billpay.tyfone.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0c:65:aa:89:26:75:b8:ad:25:45:f7:b1:b4:8a:37:c2 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=billpay.tyfone.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:65:aa:89:26:75:b8:ad:25:45:f7:b1:b4:8a:37:c2Serial Number (int): 16478616807924640107025008287715833794
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 09:85:04:0d:36:f2:0f:10:d2:8f:a8:0a:af:4c:5c:4e:6e:1a:77:1f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): a9:05:0a:85:4c:64:2d:d1:6e:96:a0:03:60:fc:d5:d5:be:06:19:68
Fingerprint (sha256): e8:f6:72:3f:5a:16:98:8a:7f:85:cd:ab:fc:1d:ba:1f:97:81:84:b8:bf:63:5d:e4:dc:6b:01:f4:97:f8:ab:ec
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate billpay.tyfone.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for billpay.tyfone.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
billpay.tyfone.com
Other certificates including the domain name tyfone.com
(limited to 100 certificates)
checkfree.tyfone.com
www.tyfone.com
www.tyfone.com
tyfone.com
www.tyfone.com
info.tyfone.com
tyfone.com
tyfone.com
partners.tyfone.com
people.jaago.com.bd
*.tyfone.com
direct.tyfone.com
*.tyfone.com
tyfone.com
tyfone.com
mbdemo.tyfone.com
campaigns.tyfone.com
tyfone.com
ofxmb01.tyfone.com
staronetest.tyfone.com
tyfone.com
tyfone.com
campaigns.tyfone.com
test.tyfone.com
campaigns.tyfone.com
direct.tyfone.com
direct.tyfone.com
*.tyfone.com
partners.tyfone.com
www.tyfone.com
ssotest.tyfone.com
campaigns.tyfone.com
tyfone.com
tyfone.com
ssftest.tyfone.com
tyfone.com
www.tyfone.com
*.tyfone.com
test.tyfone.com
info.tyfone.com
tyfone.com
tyfone.com
partners.tyfone.com
reportserver1.tyfone.com
ordvpn.tyfone.com
bvcutest.tyfone.com
www.tyfone.com
*.tyfone.com
tyfone.com
cfctest.tyfone.com
ordvpn.tyfone.com
www.tyfone.com
tyfone.com
*.tyfone.com
www.tyfone.com
direct.tyfone.com
www.tyfone.com
www.tyfone.com
tyfone.com
people.tyfone.com
staronetest.tyfone.com
info.tyfone.com
ssotest.tyfone.com
tyfone.com
rh.numericys.ca
*.tyfone.com
campaigns.tyfone.com
partners.tyfone.com
www.tyfone.com
*.tyfone.com
www.tyfone.com
checkfree.tyfone.com
incapsula.com
partners.tyfone.com
campaigns.tyfone.com
ofxmb01.tyfone.com
smarttunnel.tyfone.com
www.tyfone.com
incapsula.com
ssftest.tyfone.com
test.tyfone.com
tyfone.com
www.tyfone.com
billpay.tyfone.com
www.tyfone.com
www.tyfone.com
ssftest.tyfone.com
tyfone.com
ofxmb01.tyfone.com
*.tyfone.com
www.tyfone.com
www.tyfone.com
www.tyfone.com
tyfone.com
billpay.tyfone.com
tyfone.com
mbdemo.tyfone.com
checkfreeprod.tyfone.com
ssftest.tyfone.com
incapsula.com
www.tyfone.com
www.tyfone.com
tyfone.com
www.tyfone.com
info.tyfone.com
tyfone.com
tyfone.com
partners.tyfone.com
people.jaago.com.bd
*.tyfone.com
direct.tyfone.com
*.tyfone.com
tyfone.com
tyfone.com
mbdemo.tyfone.com
campaigns.tyfone.com
tyfone.com
ofxmb01.tyfone.com
staronetest.tyfone.com
tyfone.com
tyfone.com
campaigns.tyfone.com
test.tyfone.com
campaigns.tyfone.com
direct.tyfone.com
direct.tyfone.com
*.tyfone.com
partners.tyfone.com
www.tyfone.com
ssotest.tyfone.com
campaigns.tyfone.com
tyfone.com
tyfone.com
ssftest.tyfone.com
tyfone.com
www.tyfone.com
*.tyfone.com
test.tyfone.com
info.tyfone.com
tyfone.com
tyfone.com
partners.tyfone.com
reportserver1.tyfone.com
ordvpn.tyfone.com
bvcutest.tyfone.com
www.tyfone.com
*.tyfone.com
tyfone.com
cfctest.tyfone.com
ordvpn.tyfone.com
www.tyfone.com
tyfone.com
*.tyfone.com
www.tyfone.com
direct.tyfone.com
www.tyfone.com
www.tyfone.com
tyfone.com
people.tyfone.com
staronetest.tyfone.com
info.tyfone.com
ssotest.tyfone.com
tyfone.com
rh.numericys.ca
*.tyfone.com
campaigns.tyfone.com
partners.tyfone.com
www.tyfone.com
*.tyfone.com
www.tyfone.com
checkfree.tyfone.com
incapsula.com
partners.tyfone.com
campaigns.tyfone.com
ofxmb01.tyfone.com
smarttunnel.tyfone.com
www.tyfone.com
incapsula.com
ssftest.tyfone.com
test.tyfone.com
tyfone.com
www.tyfone.com
billpay.tyfone.com
www.tyfone.com
www.tyfone.com
ssftest.tyfone.com
tyfone.com
ofxmb01.tyfone.com
*.tyfone.com
www.tyfone.com
www.tyfone.com
www.tyfone.com
tyfone.com
billpay.tyfone.com
tyfone.com
mbdemo.tyfone.com
checkfreeprod.tyfone.com
ssftest.tyfone.com
incapsula.com
Certificate
The complete raw certificate details for billpay.tyfone.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIQDGWqiSZ1uK0lRfextIo3wjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODA2MTQwMDAwMDBaFw0xOTA3MTExMjAwMDBaMB0xGzAZBgNVBAMTEmJpbGxw YXkudHlmb25lLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKD3 qY8+BOnVnaxyBpSW5yHYEjbI6XZlloM/cVurkK8TJg53+wRGXMZV9LX6PfWBo+WM bVJ8CotgL3NQniS1H4GPqa5jHxc2eJeI4ba5mV6zwSBldfiAHrSMtTIgCNHr/0P8 Ntgmna5JgHmIuA1DX7TYx2T0RrF3QAf3MNFBvy+KIvwOeikHzRsFI8m23yKxvGD2 dpeeI9qrPx3u4ynU4Mq0iYEj2//eDxm+/wHvoZY/jfIJ7SxQFVNTIwLwu9gaqt1U v9V+4Du1afCQO2Hnz1jNq5cS+ehU89VC6ddZoTI4iQqJ3XPGYE9V3M7hG48s1F4O mmgYR+/MDdB5cd1vjiUCAwEAAaOCAbcwggGzMB8GA1UdIwQYMBaAFJBY/7CcdahR VHex7fKjQxY4nmzFMB0GA1UdDgQWBBQJhQQNNvIPENKPqAqvTFxObhp3HzAdBgNV HREEFjAUghJiaWxscGF5LnR5Zm9uZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRw Oi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUF BzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0 cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJ BgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5AEy3gFmCi9sx6yur4s0IAwFxeW2x3q5Epbs+cGgV9hL6Y+DAZaNeA9ENybtN nVx3ISTQfs446rd5uYGHE7EyHYpS0RizFdqY79AIcTcy9t0bFC6WVyWm7T4fETSM tB5NxYDbieWM9y0vhUt5rURin/uw6EoLhPuu8+JzBa8jrcHHXbcLj4GCFK/zOhW2 yPrPqTOPOfHbOTUsY1gvqg1X3C5Cw9uE87HLsbV6J1taFmJXpOfCiWtdkGG2mVwL XjJ510emmj25spTUD+KbPdLxp6vss4VF0bEhu5aPiKObN5t+pvVK0eFgLFwh+DpF UX7SVPqyfEk3sUX/IPEkBH0E -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPepjz4E6dWdrHIGlJbn IdgSNsjpdmWWgz9xW6uQrxMmDnf7BEZcxlX0tfo99YGj5YxtUnwKi2Avc1CeJLUf gY+prmMfFzZ4l4jhtrmZXrPBIGV1+IAetIy1MiAI0ev/Q/w22CadrkmAeYi4DUNf tNjHZPRGsXdAB/cw0UG/L4oi/A56KQfNGwUjybbfIrG8YPZ2l54j2qs/He7jKdTg yrSJgSPb/94PGb7/Ae+hlj+N8gntLFAVU1MjAvC72Bqq3VS/1X7gO7Vp8JA7YefP WM2rlxL56FTz1ULp11mhMjiJCondc8ZgT1XczuEbjyzUXg6aaBhH78wN0Hlx3W+O JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16478616807924640107025008287715833794 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'billpay.tyfone.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20320255647116763064490435224040962101437483599441716062383256731938563227970642451905273043608293005664448866472746604369853394112531533594457574211341405403979731847621702930580286864761262881415755860154195894320525994796989413042462314447028363272102163312993950214077628432247426633176020075992576770919519060527433292888306008878163161141584241046650284096762028832198881602807006550891765601209610609577086376013536004062519501903392037296354520994980473829771803187959780515422119069178995367635735291914567907311368540213660874263686968613058707823608007864434597491275771110487430610651813619397330209836581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0985040d36f20f10d28fa80aaf4c5c4e6e1a771f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billpay.tyfone.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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