go.lcnb.com
- LCNB National Bank -
Issued by GeoTrust EV RSA CA 2018
About this certificate
This digital certificate with serial number 0f:95:c9:81:57:6e:06:c7:90:95:7c:d2:30:e0:51:ba was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
LCNB National Bank
Company registration number:
6623
Organization: LCNB National Bank
Organization: LCNB National Bank
State / Province:
Ohio
Locality: Lebanon
Country: US
Locality: Lebanon
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:95:c9:81:57:6e:06:c7:90:95:7c:d2:30:e0:51:baSerial Number (int): 20716159180516935446196881451479224762
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fd:27:e9:37:de:93:3e:26:e2:de:44:e1:41:e4:c6:a1:47:2a:10:ca
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58
Fingerprint (sha1): f4:98:17:71:46:94:37:9b:39:0c:63:79:ba:08:dc:96:80:41:25:86
Fingerprint (sha256): f5:2a:db:49:cf:fa:0f:64:f5:7d:68:e5:11:64:b8:e6:10:9e:ac:6d:eb:a4:99:0c:62:94:f3:84:d5:8b:a0:83
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl
Check the revocation status for certificate go.lcnb.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for go.lcnb.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
go.lcnb.com
Other certificates including the domain name lcnb.com
(limited to 100 certificates)
support.psplegal.ca
assist.fusiongroupusa.com
support.psplegal.ca
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
www.lcnb.com
www.lcnb.com
assist.nmrevents.com
start.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
go.lcnb.com
assist.fusiongroupusa.com
mail.lcnb.com
www.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
smc.lcnb.com
www.lcnb.com
www.lcnb.com
assist.smsi.group
assist.fusiongroupusa.com
assist.fusiongroupusa.com
mail.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
assist.fusiongroupusa.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.edgt.com
assist.smsi.group
mail.lcnb.com
www.lcnb.com
mail.lcnb.com
assist.aa-techs.com
help.rubieraproductions.com
assist.smsi.group
smc.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
mail.lcnb.com
*.lcnb.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
support.psplegal.ca
assist.fusiongroupusa.com
assist.fusiongroupusa.com
help.rubieraproductions.com
start.lcnb.com
assist.thebergroup.com
support.psplegal.ca
help.rubieraproductions.com
assist.thebergroup.com
servicedesk.oq8.om
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.aa-techs.com
help.rubieraproductions.com
assist.lcnb.com
assist.aa-techs.com
assist.aa-techs.com
assist.smsi.group
assist.nmrevents.com
www.lcnb.com
assist.fusiongroupusa.com
assist.nmrevents.com
assist.ctp123.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
go.lcnb.com
assist.edgt.com
www.lcnb.com
assist.nmrevents.com
assist.fusiongroupusa.com
support.psplegal.ca
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
www.lcnb.com
www.lcnb.com
assist.nmrevents.com
start.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
go.lcnb.com
assist.fusiongroupusa.com
mail.lcnb.com
www.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
smc.lcnb.com
www.lcnb.com
www.lcnb.com
assist.smsi.group
assist.fusiongroupusa.com
assist.fusiongroupusa.com
mail.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
assist.fusiongroupusa.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.edgt.com
assist.smsi.group
mail.lcnb.com
www.lcnb.com
mail.lcnb.com
assist.aa-techs.com
help.rubieraproductions.com
assist.smsi.group
smc.lcnb.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
mail.lcnb.com
*.lcnb.com
assist.thebergroup.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
support.psplegal.ca
assist.fusiongroupusa.com
assist.fusiongroupusa.com
help.rubieraproductions.com
start.lcnb.com
assist.thebergroup.com
support.psplegal.ca
help.rubieraproductions.com
assist.thebergroup.com
servicedesk.oq8.om
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.aa-techs.com
help.rubieraproductions.com
assist.lcnb.com
assist.aa-techs.com
assist.aa-techs.com
assist.smsi.group
assist.nmrevents.com
www.lcnb.com
assist.fusiongroupusa.com
assist.nmrevents.com
assist.ctp123.com
start.lcnb.com
www.lcnb.com
www.lcnb.com
go.lcnb.com
assist.edgt.com
www.lcnb.com
assist.nmrevents.com
Certificate
The complete raw certificate details for go.lcnb.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIQD5XJgVduBseQlXzSMOBRujANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdHZW9UcnVzdCBFViBSU0EgQ0EgMjAx ODAeFw0xODEyMDUwMDAwMDBaFw0xOTEyMDUxMjAwMDBaMIGkMR0wGwYDVQQPDBRQ cml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysGAQQBgjc8AgEDEwJVUzENMAsGA1UE BRMENjYyMzELMAkGA1UEBhMCVVMxDTALBgNVBAgTBE9oaW8xEDAOBgNVBAcTB0xl YmFub24xGzAZBgNVBAoTEkxDTkIgTmF0aW9uYWwgQmFuazEUMBIGA1UEAxMLZ28u bGNuYi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nUIUQ633 mmz+JsSmcqnPLp4adH2jB3VAJauPU1JHMdv63o2/9NnSOQZzDYxnbYEgvR1PRjnp RJc3T7dM9phKNwS3MI1RjiwQ/6Y1zhjYAIvJwFTmYqKD86TEX6O5ntzqS3PHliG3 Ho6GYVvNgtDQaJIrNEY2y2B783rhbmCLf5yiwrwj4w99cqFBUOSI8XzKU9+mh5AY Pr763DKEt/DuIPcGqxlNkpH3/Gy3YROj/PuNe9n7LIA2IFQo3ygg4aveuyEsF9ib GrQQOaozQlr19ZrBnzVk75tFUUuZQHztuBOKjZQMz6EDdxbkqQrfI4XXtpwQ0PPN OQrjez3FMjzJAgMBAAGjggGzMIIBrzAfBgNVHSMEGDAWgBTKkmdSYd6u/LoiK38c h0wl+2+ZWDAdBgNVHQ4EFgQU/SfpN96TPibi3kThQeTGoUcqEMowFgYDVR0RBA8w DYILZ28ubGNuYi5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjBABgNVHR8EOTA3MDWgM6Axhi9odHRwOi8vY2RwLmdlb3Ry dXN0LmNvbS9HZW9UcnVzdEVWUlNBQ0EyMDE4LmNybDBLBgNVHSAERDBCMDcGCWCG SAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v Q1BTMAcGBWeBDAEBMHcGCCsGAQUFBwEBBGswaTAmBggrBgEFBQcwAYYaaHR0cDov L3N0YXR1cy5nZW90cnVzdC5jb20wPwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRz Lmdlb3RydXN0LmNvbS9HZW9UcnVzdEVWUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5ymZKmJ3Q xXD3Mdlr3XnkbPNfDhfVrznG10WyRZ9m6piIV939TAJbZoCXg1YlXjDTQbryOymj S40guuZ7U2DDNYav812ejPuLyKy4cnTMIcuA+wxnVKAgrHYf13hloCn3wI4S2l1o wYdqvT6F+e0ZVO5rcrM2BXfcS9LbTvAp9z+8TlIab8Xn+VZlFqk0j/OBq6hHZv99 roSGzW7ntnHwjEpV6nfm3ayi8ZMFwl058MbN+a7VUFscMFrGfmSXniidllfzWWfd ny+14wYSawJzsBVCD8x/6gR2gVa8pLXzlRK1rIKszzfw6ySPQyRawX9oBbljPIYK Sf6sHCcmm941 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp1CFEOt95ps/ibEpnKp zy6eGnR9owd1QCWrj1NSRzHb+t6Nv/TZ0jkGcw2MZ22BIL0dT0Y56USXN0+3TPaY SjcEtzCNUY4sEP+mNc4Y2ACLycBU5mKig/OkxF+juZ7c6ktzx5Yhtx6OhmFbzYLQ 0GiSKzRGNstge/N64W5gi3+cosK8I+MPfXKhQVDkiPF8ylPfpoeQGD6++twyhLfw 7iD3BqsZTZKR9/xst2ETo/z7jXvZ+yyANiBUKN8oIOGr3rshLBfYmxq0EDmqM0Ja 9fWawZ81ZO+bRVFLmUB87bgTio2UDM+hA3cW5KkK3yOF17acENDzzTkK43s9xTI8 yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20716159180516935446196881451479224762 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6623' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lebanon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LCNB National Bank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.lcnb.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24062824813577665424092225082948959424125599976759000708115887316756185425313418663094327086044713230708699825580513314309770569350256678623314379302000388448549792103635417448260827645126833112675918999722855751204866641639312298008102481355806948704088821451354944028737757318974524825143041259184660903258116723759400446628590581775178751462898303366856326500330558568724876465168077154908926875036397940020868800375936033444493667073195188303311940721169206750344467267709646576205649202466154895779304974218110878890771457180127732732059916276779463786765377975010226874877974733765960239636984388011995767651529 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fd27e937de933e26e2de44e141e4c6a1472a10ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.lcnb.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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