usa.gov

- General Services Administration -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 46:7a:1a:b0:f9:2d:94:ec:9c:d2:56:23:9b:3c:ed:1f was issued on by GeoTrust Inc..

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

General Services Administration

Organization: General Services Administration
Organization unit: Akamai SAN SSL OV
State / Province: District Of Columbia
Locality: Washington
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:7a:1a:b0:f9:2d:94:ec:9c:d2:56:23:9b:3c:ed:1f
Serial Number (int): 93679961285608529910270489518290038047
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 05:b4:14:34:e2:93:e1:b0:e8:a6:b9:ee:88:bd:4e:0a:11:57:ff:6b
Fingerprint (sha256): 03:92:01:b2:55:88:b8:fa:55:6f:c7:10:08:fe:cc:1e:5e:7f:c6:63:55:78:56:db:a3:eb:a7:e7:88:21:8d:01

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate usa.gov

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

disasters.data.gov
dap.digitalgov.gov
beta.gobierno.usa.gov
ag.data.gov
survey.usa.gov
beta.usa.gov
www.supportthevoter.gov
ocean.data.gov
febatl.platform.gsa.gov
www.businessusa.gov
apps.usa.gov
api.challenge.gov
www.data.gov
www.connect.gov
staging.performance.gov
financialprotection.usa.gov
notice.data.gov
staging.apps.usa.gov
globaldevelopment.data.gov
cities.data.gov
kids.usa.gov
labs-staging.data.gov
ethics.data.gov
safety.data.gov
blog.dol.gov
twa800.sites.usa.gov
agriculture.data.gov
static.data.gov
admin-catalog.data.gov
staging.catalog.data.gov
highlights.data.gov
summit.digitalgov.gov
staging.d2d.gsa.gov
staging-api.challenge.gov
platform5.platform.gsa.gov
www.partner4solutions.gov
business.usa.gov
admin-survey.usa.gov
www.sffeb.us
consumer.data.gov
education.data.gov
catalog.data.gov
gobierno.usa.gov
staging.platform.gsa.gov
idm.data.gov
explore.data.gov
labs.data.gov
stage-beta.usa.gov
www.fedramp.gov
geospatial.data.gov
staging.geo.data.gov
ecosystems.data.gov
vote.usa.gov
www.learnperformance.gov
health.data.gov
alpha.data.gov
research.data.gov
www.howto.gov
wiki.data.gov
idp.data.gov
www.challenge.gov
www.kids.usa.gov
food.data.gov
beta.business.usa.gov
staging.data.gov
goals.performance.gov
finance.data.gov
crm-labs.data.gov
dashboard-labs.data.gov
platform.gsa.gov
sites.usa.gov
geo.data.gov
outreach.ors.nih.gov
www.ecpic.gov
elvis.platform.gsa.gov
participation.usa.gov
staging.goals.performance.gov
d2d.gsa.gov
inventory.data.gov
paul.platform.gsa.gov
www.performance.gov
developer.data.gov
climate.data.gov
skills.data.gov
aapi.data.gov
energy.data.gov
staging.usa.gov
staging-vote.usa.gov
jobs.data.gov
humanrights.data.gov
www.digitalgov.gov
feedback.usa.gov
business.data.gov
www.business.usa.gov
benchmarks.gsa.gov
stage-beta.gobierno.usa.gov
plc.platform.gsa.gov
www.usa.gov
counties.data.gov
usa.gov

Other certificates including the domain name usa.gov

(limited to 100 certificates)
answers.usa.gov
1.usa.gov
kids.usa.gov
www.gobierno.usa.gov
analytics.usa.gov
cms.usa.gov
www.usa.gov
demo2.search.usa.gov
guineapig.staging.search.usa.gov
www.usa.gov
1.usa.gov
i14y.seagull.staging.search.usa.gov
answers.usa.gov
sa66gl.wpc.edgecastcdn.net
answers.usa.gov
kibana.search.usa.gov
i14y.bird.staging.search.usa.gov
answers.usa.gov
search.usa.gov
go.usa.gov
api.usa.gov
i14y.seagull.staging.search.usa.gov
seagull.staging.search.usa.gov
sandpiper.staging.search.usa.gov
promotions.usa.gov
answers.usa.gov
1.usa.gov
1.usa.gov
hogfish.staging.search.usa.gov
usa.gov
vote.usa.gov
labs.usa.gov
answers.usa.gov
www.usa.gov
www.usa.gov
i14y.vanilla.staging.search.usa.gov
i14y.ox.staging.search.usa.gov
dachshund.staging.search.usa.gov
components.standards.usa.gov
bear.staging.search.usa.gov
redir.gsa.ctacdev.com
answers.usa.gov
i14y.bear.staging.search.usa.gov
1.usa.gov
secure0051.hubspot.com
www.usa.gov
*.sites.usa.gov
answers.usa.gov
beta.usa.gov
pusheen.staging.search.usa.gov
warthog.staging.search.usa.gov
components.standards.usa.gov
*.usa.gov
answers.usa.gov
answers.usa.gov
epa-notice.usa.gov
open.usa.gov
answers.usa.gov
sa66gl.wpc.edgecastcdn.net
i14y.usa.gov
open.usa.gov
i14y.dachshund.staging.search.usa.gov
sa10gl.wpc.edgecastcdn.net
lemonade.staging.search.usa.gov
labs.usa.gov
answers.usa.gov
i14y.luke.staging.search.usa.gov
www.my.usa.gov
panda.staging.search.usa.gov
answers.usa.gov
business.usa.gov
cms.usa.gov
goldfinch.staging.search.usa.gov
answers.usa.gov
gobierno.usa.gov
www.usa.gov
open.usa.gov
i14y.chinchilla.staging.search.usa.gov
answers.usa.gov
search.usa.gov
toothpick.staging.search.usa.gov
answers.usa.gov
sa55gl.wpc.edgecastcdn.net
lemonade.staging.search.usa.gov
i14y.hogfish.staging.search.usa.gov
open-staging.usa.gov
redir.gsa.ctacdev.com
i14y.auk.staging.search.usa.gov
i14y.hedgehog.staging.search.usa.gov
vote.usa.gov
www.usa.gov
search.usa.gov
porcupine.staging.search.usa.gov
answers.usa.gov
epa-notice.usa.gov
lets-encrypt.infr.search.usa.gov
toothpick.staging.search.usa.gov
snowflake.staging.search.usa.gov
i14y.dachshund.staging.search.usa.gov
sa159gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for usa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WfK2OmAjBcL/gtDyudc
RixCwINgQxAgx2csere6L68RQ+XBoUNIusfOHlCuUDTTT9UW3XqZEK0/cSgtHDTs
8plZ3T3YynxTrYSlSMDpyRGAapGAxhjaJF7SO3rOt/qsE2ipND8BWrNpvuBhnmsF
T4BKj9ovahB0u7g8j9PkSI9SKjun4VFnDidqMdkOz1obi2xSn7lERgIVWMwXk+GR
oaKIW2Au7lI0IqM5550MNcB/Z8coPdTyPMxi7gdOTOuUG2QkSaujzoSBwOnHfMu3
3WnDxMimkWzPTdK5ZcDHVepGIUy86Nqx/kldkQ0ke1XlI9Hob4r/NsonOezNDbuT
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93679961285608529910270489518290038047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District Of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'General Services Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'usa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26939940884136148263698857074861608401939876959427346959856575190323498143348088649637274223056878299041997674810957164929186381458076136599449833074695882378090095635602828590736054217137849088872843811843505559187536706394072538610116026774955032520235611101081573247241886288256891427389697323580221509885887617189423467973609223905596074573587298270776755327756741075800382270433299334077527480389771022901044743766386834215294516795726353040705197513818404212155039303571515928084335489754954971074838462994431127767190289300534710292951217500353224843962139867880556062354558203572765504243737088808355538637813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disasters.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dap.digitalgov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.gobierno.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ag.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportthevoter.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocean.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'febatl.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessusa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.challenge.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialprotection.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notice.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.apps.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaldevelopment.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cities.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs-staging.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethics.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.dol.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twa800.sites.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-catalog.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.catalog.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlights.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit.digitalgov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.d2d.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.challenge.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform5.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partner4solutions.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-survey.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sffeb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumer.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobierno.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-beta.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fedramp.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geospatial.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.geo.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecosystems.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnperformance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howto.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.challenge.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kids.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.business.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goals.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-labs.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-labs.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outreach.ors.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecpic.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvis.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'participation.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.goals.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2d.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventory.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paul.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climate.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skills.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aapi.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-vote.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanrights.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalgov.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchmarks.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-beta.gobierno.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plc.platform.gsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counties.data.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a8ac2bdc40000040300483046022100842d948dd7955ab28d17a914df9342d611332780b1e6f11d3f866c258b38117c022100beb7903d024991ebc156b3cd5a7cc4494c0d958e7090741ee4fe8c4587454b0a007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a8ac2bde20000040300483046022100e91f928ebdf099568db697e3517b56d6f3c6a39f96a4fdd259fb204126e24812022100d51c9b92970b5faf10a4d0639ae5bb73dd08c29aebc9fcd5c7ebb18a6a9cb7c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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