uncasheville.wncln.org

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 15:a5:3a was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=LEbskFI0zrcRXKNv5ixMXsR5V8t//ZS3,CN=uncasheville.wncln.org,OU=GT39415751+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:a5:3a
Serial Number (int): 1418554
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 2d:0d:a6:a9:39:dd:40:a7:05:b8:eb:91:b7:f2:11:97:41:8d:b7:1f
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): a9:b7:0f:00:a8:52:d0:6f:04:b6:ef:24:e4:c2:2c:99:7a:01:9d:36
Fingerprint (sha256): 00:0b:ee:a0:3d:19:78:ee:89:07:80:58:e3:3c:f3:eb:05:cf:ee:4c:6c:51:46:1f:c6:b0:0d:03:e8:3f:4d:f5

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate uncasheville.wncln.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uncasheville.wncln.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uncasheville.wncln.org

Other certificates including the domain name wncln.org

(limited to 100 certificates)
uncasheville.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
appencore.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
appencore.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
*.next.westlaw.com.wncln.wncln.org
appencore.wncln.org
*.next.westlaw.com.wncln.wncln.org

Certificate

The complete raw certificate details for uncasheville.wncln.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIDFaU6MA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTQxMDA5MDcxNTU3WhcNMTUxMDEyMDQyMDI5WjCBxTEpMCcGA1UEBRMgTEVi
c2tGSTB6cmNSWEtOdjVpeE1Yc1I1Vjh0Ly9aUzMxEzARBgNVBAsTCkdUMzk0MTU3
NTExMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg
KGMpMTQxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk
U1NMKFIpMR8wHQYDVQQDExZ1bmNhc2hldmlsbGUud25jbG4ub3JnMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNFMUvfmQ9XEjb+bGaXkBVxQbPhRW7M
Nmx78s64c8B/CG4MUxSFFv3sMaBsz4LOeIZVUVIwga0XAaY/z5cLmGphUdapX2g8
gO1pXEr4XjJpaZfBTnEAOwmLad5lJGAb7eE9ldhMYxN0PrPofxBnO0ZJyBr+TWbc
xYoTPSrRqS9h3SKTSXSjT5IcN/lpIpLpHMkxInsWHTvFxUtm6lVIS22tEOuKm/Bi
HFyPykPKfPYyi03GjGUJxFLMztTs4SV7tQxYkGes31cTZHz1iBq2QN8g5le21O2E
NCNlta13ImKx+fyPqSuMK3536dAo/1Bfh+BpH0KtOPg8hbcakrkuNQIDAQABo4IB
sTCCAa0wHwYDVR0jBBgwFoAUa2k9ahhCSt2PAmU5/TUkhniRFjAwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAhBgNVHREEGjAY
ghZ1bmNhc2hldmlsbGUud25jbG4ub3JnMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6
Ly9yYXBpZHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvcmFwaWRzc2wuY3JsMB0G
A1UdDgQWBBQtDaapOd1ApwW465G38hGXQY23HzAMBgNVHRMBAf8EAjAAMHgGCCsG
AQUFBwEBBGwwajAtBggrBgEFBQcwAYYhaHR0cDovL3JhcGlkc3NsLW9jc3AuZ2Vv
dHJ1c3QuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vcmFwaWRzc2wtYWlhLmdlb3Ry
dXN0LmNvbS9yYXBpZHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMw
MQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9j
cHMwDQYJKoZIhvcNAQEFBQADggEBAKFWXJYPCVXtw0uHC/ysbU+c3aZ7LOFhkONJ
ZQ94Ial7fQIGM53AO/Y17F+lndTtuweQAvy9U0Oh/JYrwuommIRqAu/J8Pgr6dhe
pp6rnBeHKMg1NDmhhfY6G6Ghq7Poj54/Ug0qsm2XqIUPdUT8Dv5KKVVULrzr3HeN
mBLzyQq3qj3C5nYX1ocL0/KgbJy8iLiUOMaGbQDJfYMcuyARoc9glP4opSX6ut/7
b5uiGaKXKGjlOg99/1hg8zO7nZ6OCqiLVWjEyIi2uJNcZe8HF6OyRnJfa7XMBcIr
lYy1t/dZ4UDb8++VeZU6u99WST3NzsQpbajln2ciZ9WILp6ZjT0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNFMUvfmQ9XEjb+bGaX
kBVxQbPhRW7MNmx78s64c8B/CG4MUxSFFv3sMaBsz4LOeIZVUVIwga0XAaY/z5cL
mGphUdapX2g8gO1pXEr4XjJpaZfBTnEAOwmLad5lJGAb7eE9ldhMYxN0PrPofxBn
O0ZJyBr+TWbcxYoTPSrRqS9h3SKTSXSjT5IcN/lpIpLpHMkxInsWHTvFxUtm6lVI
S22tEOuKm/BiHFyPykPKfPYyi03GjGUJxFLMztTs4SV7tQxYkGes31cTZHz1iBq2
QN8g5le21O2ENCNlta13ImKx+fyPqSuMK3536dAo/1Bfh+BpH0KtOPg8hbcakrku
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1418554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-09 07:15:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-12 04:20:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LEbskFI0zrcRXKNv5ixMXsR5V8t//ZS3'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT39415751'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uncasheville.wncln.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21327996282078038136720117804255031902833188972668338435289695543632086344835027361903050917282984385698198103163987237692488544395959601134173140448208963239975918806010485812614723828554479685557901261697522626380623414038159016726364747633672556366437365366371182300533743169733603973055397170643207192628248898787145985819596180152843182553877500938997642319199323151904721785583547520814408891247017275890125510377625277886608353212923006761740506698871799658109041245155711361075708422584603782479089076849472427895847249429384261930936342422595168403516188061657509646979585859664385716522637502273610009095733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncasheville.wncln.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d0da6a939dd40a705b8eb91b7f21197418db71f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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