webmail.friedrich.com

- Friedrich Air Conditioning, LLC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:08:1e:9c:67:bf:0b:8e:b2:15:6d:61:40:35:8e:9b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Friedrich Air Conditioning, LLC

Organization: Friedrich Air Conditioning, LLC
State / Province: Texas
Locality: San Antonio
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:1e:9c:67:bf:0b:8e:b2:15:6d:61:40:35:8e:9b
Serial Number (int): 4029843226212403436535237423463239323
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4c:b9:6a:c5:08:4d:65:a6:40:c7:e7:be:76:45:87:0d:fc:6d:81:3b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d0:54:4a:b3:0d:5c:6e:26:2a:60:da:9a:07:45:72:a4:f3:ff:79:aa
Fingerprint (sha256): e5:f6:28:d8:89:8b:06:5d:ea:7d:10:54:cc:54:e3:0d:6e:d2:15:92:2a:9a:fc:9c:64:82:a3:5a:59:87:6c:34

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate webmail.friedrich.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.friedrich.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.friedrich.com

Other certificates including the domain name friedrich.com

(limited to 100 certificates)
webmail.friedrich.com
blog.friedrich.com
webmail.friedrich.com
servicedesk.uwhealthcaredirect.com
info.friedrich.com
blog.friedrich.com
blog.friedrich.com
info.friedrich.com
shop.friedrich.com
servicedesk.uwhealthcaredirect.com
webmail.friedrich.com
*.friedrich.com
shop.friedrich.com
shop.friedrich.com
servicedesk.friedrich.com
service.cultivatebhe.com
shop.friedrich.com
webmail.friedrich.com
info.friedrich.com
*.friedrich.com
help.radassociates.com
webmail.friedrich.com
webmail.friedrich.com
servicedesk.uwhealthcaredirect.com
blog.friedrich.com
www.friedrich.com
info.friedrich.com
shop.friedrich.com
shop.friedrich.com
help.radassociates.com
*.friedrich.com
blog.friedrich.com
blog.friedrich.com
info.friedrich.com
webmail.friedrich.com
*.friedrich.com
friedrichlink.friedrich.com
*.friedrich.com
servicedesk.friedrich.com
friedrichlink.friedrich.com
friedrichlink.friedrich.com
shop.friedrich.com
help.radassociates.com
info.friedrich.com
soporte.onnetsa.com
servicedesk.friedrich.com
shop.friedrich.com
shop.friedrich.com
servicedesk.uwhealthcaredirect.com
shop.friedrich.com
blog.friedrich.com
boost-it.dechra.com
www.friedrich.com
*.friedrich.com
boost-it.dechra.com
servicedesk.friedrich.com
*.friedrich.com
shop.friedrich.com
www.friedrich.com
soporte.onnetsa.com
friedrichlink.friedrich.com
shop.friedrich.com
info.friedrich.com
help.radassociates.com
vpn.friedrich.com
friedrichlink.friedrich.com
shop.friedrich.com
www.friedrich.com
webmail.friedrich.com
vpn.friedrich.com
shop.friedrich.com
shop.friedrich.com
blog.friedrich.com
blog.friedrich.com
info.friedrich.com
shop.friedrich.com
*.friedrich.com
www.friedrich.com
*.friedrich.com
www.friedrich.com
www.friedrich.com
shop.friedrich.com
shop.friedrich.com
service.cultivatebhe.com
shop.friedrich.com
www.friedrich.com
shop.friedrich.com
blog.friedrich.com
info.friedrich.com
webmail.friedrich.com
soporte.onnetsa.com
shop.friedrich.com
shop.friedrich.com
service.cultivatebhe.com
shop.friedrich.com
friedrichlink.friedrich.com
service.cultivatebhe.com
shop.friedrich.com
soporte.onnetsa.com
shop.friedrich.com

Certificate

The complete raw certificate details for webmail.friedrich.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIQAwgenGe/C46yFW1hQDWOmzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODA0MDUwMDAwMDBaFw0xOTA0MDUxMjAwMDBaMH0xCzAJBgNVBAYTAlVTMQ4w
DAYDVQQIEwVUZXhhczEUMBIGA1UEBxMLU2FuIEFudG9uaW8xKDAmBgNVBAoTH0Zy
aWVkcmljaCBBaXIgQ29uZGl0aW9uaW5nLCBMTEMxHjAcBgNVBAMTFXdlYm1haWwu
ZnJpZWRyaWNoLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCw
sQTb9OGUa2XAzxCSdRzU4kg0hZsHUO0eCtTfLFlqzcZRVXgeSka1I3TUpjb+nDlz
jwOKKFrKwJ6FYNyd5Xk5x7szzWmHOGIDcUbCv3vi+suwNHtGEI8D0iAK7qHk/a5K
Cpckl00Ddz2vicPvGsFnoqXgkNvhHyU2VVe7omSgPfouaW5pAFBT8GQhPkcr/y3x
QlH7TdIEQOeMk+0eN/IKoOOUUWXmJI5stiq7G4rCuPgP6YXH3U8E87j7ZkI2LUgC
0m8xMsFe8dEWgpN33XCeiR/GinqQ13+dI3/h9S13JNk/Q/q4s5npxaCWAFdoKrJD
FgNryfT8u1ahImzlNzMCAwEAAaOCAbowggG2MB8GA1UdIwQYMBaAFJBY/7CcdahR
VHex7fKjQxY4nmzFMB0GA1UdDgQWBBRMuWrFCE1lpkDH5752RYcN/G2BOzAgBgNV
HREEGTAXghV3ZWJtYWlsLmZyaWVkcmljaC5jb20wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1o
dHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYD
VR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsG
AQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYx
aHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNy
dDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBPXZdP/1Pb1ORRVtpPyRYApHtGtbVG2F8BnaqBMKwUPFYSdrEtzk+pD+EB
BMH/a+ooi5WRA3bcdPQ4/k9g/RXnQ1EA5KfD2chsDJQsl9zh30jJDZwWOdF61pL5
098ZcmeLEF4tyrT2oUxu1UQltTPDZGqg+SQatL3x+2Kbnfq7fEYYb5mzhTHr7kaP
HLYF3S0hkroYDz3ZxDKfZiMBVctHGC0+McDZDRnWnwRnnswAdx/Vc0UlfRXFpgXX
FZakDt+MyOXLpPGYTCcBri6g4fWbBwbgHFgNxQ1sXaJP7wVDxEeLPDIxjm9VUVor
1uUg4EZErPLrFJYMb+uZ9cequvDJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLCxBNv04ZRrZcDPEJJ1
HNTiSDSFmwdQ7R4K1N8sWWrNxlFVeB5KRrUjdNSmNv6cOXOPA4ooWsrAnoVg3J3l
eTnHuzPNaYc4YgNxRsK/e+L6y7A0e0YQjwPSIAruoeT9rkoKlySXTQN3Pa+Jw+8a
wWeipeCQ2+EfJTZVV7uiZKA9+i5pbmkAUFPwZCE+Ryv/LfFCUftN0gRA54yT7R43
8gqg45RRZeYkjmy2KrsbisK4+A/phcfdTwTzuPtmQjYtSALSbzEywV7x0RaCk3fd
cJ6JH8aKepDXf50jf+H1LXck2T9D+rizmenFoJYAV2gqskMWA2vJ9Py7VqEibOU3
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4029843226212403436535237423463239323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Antonio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Friedrich Air Conditioning, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.friedrich.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18265445731468233676899981275846158563350517712617625702546012357293435146721930915368994166538781616269195405296422944295715405151643668977276578290579899375947911909487991390577861218877584963170328123306402908112803432702419944514510276082424496744817999219071105395218064152113075799923043250770999618121523782988808556202725062859508929452423502932161878826205868649534909138486358634356173173866037136837205989269009712134643650125452391016500405622553037234834902383837447124614612952007925520728565062954507241800873189627043437873162665703156895215591238861892475056062065672554774104912981780120935472641843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cb96ac5084d65a640c7e7be7645870dfc6d813b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.friedrich.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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