ebusiness.ericsson.net

- Ericsson AB -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 03:15:41 was issued on by GeoTrust, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ericsson AB

Company registration number: 2R/enBqYo6nj6zt7uwcb/Z8Hwke0VxQ2
Organization: Ericsson AB
Organization unit: Akamai SAN SSL OV
State / Province: Stockholm
Locality: Stockholm
Country: SE

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:41
Serial Number (int): 202049
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 05:ab:ff:3c:0b:95:3a:04:0e:55:38:2f:36:5f:94:6a:01:f1:ec:47
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): b8:b4:81:01:d4:d0:28:c0:d4:53:d6:4d:5b:6e:70:fa:7e:76:31:50
Fingerprint (sha256): 02:1b:19:4a:ae:ed:a6:69:a5:89:11:d1:75:6c:92:82:86:ad:56:1c:4d:00:ac:b7:93:ec:53:f5:58:f9:87:37

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate ebusiness.ericsson.net

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebusiness.ericsson.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

al4b.cpi.ericsson.net
ericoll.ericsson.net
swgateway-nracc.ericsson.net
ericoll2.ericsson.net
ericoll2acc.ericsson.net
srm-q.wam.ebusiness.ericsson.net
ebusiness.ericsson.net

Other certificates including the domain name ericsson.net

(limited to 100 certificates)
sfn-acc.ericsson.net
wfmuat-loadtest-so4-vip.uat.sdt.ericsson.net
sitehandler-na3.ericsson.net
p437.clm.ericsson.net
*.ericsson.net
sitehandler-anza.ericsson.net
bbcclient20.be.bbc.cleanfeed.ptp.ebms.ericsson.net
stg.mm.ebms.ericsson.net
prism.msts.ericsson.net
loginppd.ericsson.net
login.ericsson.net
callme.cct.ericsson.net
sitehandler-apac2.ericsson.net
m5.ericsson.net
myaccount-dev.ericsson.net
iot-mqttp.ericsson.net
availabilitytracker.emps.ebsd.ericsson.net
att-m.c3.ericsson.net
reports.siterollout.ericsson.net
news.internal.ericsson.net
swgwacc.ericsson.net
dock.xcs.c3.ericsson.net
access.us.msdp.ericsson.net
nels1.vims.live.ericsson.net
ctrl-comcastvran.live.ericsson.net
www.11001.sitestatustool.ericsson.net
hwsonline-apprd.ebusiness.sam.ericsson.net
ideaboxes.ericsson.net
sm2.prod.dcp.ericsson.net
ctrl-5gott.lab.ericsson.net
emftacc.ericsson.net
atlas.10010.gtec.seln.ete.ericsson.net
test.ericsson.net
lu.test.seb.cct.ericsson.net
tasks.mm.ebms.ericsson.net
gtec10009box5cic.ericsson.net
seg1-sweden.ericsson.net
ee.test.seb.cct.ericsson.net
crmbridge.emps.ebsd.ericsson.net
sitehandler-apac3.ericsson.net
sitehandler-na3.ericsson.net
fiber.eams.ericsson.net
itsm-prod.ericsson.net
origin-ep.ebusiness.sam.ericsson.net
cis.bscs.ericsson.net
ep-f75.wam.ebusiness.ericsson.net
ahot4.ericsson.net
*.eightfold.ai
restapi.ericsson.net
fss2.ericsson.net
origin-srm-q.wam.ebusiness.ericsson.net
emp-prod-acc-we.ebsd.ericsson.net
tapp-test.lss.ericsson.net
origin-srm.wam.ebusiness.ericsson.net
kpn-wgp.ptt.ericsson.net
sitehandler-apac2.ericsson.net
dashboard.edit.ptp.ebms.ericsson.net
sitehandler-emea3.ericsson.net
sitehandler-na3.ericsson.net
mplatform.dev.sdt.ericsson.net
elis-acc.ericsson.net
webcom.live.ericsson.net
ls3.elk.jp.qa.vcc.cvc.ericsson.net
acc.lar.ericsson.net
ebusiness.ericsson.net
gtec10009box9cic.ericsson.net
golsacc.ericsson.net
test.play.ericsson.net
opuniverse.dcp.ericsson.net
nim.edr.va.preprod.sdt.ericsson.net
edcatest.live.ericsson.net
cdn.dev.mm.ebms.ericsson.net
bbcclient14.cf.bbc.cleanfeed.ptp.ebms.ericsson.net
chatbotpilot1.ericsson.net
ctrl-rkvran04.live.ericsson.net
bssug.ericsson.net
*.mhealth.ericsson.net
sesbmg14.ericsson.net
server.gocd.eu.demo.vcc.cvc.ericsson.net
sbiotpfkanshimqttgw.ddm.iot-accelerator.ericsson.net
ericsson.co.gg
e025clxcol001p.celmys.ericsson.net
320749-mqtttestgw.ddm.iot-accelerator.ericsson.net
customer-native.rijeen.mash-up.c3.ericsson.net
ssl363782.cloudflaressl.com
bbcclient18.be.bbc.cleanfeed.ptp.ebms.ericsson.net
rnea1.cas.ericsson.net
operator.mdi-us.ericsson.net
atlas.5gctbe2e.live.ericsson.net
wcm.ericsson.net
cic.docomo-vran1.live.ericsson.net
bbc_client_04.cf.bbc.cleanfeed.ptp.ebms.ericsson.net
onetm.se.msdp.ericsson.net
swctools.ericsson.net
itteinnovationaccept.ericsson.net
sitehandler-emea4.ericsson.net
development.licensegateway.ericsson.net
hwsonline.amcs.ebusiness.sam.ericsson.net
logintest.cloud.ebms.ericsson.net
acc.wam-proxy.us.ericsson.net

Certificate

The complete raw certificate details for ebusiness.ericsson.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7IeNEftdBk164hjMaOO
gQWVXYqobJkxphDIPGfSbN9S53AyJix/mXUnoWI9BkyRFLon/jC1Iab/YEu0PZ75
F06po9rT4pVtcAIr+JR/pCpD5e60aPVo7gpvoE9tfBnMpjihhhr5YWsJAZT905I9
/YQUqlB/xThs3tEtrGivN6pzUvT48nuSLSp/Mfz5Owpxl9Lk+oCm5Xi1B5UHZKuv
P2niQO6wICek49iLZA8OHN8txaPVXVldfu9PiGPRMDNBOuUydNSPbUTX/Ew3LPRu
F2lY6svXIiwfuPp7GOzyJFKPtgog7pI78WY06cTCHYGqsJ70YK4tft3JQWKreuv1
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 202049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-10 04:38:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-12 04:58:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2R/enBqYo6nj6zt7uwcb/Z8Hwke0VxQ2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ericsson AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ebusiness.ericsson.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25714209160223975489940687161774906427942433931744554000890334241848962406297903102704061443694687016954678270608627062561409264778388967698891845232743229274772020485471600294459919367898495286843495437484762878266509253128503653210093758499336108910504247942139751023290545751499470398654097158739373095355259415071247904282339856477713313975061667265909776104930773887380940398350661678911640221172735058795643435744182466673208686810175244348391439002176131046737512212281094961417118453946978288668257361126639768673191552514561520454938611035616707094470176474766509611091891584690808978878701482131084643398931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al4b.cpi.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericoll.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swgateway-nracc.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericoll2.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericoll2acc.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srm-q.wam.ebusiness.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebusiness.ericsson.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05abff3c0b953a040e55382f365f946a01f1ec47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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