrokers.my
moontracer.xyz
malzama.axenda.app
malzama.axenda.app
goldenbrokers.my
goldenbrokers.my
www.datalire.com
datasaurus.us
haby.academy
www.yaytext.com
app.goldenbrokers.my
action.tatianatsoir.com
eventdrc.com
goldenbrokers.my
phadonia.com
www.liveathome.no
www.liveathome.no
paringandhi.tech
stringdb.com
datasaurus.us
hub-dev.frend.app
action.tatianatsoir.com
goldenbrokers.my
eventdrc.com
quickrisk.module.demo.pentech.hu
goldenbrokers.my
paringandhi.tech
goldenbrokers.my
goldenbrokers.my
moontracer.xyz
malzama.axenda.app
malzama.axenda.app
goldenbrokers.my
Certificate
The complete raw certificate details for goldenbrokers.my in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgIQCZ5TEWfqt0+MhlxTK4RZ8zANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA1MTYwMDAwMDBaFw0yMDA1MTUxMjAwMDBaMBsxGTAXBgNVBAMTEGdvbGRl bmJyb2tlcnMubXkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuaufe FXY26KCoLtAiAwlf+ERzDrgl2H4Ry3d8+ovlsxgpvSqSTjRgimdYMJUcKbkTE6pU zdxr8sTgfspE7yU7+W7jSeZdNVNYSmXRfhjB1SCaCBOHwqkRMdxt1YClHVkpYx1h vJ4IWI4/cl1ugsmNbaMBmkwjhxQodxejdfjSsiEhUK+e5HjL077eMWnXrDiQhGzZ Od3PCpvxxnZpJLwCoKpYERRxqUrZwNE84D+LrPPEU3k4jETiNIdO59rsHVVzG5UG dFXkwbSTYt8dpsS8//SiIAslB0zfaK3IPOqa7qUc3uykTXh6PT3sDLdC7HHbGkXl 8iFAYBCwhcZKDzBQK0pZVQFpcKGEINAbnjw5MVD7rD0RT1hsPrDGY6p3hBrp1tiY zd0nZWdrJnMpsFcxMoErE0abk3DH/LDPTgWOy9BkpjJNJgIDPkvvd2OSFzLzBEfp Iq2uteIUOwpsYxmIFqJ5e+PbdmQO5DvfrZwIDcwHIjY+MjpGY3u1aRYMGkNX4h17 tGx+D22radIJqeCVBAzeZoIJ80jY0a5glQrMSuOrcoA6TTyk5DR1x7aWQ61O1xSb u3qlwf6DwpnWFY+1cbfuFN3nLIIOthUFW7OaIjfQZpq+Frb+aM1RstHewIM3N5Yl /nWm8JN0Dvs6iIIy6hySvTngzveCkPH1vuy99wIDAQABo4IC0zCCAs8wHwYDVR0j BBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYEFGa5PDtmKxFcZo2F 1Ikjza8pmjTjMEYGA1UdEQQ/MD2CEGdvbGRlbmJyb2tlcnMubXmCFHd3dy5nb2xk ZW5icm9rZXJzLm15ghNteS5nb2xkZW5icm9rZXJzLm15MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGg L4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3Js MEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAm BggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUH MAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAx OC5jcnQwCQYDVR0TBAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AO5Lvbd1 zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABasAdSTYAAAQDAEYwRAIgV2p3 X8K6cLfODhEKaRQ8cdnLFfwIvce0wr2KpPps4lwCIGG8F2foz9n579QgCe5iMeL3 QhOK2a5O3IMJ//iuqmRvAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g gw8AAAFqwB1KWQAABAMASDBGAiEAq6AclQT7CAkbSuqfizaF4do8JJFBEDQqFUN0 RVnYosgCIQDGPn8Vb0nWlLtKFXHuBtgvDqO7BYh9X7OD09fW7Y5fqTANBgkqhkiG 9w0BAQsFAAOCAQEAaNSDiHS6nHY9wEC7z/szIejZKtnIEbEbyzyN1gQ7XmTsZuvw ujibWGB/GsObVw6KUMmgWTiC/6Qwqr59MjPY2iz3AL+l23qXMktwmI9A+bLZausb 1i4w83Mm7M8UlIZcTy3JWjvrFdQgGspa7yu0vQUbIW1fzYmWqZBa+st5x/ZemJn7 jIt36GRBk1i0I8u07R0NvkkwbznqFxf4+krLEP5oRxKAg5Oy0AEnk28JhJ6bs2EJ QPhe0oeZf+48Xthra7XUfkwBrkU1Tzz8jxx6pzGARcA8SJQ0m1vfN8bsC4ieFi2l RSmxpajbRA0d7eNr6FPxDYac2txN5HXJ2FIfBQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArmrn3hV2NuigqC7QIgMJ X/hEcw64Jdh+Ect3fPqL5bMYKb0qkk40YIpnWDCVHCm5ExOqVM3ca/LE4H7KRO8l O/lu40nmXTVTWEpl0X4YwdUgmggTh8KpETHcbdWApR1ZKWMdYbyeCFiOP3JdboLJ jW2jAZpMI4cUKHcXo3X40rIhIVCvnuR4y9O+3jFp16w4kIRs2Tndzwqb8cZ2aSS8 AqCqWBEUcalK2cDRPOA/i6zzxFN5OIxE4jSHTufa7B1VcxuVBnRV5MG0k2LfHabE vP/0oiALJQdM32ityDzqmu6lHN7spE14ej097Ay3Quxx2xpF5fIhQGAQsIXGSg8w UCtKWVUBaXChhCDQG548OTFQ+6w9EU9YbD6wxmOqd4Qa6dbYmM3dJ2VnayZzKbBX MTKBKxNGm5Nwx/ywz04FjsvQZKYyTSYCAz5L73djkhcy8wRH6SKtrrXiFDsKbGMZ iBaieXvj23ZkDuQ7362cCA3MByI2PjI6RmN7tWkWDBpDV+Ide7Rsfg9tq2nSCang lQQM3maCCfNI2NGuYJUKzErjq3KAOk08pOQ0dce2lkOtTtcUm7t6pcH+g8KZ1hWP tXG37hTd5yyCDrYVBVuzmiI30Gaavha2/mjNUbLR3sCDNzeWJf51pvCTdA77OoiC Muockr054M73gpDx9b7svfcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12785119684749321766454403272777423347 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goldenbrokers.my' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711561729309529373412948914637505613963008551318651579935189016752312066873477485946673601731227161440911780135457723532429126855271716432301849773567749277033913256775173881690192615746088358869743442871719036931075299350936884416236398830020676791789684555048080419512576319219571093045609409900422944948299094458465688899470165072197601585443996294450842551336893335802954960171139283578072750114830498813106383744281376990295456323021922298543858052361041089404473456908225365197978187240890125745846674089720947119248862465252740884375815601293641351151770424221744361153668181094587155080893184475632282546669595073708428608314986220504846687650851333950344748211339335316394498419046650039980297535890434568101853714270117618194200046680823144860587164156941002313969533942971922880542501331396093625295400517387403465856695874969476748023325289104985195375664791373035973455907886382343432162063692803059941922997647707661958556575078270894073935126358483771541341716709131467892776430409466828915140947748600920393943558845729393468294971292235400116705577032583471134720699094481063457624111654612278387686981198004983131991089332119886161481149905702850102065109794440009259384688639123491807081095526242062734079814319607 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 66b93c3b662b115c668d85d48923cdaf299a34e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenbrokers.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenbrokers.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.goldenbrokers.my' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ac01d493600000403004630440220576a775fc2ba70b7ce0e110a69143c71d9cb15fc08bdc7b4c2bd8aa4fa6ce25c022061bc1767e8cfd9f9efd42009ee6231e2f742138ad9ae4edc8309fff8aeaa646f0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ac01d4a590000040300483046022100aba01c9504fb08091b4aea9f8b3685e1da3c24914110342a1543744559d8a2c8022100c63e7f156f49d694bb4a1571ee06d82f0ea3bb05887d5fb383d3d7d6ed8e5fa9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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