www.medicagroup.co.uk
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 0f:fd:7a:e7:e2:66:95:7e:90:cf:bb:ec:a1:a7:5e:17 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.medicagroup.co.uk
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:fd:7a:e7:e2:66:95:7e:90:cf:bb:ec:a1:a7:5e:17Serial Number (int): 21254563867727864402984171207607672343
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ba:6b:28:a0:99:d4:20:57:76:6c:25:fc:4a:9d:ed:c6:5e:34:55:6e
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 8a:a5:35:65:56:a4:5f:f1:f4:d6:03:1d:c8:f7:04:6b:33:4d:91:8f
Fingerprint (sha256): e5:31:75:4c:fc:3a:87:70:58:5a:1a:02:59:d9:c1:0d:9b:c9:89:48:ad:50:f0:6f:6c:67:7b:05:29:0a:dd:6f
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate www.medicagroup.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.medicagroup.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.medicagroup.co.uk
medicagroup.co.uk
medicagroup.co.uk
Other certificates including the domain name medicagroup.co.uk
(limited to 100 certificates)
cas.medicagroup.co.uk
medicagroup.co.uk
*.medicagroup.co.uk
www.medica-reporting.co.uk
insight2.medicagroup.co.uk
*.medicagroup.co.uk
insight2.medicagroup.co.uk
nhportal.medicagroup.co.uk
auth.medicagroup.co.uk
medicagroup.co.uk
*.medicagroup.co.uk
www.medicagroup.co.uk
*.medicagroup.co.uk
investors.medicagroup.co.uk
www.medicagroup.co.uk
webvpn.medicagroup.co.uk
insight.medicagroup.co.uk
nhportal.medicagroup.co.uk
webvpn.medicagroup.co.uk
*.medicagroup.co.uk
webvpn.medicagroup.co.uk
www.medica.co.uk
www.medicagroup.co.uk
webvpn.medicagroup.co.uk
insight.medicagroup.co.uk
insight2.medicagroup.co.uk
*.medicagroup.co.uk
rd-ravpn.medicagroup.co.uk
auth-training.medicagroup.co.uk
vtigercrm.medicagroup.co.uk
medica-reporting.co.uk
medicaportal-training.medicagroup.co.uk
medicagroup.co.uk
hg-ravpn.medicagroup.co.uk
ravpn.medicagroup.co.uk
www.medica-reporting.co.uk
medicaportal.medicagroup.co.uk
insight2.medicagroup.co.uk
cas.medicagroup.co.uk
www.medicagroup.co.uk
medicagroup.co.uk
medica.co.uk
www.medicanet.co.uk
feedback.medicagroup.co.uk
www.medicagroup.co.uk
www.medicagroup.co.uk
cas.medicagroup.co.uk
medica.co.uk
*.medicagroup.co.uk
www.medicagroup.co.uk
*.medicagroup.co.uk
nhportal.medicagroup.co.uk
www.medicanet.co.uk
medicagroup.co.uk
*.medicagroup.co.uk
www.medica-reporting.co.uk
insight2.medicagroup.co.uk
*.medicagroup.co.uk
insight2.medicagroup.co.uk
nhportal.medicagroup.co.uk
auth.medicagroup.co.uk
medicagroup.co.uk
*.medicagroup.co.uk
www.medicagroup.co.uk
*.medicagroup.co.uk
investors.medicagroup.co.uk
www.medicagroup.co.uk
webvpn.medicagroup.co.uk
insight.medicagroup.co.uk
nhportal.medicagroup.co.uk
webvpn.medicagroup.co.uk
*.medicagroup.co.uk
webvpn.medicagroup.co.uk
www.medica.co.uk
www.medicagroup.co.uk
webvpn.medicagroup.co.uk
insight.medicagroup.co.uk
insight2.medicagroup.co.uk
*.medicagroup.co.uk
rd-ravpn.medicagroup.co.uk
auth-training.medicagroup.co.uk
vtigercrm.medicagroup.co.uk
medica-reporting.co.uk
medicaportal-training.medicagroup.co.uk
medicagroup.co.uk
hg-ravpn.medicagroup.co.uk
ravpn.medicagroup.co.uk
www.medica-reporting.co.uk
medicaportal.medicagroup.co.uk
insight2.medicagroup.co.uk
cas.medicagroup.co.uk
www.medicagroup.co.uk
medicagroup.co.uk
medica.co.uk
www.medicanet.co.uk
feedback.medicagroup.co.uk
www.medicagroup.co.uk
www.medicagroup.co.uk
cas.medicagroup.co.uk
medica.co.uk
*.medicagroup.co.uk
www.medicagroup.co.uk
*.medicagroup.co.uk
nhportal.medicagroup.co.uk
www.medicanet.co.uk
Certificate
The complete raw certificate details for www.medicagroup.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIQD/165+JmlX6Qz7vsoadeFzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xOTA2MDcwMDAwMDBaFw0yMDA3MDYxMjAwMDBaMCAxHjAcBgNVBAMTFXd3dy5t ZWRpY2Fncm91cC5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOvYEakFsQF8uZ9XUF8uZL+4LQRQq3A937kfgaB0RWPDOVwFKIR4cMfK/habM++f loapQLF7IIPhGb75UZf1HSKt/n1sliCoNbBAkCYG45FENFh8/LM4Wgwh4ya7ADz2 yrWKCOLbfbo448+ml3+9U0BMAVlX9pC58HGbuKFHAfWIFOLzTkfCiynxK09O4HKI rIhDF+aWouPMPfnBo9tW8i7GhSQUD0xu7FOQqtK80D3zoXDtPL2w8CtW0uDieU/V iujglrxNiXQyNo0u47rt5qY77pSm3qYyEumxXzYQCTqCz2nhM6bpQu4dbDFq0z7V K0BSP4lOojyqDQCZNOyFiVkCAwEAAaOCAr4wggK6MB8GA1UdIwQYMBaAFFPKF1n8 a8ADIS8aruSqqByCVtp1MB0GA1UdDgQWBBS6ayigmdQgV3ZsJfxKne3GXjRVbjAz BgNVHREELDAqghV3d3cubWVkaWNhZ3JvdXAuY28udWuCEW1lZGljYWdyb3VwLmNv LnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5yYXBpZHNzbC5jb20vUmFw aWRTU0xSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYI KwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5yYXBp ZHNzbC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLnJhcGlkc3NsLmNv bS9SYXBpZFNTTFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAQIGCisGAQQB1nkC BAIEgfMEgfAA7gB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAAB azIrtxIAAAQDAEYwRAIgGTbWik4pazFvrqBJ2PW6yXOULhl+FlzoMFkLCWftuXYC IGYheVJjLhx62W5fm92xlfJz2g5FUqMuUoQBGRk6vRl7AHUAh3W/51l8+IxDmV+9 827/Vo1HVjb/SrVgwbTq/16ggw8AAAFrMiu34QAABAMARjBEAiAitd3s6TfUYlEA n47rhqHerEGTgGlbX499hpj8ZljVBwIgBRBX67wN4s+XB08JD87BZq23ppL/Mq5J 1fF1KnSGDZwwDQYJKoZIhvcNAQELBQADggEBAOGfxnnkFaiZ8+5fhxbFphpL6EWO S+2TLpvLb9JOR6J3elQt7F8soGlLsx1e7d+RZJ6YfNA3xHsF81MztZQFPdEDecN4 NZfqeS9wuiQG6IRtf9sEoFxTu0JR2M1X7W2uwOcH1SserlNQXR+LlHn3kJZc17yt jRsrVpbpt3gH9n1w89e7q3TOr6HbsQcwma0LBq2osV3dRKUJzpGB2vPFL1rjbj7e 3U23KmC7BmveegiO6RpPWtPHHCDBxIGMknXq8uxIyDut9jjpsKYky05WRcaeCqv1 qtUm9ILI+ObbxeNET5N2gC/RAzVvcif/D2mq+0hrpaaJ27Ecjy8lcNjNRxs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69gRqQWxAXy5n1dQXy5k v7gtBFCrcD3fuR+BoHRFY8M5XAUohHhwx8r+Fpsz75+WhqlAsXsgg+EZvvlRl/Ud Iq3+fWyWIKg1sECQJgbjkUQ0WHz8szhaDCHjJrsAPPbKtYoI4tt9ujjjz6aXf71T QEwBWVf2kLnwcZu4oUcB9YgU4vNOR8KLKfErT07gcoisiEMX5pai48w9+cGj21by LsaFJBQPTG7sU5Cq0rzQPfOhcO08vbDwK1bS4OJ5T9WK6OCWvE2JdDI2jS7juu3m pjvulKbepjIS6bFfNhAJOoLPaeEzpulC7h1sMWrTPtUrQFI/iU6iPKoNAJk07IWJ WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21254563867727864402984171207607672343 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.medicagroup.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29772549254770307792545496796099185748164609683665059478838654513168493720495411631690445605919104402944396157104500762273723826040229039524773636371647793101796031483909837425104368117405111240895778600866905570105088468007805581408968175622292179604209988089775180079410377730257855957988730952002946449252172395504502053649544670931465972212339205804414670337210552156090972022592044250258527149394504213102166087776183220730032967101617379795598255433878969842254160350762996700658217751805919705050157331108898386342711564714467272356765148821795688498596112963718146482919967005426736809300609671449715939838297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba6b28a099d42057766c25fc4a9dedc65e34556e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicagroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicagroup.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016b322bb712000004030046304402201936d68a4e296b316faea049d8f5bac973942e197e165ce830590b0967edb976022066217952632e1c7ad96e5f9bddb195f273da0e4552a32e52840119193abd197b0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b322bb7e10000040300463044022022b5ddece937d46251009f8eeb86a1deac419380695b5f8f7d8698fc6658d5070220051057ebbc0de2cf97074f090fcec166adb7a692ff32ae49d5f1752a74860d9c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00e19fc679e415a899f3ee5f8716c5a61a4be8458e4bed932e9bcb6fd24e47a2777a542dec5f2ca0694bb31d5eeddf91649e987cd037c47b05f35333b594053dd10379c3783597ea792f70ba2406e8846d7fdb04a05c53bb4251d8cd57ed6daec0e707d52b1eae53505d1f8b9479f790965cd7bcad8d1b2b5696e9b77807f67d70f3d7bbab74ceafa1dbb1073099ad0b06ada8b15ddd44a509ce9181daf3c52f5ae36e3ededd4db72a60bb066bde7a088ee91a4f5ad3c71c20c1c4818c9275eaf2ec48c83badf638e9b0a624cb4e5645c69e0aabf5aad526f482c8f8e6dbc5e3444f9376802fd103356f7227ff0f69aafb486ba5a689dbb11c8f2f2570d8cd471b