www.sec.state.vt.us

- Vermont Secretary of State -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 01:1d:40:26:e0:82:55:9c:15:2a:f8:d4:6c:30:6f:48 was issued on by GeoTrust Inc..

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Vermont Secretary of State

Company registration number: Government Entity
Organization: Vermont Secretary of State
State / Province: Vermont
Locality: Montpelier
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1d:40:26:e0:82:55:9c:15:2a:f8:d4:6c:30:6f:48
Serial Number (int): 1481105759049441959982774253226323784
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 10:ec:c9:18:24:90:2e:f8:56:6b:fa:23:f2:97:03:bb:ac:a7:af:85
Fingerprint (sha256): 03:f9:80:27:a8:8f:39:17:bf:a7:3f:2a:4e:e2:16:e7:3c:b6:9e:52:a2:ba:62:97:4f:41:fb:ba:a0:fb:e9:e4

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate www.sec.state.vt.us

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sec.state.vt.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.sec.state.vt.us
administration.sec.state.vt.us
secure.vtprofessionals.org
www.campaignfinance.sec.state.vt.us
www.olvr.sec.state.vt.us
vtsosonline.com
www.vems.sec.state.vt.us
prod-exch-01d.administration.sec.state.vt.us
www.mvp.sec.state.vt.us
lobbying.sec.state.vt.us
dms.administration.sec.state.vt.us
www.lobbying.sec.state.vt.us
mail.sec.state.vt.us
www.vtsosonline.com
fs.sec.state.vt.us
mvp.sec.state.vt.us
trader2.administration.sec.state.vt.us
olvr.sec.state.vt.us
vems.sec.state.vt.us
mail.administration.sec.state.vt.us
autodiscover.administration.sec.state.vt.us
alfresco.sec.state.vt.us
enterpriseregistration.sec.state.vt.us
dms.sec.state.vt.us
campaignfinance.sec.state.vt.us
www.sec.state.vt.us

Other certificates including the domain name state.vt.us

(limited to 100 certificates)
erecruit.per.state.vt.us
gfs.dps.state.vt.us
ibi-montpelier-1.infosec.state.vt.us
anrmaps.vermont.gov
incapsula.com
nws.vdh.state.vt.us
vtmapir-admin.dvha.ahs.state.vt.us
incapsula.com
vjiss2.dps.state.vt.us
ahssqld08d.ahs.state.vt.us
vtcnp.doe.state.vt.us
devcms.sec.state.vt.us
incapsula.com
wave.ed.state.vt.us
tvie2140.infosec.state.vt.us
www.sec.state.vt.us
selfserve.education.state.vt.us
incapsula.com
docstar.dps.state.vt.us
www.sec.state.vt.us
nextest.dps.state.vt.us
www.ahsnet.ahs.state.vt.us
telecomservices.dii.state.vt.us
incapsula.com
citrix.ahs.state.vt.us
cag.state.vt.us
OBWFE2-TEST.ahs.state.vt.us
incapsula.com
incapsula.com
incapsula.com
dpsgisweb2.dps.state.vt.us
trader.administration.sec.state.vt.us
incapsula.com
ent-footprints.state.vt.us
incapsula.com
panopticon.infosec.state.vt.us
incapsula.com
fsdnet.ahs.state.vt.us
vepards.dps.state.vt.us
incapsula.com
OBWFEAPP5.ahs.state.vt.us
vepardswb2.dps.state.vt.us
www.sec.state.vt.us
view.leg.state.vt.us
incapsula.com
ahs-obwfeapp4-test.ahs.state.vt.us
obwfeapp7.ahs.state.vt.us
nws.vdh.state.vt.us
anrmaps.vermont.gov
incapsula.com
fsdnet.ahs.state.vt.us
fsdnet.ahs.state.vt.us
pike.atg.state.vt.us
nws.vdh.state.vt.us
*.vttaxnet.tax.state.vt.us
www.sec.state.vt.us
ftp2.tre.state.vt.us
incapsula.com
vtdpscrimentel.dps.state.vt.us
VEMservices.dps.state.vt.us
analytics.dps.state.vt.us
incapsula.com
DMVCIS01.aot.state.vt.us
citrix.labor.state.vt.us
*.erp.state.vt.us
secure.atg.state.vt.us
www.sec.state.vt.us
nws.vdh.state.vt.us
adfs.vtransweb.aot.state.vt.us
incapsula.com
slog-dvha.ahs.state.vt.us
incapsula.com
jury.eservices.crt.state.vt.us
vjiss2.dps.state.vt.us
incapsula.com
aotadfs.dps.state.vt.us
infoonmycase.ahs.state.vt.us
vepardscopweb.dps.state.vt.us
nomos.dps.state.vt.us
www.sec.state.vt.us
publicportal.courts.vt.gov
www.aot.state.vt.us
OBWFEAPP3.ahs.state.vt.us
anrnode.anr.state.vt.us
incapsula.com
ftp2.tre.state.vt.us
incapsula.com
mybenefits.ahs.state.vt.us
incapsula.com
www.brightfutures.dcf.state.vt.us
incapsula.com
anrnode.anr.state.vt.us
*.erp.state.vt.us
secure.education.state.vt.us
quick.ahs.state.vt.us
*.erp.state.vt.us
incapsula.com
cms.sec.state.vt.us
agocapcomplaint.atg.state.vt.us
alfresco.sec.state.vt.us

Certificate

The complete raw certificate details for www.sec.state.vt.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8qFKaGeGjFp0Dzf8m4A
OkytENyY0xxPyehhlKf7dlxbPz0GdfVisOHS6xnvKF7lYU/nP9zytaz5FNCmKnIZ
0LO5FlgM08e1zuau0EeEGarO7JGiP0ZvoiZHsJPKELhL/9mVM+992idHKhSd35s3
Mr0axcTxMvJKmbQSQAXnGn5N61kbcKcfMpQIFZ8oAgPv/XXxwetzTa59QChMvyiO
TB+IeGP635BIe1ZIIxVHi2pjWEbn3F2BGLVsnWirQThoX46Cyt1DgtEStVEm2jsr
yO8Bfmhqn/4S5b0qEbnKq5iWdJILVeg3jvyogQKCLUZ8MSPb5iNVg4l6mgUmnKvo
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1481105759049441959982774253226323784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Montpelier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vermont Secretary of State'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.sec.state.vt.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22191569785230511777448289290399729680706509223297536499881266071430655289269012119318265828657382485327284370419312521176230484349739936095119914864891636155573552241793987224016855270911000262928027828857205362697161622012982168514208741379915351675184413836471229240788716221431406737438360709037283834356124515201244661145299788993304997373870497648548897554624466182319715743086121278304815490904927043843641453967950761366712445567037494443161438119185203921116586940507209453475918843561134006416365025377490341651149483798517848752959008124045601444944128835062993132927408463860992962645838483942929429424251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vtprofessionals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campaignfinance.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvr.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtsosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vems.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-exch-01d.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvp.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobbying.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lobbying.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtsosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvp.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trader2.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvr.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vems.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfresco.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignfinance.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sec.state.vt.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000155a3c1526a000004030047304502202a5ebf88d4d4baa38a5d6079059cc4e3c343e1f66408f6176975303ba97c9c450221008537e3c37ea36cddcf98b4cf884154e587e23a3a8b82621b1470466d0dd89598007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000155a3c152b1000004030047304502206ed5495cf4a1ad0b873fe45c441b0fe0dee306ddafc4949c340006e9ad84d33d022100b34d26e95d8cd3777b318c3f6455ece4d92abf03a3e5b9fd893c6fff6b1cdd55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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