paco.nuance.com
- Nuance Communications Inc. -
Issued by GeoTrust SSL CA
About this certificate
This digital certificate with serial number 01:a6:74 was issued on by GeoTrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Nuance Communications Inc.
Company registration number:
x/42HFu/qz-zNYfxbnWAQNgxcmEYL1Ps
Organization: Nuance Communications Inc.
Organization: Nuance Communications Inc.
State / Province:
Massachusetts
Locality: Peabody
Country: US
Locality: Peabody
Country: US
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:a6:74Serial Number (int): 108148
Serial Number lenght: 17 bits, 3 octets
SubjectKeyId: bb:7d:89:08:b0:2d:6c:a7:18:b8:6d:cb:bc:03:0a:2d:7f:6d:fd:a2
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a
Fingerprint (sha1): d4:5a:1a:89:de:72:db:78:03:09:20:f1:48:36:c0:3d:c1:f3:78:f8
Fingerprint (sha256): 00:10:bf:96:82:1d:5e:6b:38:6e:55:dd:9c:6b:d6:22:86:45:8e:c6:43:fe:51:64:85:09:96:04:76:28:1e:42
Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt
Revocation information
OCSP Server: http://gtssl-ocsp.geotrust.comCRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl
Check the revocation status for certificate paco.nuance.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paco.nuance.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paco.nuance.com
Other certificates including the domain name nuance.com
(limited to 100 certificates)
paco.nuance.com
cert00037-azurecdn.akamaized.net
reporting-tx.nod.nuance.com
msan2.myabsorb.com
cert00037-azurecdn.akamaized.net
jobs.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
gov-status.mulesoft.com
wf-ccc-tx.nod.nuance.com
mix.nuance.com
cert00080-azurecdn.akamaized.net
6h60rqz7vjhj.stspg-customer.com.como3.pl
akamai-san108.exacttarget.com
macbeta.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
artifactory.prod.mcs.az-germanycentral.mob.nuance.com
nala2.vpn.mobcc.nuance.com
aimdev.nuance.com
cert00037-azurecdn.akamaized.net
licensing.nuance.com
cert00023-azurecdn.akamaized.net
amethyst.dr.nuance.com
gov-status.mulesoft.com
bankjagostatus.mambu.com
cert00037-azurecdn.akamaized.net
sa43gl.wpc.edgecastcdn.net
msan2.myabsorb.com
images.innovation.nuance.com
r12oracle.nuance.com
cert00023-azurecdn.akamaized.net
cloud-marketplace.status.broadcom.com
myssosigning.nuance.com
cert00037-azurecdn.akamaized.net
mobilityextjira.nuance.com
sft.nuance.com
soc.nuance.com
msan2.myabsorb.com
sip.nuance.com
*.crt.nuance.com
cert00037-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
app-status.wada-ama.org
sa1gl.wpc.edgecastcdn.net
cert00080-azurecdn.akamaized.net
sa1gl.wpc.edgecastcdn.net
shopnl.nuance.com
t9languagelab.nuance.com
esd.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
sa1gl.wpc.edgecastcdn.net
cert00037-azurecdn.akamaized.net
r12isupport.nuance.com
cert00037-azurecdn.akamaized.net
aac-auto-bitbucket-00.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
extranet.nuance.com
gov-status.mulesoft.com
sft.nuance.com
cert00023-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
wf-sso-ca.nod.nuance.com
cert00037-azurecdn.akamaized.net
licenses.nuance.com
gov-status.mulesoft.com
emplois.nuance.com
cert00080-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
scheduladviser.nuance.com
vocalizer.nuance.com
cert00037-azurecdn.akamaized.net
horizon.nuance.com
cert00037-azurecdn.akamaized.net
*.staging.nod.nuance.com
cert00023-azurecdn.akamaized.net
akamai-san108.exacttarget.com
msan2.myabsorb.com
app-status.wada-ama.org
gov-status.mulesoft.com
cloud-marketplace.status.broadcom.com
cert00023-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
mymetro-nmc.nmc.nuance.com
customervoice.acumatica.com
gh-srvttslang02.nuance.com
cert00023-azurecdn.akamaized.net
sft-emea.nuance.com
cert00023-azurecdn.akamaized.net
cloud-marketplace.status.broadcom.com
mtl-nar-qa15.nuance.com
aac-asr-jenkins-06.nuance.com
oraclestatus.banyanops.com
cert00037-azurecdn.akamaized.net
gov-status.mulesoft.com
cert00023-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
reporting-tx.nod.nuance.com
msan2.myabsorb.com
cert00037-azurecdn.akamaized.net
jobs.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
gov-status.mulesoft.com
wf-ccc-tx.nod.nuance.com
mix.nuance.com
cert00080-azurecdn.akamaized.net
6h60rqz7vjhj.stspg-customer.com.como3.pl
akamai-san108.exacttarget.com
macbeta.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
artifactory.prod.mcs.az-germanycentral.mob.nuance.com
nala2.vpn.mobcc.nuance.com
aimdev.nuance.com
cert00037-azurecdn.akamaized.net
licensing.nuance.com
cert00023-azurecdn.akamaized.net
amethyst.dr.nuance.com
gov-status.mulesoft.com
bankjagostatus.mambu.com
cert00037-azurecdn.akamaized.net
sa43gl.wpc.edgecastcdn.net
msan2.myabsorb.com
images.innovation.nuance.com
r12oracle.nuance.com
cert00023-azurecdn.akamaized.net
cloud-marketplace.status.broadcom.com
myssosigning.nuance.com
cert00037-azurecdn.akamaized.net
mobilityextjira.nuance.com
sft.nuance.com
soc.nuance.com
msan2.myabsorb.com
sip.nuance.com
*.crt.nuance.com
cert00037-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
app-status.wada-ama.org
sa1gl.wpc.edgecastcdn.net
cert00080-azurecdn.akamaized.net
sa1gl.wpc.edgecastcdn.net
shopnl.nuance.com
t9languagelab.nuance.com
esd.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
sa1gl.wpc.edgecastcdn.net
cert00037-azurecdn.akamaized.net
r12isupport.nuance.com
cert00037-azurecdn.akamaized.net
aac-auto-bitbucket-00.nuance.com
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
extranet.nuance.com
gov-status.mulesoft.com
sft.nuance.com
cert00023-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
wf-sso-ca.nod.nuance.com
cert00037-azurecdn.akamaized.net
licenses.nuance.com
gov-status.mulesoft.com
emplois.nuance.com
cert00080-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
scheduladviser.nuance.com
vocalizer.nuance.com
cert00037-azurecdn.akamaized.net
horizon.nuance.com
cert00037-azurecdn.akamaized.net
*.staging.nod.nuance.com
cert00023-azurecdn.akamaized.net
akamai-san108.exacttarget.com
msan2.myabsorb.com
app-status.wada-ama.org
gov-status.mulesoft.com
cloud-marketplace.status.broadcom.com
cert00023-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
mymetro-nmc.nmc.nuance.com
customervoice.acumatica.com
gh-srvttslang02.nuance.com
cert00023-azurecdn.akamaized.net
sft-emea.nuance.com
cert00023-azurecdn.akamaized.net
cloud-marketplace.status.broadcom.com
mtl-nar-qa15.nuance.com
aac-asr-jenkins-06.nuance.com
oraclestatus.banyanops.com
cert00037-azurecdn.akamaized.net
gov-status.mulesoft.com
cert00023-azurecdn.akamaized.net
Certificate
The complete raw certificate details for paco.nuance.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIDAaZ0MA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTEyMDkwMjE1MjYzMFoXDTE0MTAwNjA0MTYzMVowgaExKTAnBgNVBAUT IHgvNDJIRnUvcXotek5ZZnhibldBUU5neGNtRVlMMVBzMQswCQYDVQQGEwJVUzEW MBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHUGVhYm9keTEjMCEGA1UE ChMaTnVhbmNlIENvbW11bmljYXRpb25zIEluYy4xGDAWBgNVBAMTD3BhY28ubnVh bmNlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANDO3gPezjNA fKSkrLQsYMGka0KfjlnBEcnZVKuNmIXSA8evS6jnQkAjxnT3AMtNOm14P4CUwH5v xqSqMTaMXIg0lK1d/Ne7YnZVY+SGFCG+i8ASKTawpBwlbp34gEUS7xoczK/c8HGn bz12wjdx8A79f51iCvldVchr73RF+5lhciuAAFA0pdWgOt4inF4u6EcT9ZtDK9wj LbjdeKnd4OPf1uUEzk5BAfH8vtxwMQimd4uUTfx44PRpBbkyciNj0dG5Ar33Ttfa GVWk1tyqfILqXqo5MQtsy8GRjVd9qIBlAjrNSXe712hW05velZBcCKk5v9kl8T6f ZpsTRBCEuWsCAwEAAaOCAZswggGXMB8GA1UdIwQYMBaAFEJ5VBthzVUrPmPVPEhX 9Z/7Rc5KMA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwGgYDVR0RBBMwEYIPcGFjby5udWFuY2UuY29tMD0GA1UdHwQ2MDQwMqAw oC6GLGh0dHA6Ly9ndHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvZ3Rzc2wuY3Js MB0GA1UdDgQWBBS7fYkIsC1spxi4bcu8Awotf239ojAMBgNVHRMBAf8EAjAAMG8G CCsGAQUFBwEBBGMwYTAqBggrBgEFBQcwAYYeaHR0cDovL2d0c3NsLW9jc3AuZ2Vv dHJ1c3QuY29tMDMGCCsGAQUFBzAChidodHRwOi8vZ3Rzc2wtYWlhLmdlb3RydXN0 LmNvbS9ndHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYB BQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwDQYJ KoZIhvcNAQEFBQADggEBAI2EuAuzoAZVyVRnLh5JbmzvEPmgm3mRb524QWDL7k39 WxRNC5tKuZ7AbiVerK/oKu1vhvQY9BmvmpgRbJcfVU13iE0gHLZVoM7XDdu9dNEn aMryhzUhsTysVlWgToyTiiF7QbZX77c+wxYLZhojs9u4h9pEfqNk/bFg1u3DWmzT H9uKwIgofuRlsD17odn73cnot4EMmnJ0TKcgkWO5o5BblVpGexXdCVWu5HnkGwSP +PMxoIQHCCmhZ3TuVLfn/DPYqxjywdEkKW8v+X9b8IGnv4wDNbk9yfywUWjIcJFr kXvw5Stfere+UIvNBP21eucVqKBqRJC6qIjqW3fFWug= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M7eA97OM0B8pKSstCxg waRrQp+OWcERydlUq42YhdIDx69LqOdCQCPGdPcAy006bXg/gJTAfm/GpKoxNoxc iDSUrV3817tidlVj5IYUIb6LwBIpNrCkHCVunfiARRLvGhzMr9zwcadvPXbCN3Hw Dv1/nWIK+V1VyGvvdEX7mWFyK4AAUDSl1aA63iKcXi7oRxP1m0Mr3CMtuN14qd3g 49/W5QTOTkEB8fy+3HAxCKZ3i5RN/Hjg9GkFuTJyI2PR0bkCvfdO19oZVaTW3Kp8 gupeqjkxC2zLwZGNV32ogGUCOs1Jd7vXaFbTm96VkFwIqTm/2SXxPp9mmxNEEIS5 awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 108148 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-02 15:26:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-06 04:16:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'x/42HFu/qz-zNYfxbnWAQNgxcmEYL1Ps' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Peabody' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nuance Communications Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paco.nuance.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26359577474183560337594228917123419982498175141611628568535488000856080664665880822809348081785557431489552855620662255058743224282882362438564442922568992808134835919895841565301842719108362949265262289618650592171404861235278315297578004315730492792108982509322990026663844183253475850341189004321030010472877623876213051096486920037420805542989250695018507857989283899433685742471247025391593351371142492623134395691289639476356911191786601174446061928062310380779732089233558850124933489696580200468532437547206874314408868484360145651984081114852377663527527140281668318577047920949772993978561444225226304174443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paco.nuance.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bb7d8908b02d6ca718b86dcbbc030a2d7f6dfda2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008d84b80bb3a00655c954672e1e496e6cef10f9a09b79916f9db84160cbee4dfd5b144d0b9b4ab99ec06e255eacafe82aed6f86f418f419af9a98116c971f554d77884d201cb655a0ced70ddbbd74d12768caf2873521b13cac5655a04e8c938a217b41b657efb73ec3160b661a23b3dbb887da447ea364fdb160d6edc35a6cd31fdb8ac088287ee465b03d7ba1d9fbddc9e8b7810c9a72744ca7209163b9a3905b955a467b15dd0955aee479e41b048ff8f331a084070829a16774ee54b7e7fc33d8ab18f2c1d124296f2ff97f5bf081a7bf8c0335b93dc9fcb05168c870916b917bf0e52b5f7ab7be508bcd04fdb57ae715a8a06a4490baa888ea5b77c55ae8