tickets.rcmusic.ca

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:58:db was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=tickets.rcmusic.ca,OU=GT33048919+OU=See www.geotrust.com/resources/cps (c)14+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:58:db
Serial Number (int): 88283
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): af:77:b3:41:ce:7b:55:fb:78:69:99:b4:6d:52:21:7d:bf:f7:a8:6e
Fingerprint (sha256): 04:9f:f7:36:ce:73:59:57:b4:b7:0a:34:82:d3:83:21:96:7b:53:28:19:78:b5:29:c8:79:32:c4:cd:70:0c:9a

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate tickets.rcmusic.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tickets.rcmusic.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tickets.rcmusic.ca

Other certificates including the domain name rcmusic.ca

(limited to 100 certificates)
ssl392249.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
bookstore.rcmusic.ca
onculture.rcmusic.ca
tickets.rcmusic.ca
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.exclusive.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
www.rcmusic.ca
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
*.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
*.exclusive.rcmusic.ca
*.exclusive.rcmusic.ca
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
register.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
lms.dev.aws.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
tickets.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com

Certificate

The complete raw certificate details for tickets.rcmusic.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIDAVjbMA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh
dGVkIFNTTDEgMB4GA1UEAxMXR2VvVHJ1c3QgRFYgU1NMIENBIC0gRzQwHhcNMTUw
NTE3MDA1MzQ3WhcNMTcwMTE1MjAyMTA1WjCBnjETMBEGA1UECxMKR1QzMzA0ODkx
OTExMC8GA1UECxMoU2VlIHd3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwcyAo
YykxNDE3MDUGA1UECxMuRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkIC0gUXVpY2tT
U0woUikgUHJlbWl1bTEbMBkGA1UEAxMSdGlja2V0cy5yY211c2ljLmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdGtO4daSMWCNzH4+wgB2mthjJGg
hE8QXuJuFGXEo/ytr8y4ZyrjpPeSy6dFPuAL5TagG7ecwGcPyM2zAyRHgL1ehldB
Ad2r0rYQdyVMHE2Up5vDB9p8b6LR/dz72fsvWp69ilC20lSbkdOu0oNLNl6REXYP
tjzsA7OCx2y9cvGu7Mx3bQVnAu0ISCKfafQN8K6gxp6d5FX5K5+BQN6EayyXfTop
vBsuYt+3WwXH7wQsSDXHFCy9iAJ2S8lOYbVb4ncOqbcBmPtqdpjCLHPbvtMyyUxg
RTPRPZu3QJAZ8QqMrOtCCZkilBMsEL1qWbQWre+6nNWeIW8H1SHpRWpfdwIDAQAB
o4IBXzCCAVswHwYDVR0jBBgwFoAUC1Dsd+8qm//sA6EK/63G5CoYxz4wVwYIKwYB
BQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Uuc3ltY2QuY29tMCYGCCsG
AQUFBzAChhpodHRwOi8vZ3Uuc3ltY2IuY29tL2d1LmNydDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdEQQWMBSCEnRp
Y2tldHMucmNtdXNpYy5jYTArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Uuc3lt
Y2IuY29tL2d1LmNybDAMBgNVHRMBAf8EAjAAMFYGA1UdIARPME0wSwYGZ4EMAQIB
MEEwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJj
ZXMvcmVwb3NpdG9yeS9sZWdhbDANBgkqhkiG9w0BAQsFAAOCAQEAA+h52EvcLEtR
mZ+UNR+M4DwPiWMHW/5VfpQcEykGejnlodWmuRBW9lolGfyUxxUj68u1JOdl7Owe
DTwZRKAvKZG0xqqAyef1XejgJLEMgKr8fUE7sAtlGRNccFqceyYHbyZnXjZPg9n1
+dgLdXAxat+y042PWzdXPLYOz5GGNV845u+0KXgBxJAwyptU1XxHW/xfobFokeib
u9hvfKG7mmLBRq9s1eCKjPqFkVXLk0Ud0PiP5G8e3lvp7Yefz8N7f4cM5T7b8V9I
lWv0Tff3tjFAGmEn4B2X6pDKfRsqU0Vv7tr1FhwGoh59jojkCauyRcl0Si4J13hA
daB/VTKi2A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdGtO4daSMWCNzH4+wgB
2mthjJGghE8QXuJuFGXEo/ytr8y4ZyrjpPeSy6dFPuAL5TagG7ecwGcPyM2zAyRH
gL1ehldBAd2r0rYQdyVMHE2Up5vDB9p8b6LR/dz72fsvWp69ilC20lSbkdOu0oNL
Nl6REXYPtjzsA7OCx2y9cvGu7Mx3bQVnAu0ISCKfafQN8K6gxp6d5FX5K5+BQN6E
ayyXfTopvBsuYt+3WwXH7wQsSDXHFCy9iAJ2S8lOYbVb4ncOqbcBmPtqdpjCLHPb
vtMyyUxgRTPRPZu3QJAZ8QqMrOtCCZkilBMsEL1qWbQWre+6nNWeIW8H1SHpRWpf
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-17 00:53:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-15 20:21:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT33048919'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tickets.rcmusic.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23962435067820457192357194625819578082599801474081949901637879354190072460046114646318918796235982752018017000275399288750435607803712945798130236952321571192047895590542640967778479716166983222091374105964381681588703111725351182398232222195556734580061316630599369795169700135208765884170422145043602680970465438975814784779752042382260433084199439853387732221317437572556043646398920890955862864421928880957965128159493495735830675639404234838638639437604865760318665800406816392838070723793341553309108345113635666747464229478076593424278679799343926912871468094598816501842257957518200998498277635342020939243383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.rcmusic.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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