*.utick.be

- MediaMorphose -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:b6:df:95:54:54:78:63:d7:b8:27:b0:aa:17:20:16 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MediaMorphose

Organization: MediaMorphose
Locality: Bruxelles
Country: BE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b6:df:95:54:54:78:63:d7:b8:27:b0:aa:17:20:16
Serial Number (int): 8924900811399521933296674400504324118
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 39:40:79:cf:b5:01:3b:74:71:d5:61:5e:4a:3e:33:de:06:ef:c2:54
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a3:f9:eb:65:04:fe:0f:88:03:cf:28:f8:e5:f4:d8:09:5c:39:45:f1
Fingerprint (sha256): f2:eb:66:63:71:82:fb:c4:d6:38:e5:dd:14:f2:2f:08:82:bb:57:72:47:7f:17:28:35:77:a2:05:ed:ff:fa:f6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.utick.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.utick.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.utick.be
utick.be

Other certificates including the domain name utick.be

(limited to 100 certificates)
booking.utick.be
*.utick.be
*.utick.be
*.utick.be
aulamagna.utick.be
*.utick.be
visitezliege.utick.be
*.utick.be
*.utick.be
*.utick.be
manager.utick.be
aulamagna.utick.be
api.utick.be
*.utick.be
*.utick.be
*.utick.be
api2016.utick.be
*.utick.be
admin.utick.be
booking.utick.be
*.utick.be
*.utick.be
*.utick.be
*.utick.be
utick.be
*.utick.be
*.utick.be
library.utick.be
*.utick.be
*.utick.be
*.utick.be
booking.utick.be
visitezliege.utick.be
admin.utick.be
*.utick.be
go.utick.be
*.utick.be
*.utick.be
static.utick.be
static.utick.be
*.utick.be
*.utick.be
admin.utick.be
*.utick.be
shop.utick.be
*.utick.be
*.utick.be
shop.utick.be
view.utick.be
*.utick.be
*.utick.be
admin.utick.be
utick.be
*.utick.be
*.utick.be

Certificate

The complete raw certificate details for *.utick.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXDCCBkSgAwIBAgIQBrbflVRUeGPXuCewqhcgFjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODAzMTYwMDAwMDBaFw0xOTExMzAxMjAwMDBaME4xCzAJBgNVBAYTAkJFMRIw
EAYDVQQHEwlCcnV4ZWxsZXMxFjAUBgNVBAoTDU1lZGlhTW9ycGhvc2UxEzARBgNV
BAMMCioudXRpY2suYmUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7
H2v9WO2h9GmbjzNlxxGN30RI99bfXpsbwbU4TUF8JdMk7Z6ib86EXsw2XBxS0EQR
cyAzfwvY3iXae4sWEabP85qbC0aNIy/1l+eWyDrCOEukOwzwsWIRhoAL1vJe3QU3
IgzDmm2v9aU2yNHY3SdaeJnWqsebgI8oJ0rl4nztEbtKCfWWpXhagI+jTerFuUXK
OsDgLSxQ8qRQ4PHP84a72+WpIU48dBmV2E+jLaYfHY4Y4pYcRzsa/11knIdxR54k
hAnHX+H+HmoMXjA4kHyJXDLw+q9FlAu/GPKNNxJZ3ktt8x/4shlJCYwOjbSKUcAy
uDChyo7FKk7dcxx7sN6AQJCtBraVhIGfgB68P7rjFi3LZnZcdisD7FQHzxz6dVh4
dWUu8AouKmzQt1JPTFyaW8eIOeYaWNFldKsBEgELPhYBNoULSkLCElhxAGM2az2c
MbHyZ/568cOL5cAY1G7gQUt8g1B9BfTMbxpYKesJjUlsbqtYKHLFDv/G4vt9kaCC
ixoptj/Y4VO/lYxlbb0jwiacAwv3gNFT+JyOOKZEu1eH/W3+4VOEUibqoh/nijKa
UtxcDqcOKzqtkqQiffH3e7yYX371erilt5um320VIyf0F3sq7eXRlJQ3B/Wr/MlD
cRA6PwPYp5ktibosZlw9mrryFE/+wLN7R6Wk5iRJxwIDAQABo4IDJDCCAyAwHwYD
VR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYEFDlAec+1ATt0
cdVhXko+M94G78JUMB8GA1UdEQQYMBaCCioudXRpY2suYmWCCHV0aWNrLmJlMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYD
VR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RS
U0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUH
AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUGCCsG
AQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5j
b20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9U
cnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAXwGCisGAQQB1nkCBAIEggFs
BIIBaAFmAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFiLo0o
UAAABAMARjBEAiAw1H4OMB7gjWngZBeTpwrVpRpJa6yUKMDbjSOIPg45dwIgFWur
tMHTS3BgUb80AJ2mLbZq8RZdi0/clo3tETlYI0AAdQBvU3asMfAxGdiZAKRRFf93
FRwR2QLBACkGjbIImjfZEwAAAWIujSljAAAEAwBGMEQCIGp0t4eKhb+CPp40tkY3
OFqGMm7TjlMb0hTkisc7N8tXAiA1A8l/bESVj6ipoc8HAqEkh/3LxKQ9QnHTqjsd
RptGLAB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABYi6NKPwA
AAQDAEcwRQIgTlLtjaqy7EP0IAArgf0qwh88vUpdGopDdgyTXYnlLjUCIQDAaWGz
C1PnnQy3TTQgVBXKQ5Zt2UR70abFB5cnBwIb8TANBgkqhkiG9w0BAQsFAAOCAQEA
fX+DdhCXmGwl2GFmAB02dS0OU0dfvf8/fXOsI9ymsQjn6fDjyS0SP1qOJcuUEOyV
7kcSojBVNkgQGGMv6rPJ+x9MllYjjr+U4XZIabyl6gRr2n/8YrXEXFGQvUbR94vw
/ckYW44qCD9FPkYRhSdrQ9E2l+4pPm4PyellKTd6raTPDADlseqZpeOVed4IATn7
T1/oGc9pjAZ0hPZzHpiy7eyuAvsU+rMFp+ofMfiDk/Hny00xv/GmxHqzWjErlnk7
dCVwqVBx4L7Aiexz47Bd+0VS4RDA81W7WHyBDiZtb0X0I1gzXbjWl6KDSvFWmBJM
NSkNU1pPdZZSdaMHpp7LaA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8924900811399521933296674400504324118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MediaMorphose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.utick.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763394182519852959949985657941583841608179213276968849762844859670834058573642838258936993483142711918183563027439797297884722194708498312376362474121287907627245677971594742369896817453586205169024147794311510953965522725150621865199906209361438665418065806481076396640775184172336614628192124196258993149286987625545797407091985414321020203369946137608971175740931114258718619797204142235407625961266732141078426337836410352427942421037808165358362057182304862701928158028787848654519258928512073317857400790738950933777261958394534929543300519265078791578242132739322013243103965739376138657738187711518001250914418891245210089762458452512722275607196683467876751479505957784266794509987370387759850071621401553182310489816669577143793174413079817868998115315337000705906473972098011375555753578157728752616008973325478015080163002980439655819829948434596926461271761961603716917241850901050190699587465530813481223294141617371143645736766069150187843544974655185770087571927004138293517626784292458541439587119049509098811205193477077547904259031661565723094580017137674745850218448245465930619210073548727419131768923168045194785941919618389621296726560094589130916410625322802110002170957491171486284868624316908286458961611207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							394079cfb5013b7471d5615e4a3e33de06efc254
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utick.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utick.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001622e8d28500000040300463044022030d47e0e301ee08d69e0641793a70ad5a51a496bac9428c0db8d23883e0e39770220156babb4c1d34b706051bf34009da62db66af1165d8b4fdc968ded11395823400075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001622e8d2963000004030046304402206a74b7878a85bf823e9e34b64637385a86326ed38e531bd214e48ac73b37cb5702203503c97f6c44958fa8a9a1cf0702a12487fdcbc4a43d4271d3aa3b1d469b462c007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001622e8d28fc000004030047304502204e52ed8daab2ec43f420002b81fd2ac21f3cbd4a5d1a8a43760c935d89e52e35022100c06961b30b53e79d0cb74d34205415ca43966dd9447bd1a6c507972707021bf1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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