support.dragonmetrics.com

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:1e:02 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=support.dragonmetrics.com,OU=GT11350233+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1e:02
Serial Number (int): 73218
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): d1:be:87:59:1a:7e:55:c8:f4:01:f9:b4:9c:ea:e6:6a:bc:f9:0a:2e
Fingerprint (sha256): 06:06:16:96:d8:ae:22:f6:03:fe:20:6a:8b:c9:1b:72:dd:12:99:c8:af:23:11:16:ca:d6:84:76:37:93:8a:36

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate support.dragonmetrics.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.dragonmetrics.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.dragonmetrics.com

Other certificates including the domain name dragonmetrics.com

(limited to 100 certificates)
muvit.com.ar
atlas.abinbevefes.app
destia.fieldsight.io
app.dragonmetrics.com
test.dragonmetrics.com
test.dragonmetrics.com
support.dragonmetrics.com
www.sintelly.com
www.tofydely.com
bienestardigital.cl
potent.ai
link.yourchance.app
app.dragonmetrics.com
app.dragonmetrics.com
www.getamplify.org
www.dailyfreshkiosk.com
www.guide.skhomebuyersguide.ca
foodtrain.540.co
sapaperfarm.com
neverdontplay.com
www.educateapp.in
devxlabs.org
app.multislay.com
jmh1.com
www.mycardoctor.ca
www.dragonmetrics.com
neverdontplay.com
www.aaijigroups.com
www.javierquesada.design
app.dragonmetrics.com
www.smartmonkey.app
app.speedyevict.com
www.ausaif.com
www.chopstickfl.com
urbandecay-mx-devel.cloudapi.plazah.com
www.myfunnyvalentine.com.br
app.dragonmetrics.com
urls.precena.co.jp
api.dragonmetrics.com
dev-business.ontroapp.com
thefidebox.com
www.kimschlesinger.com
sawadikazaragoza.pedidosmovil.es
www.facturacionninja.com
emilu.it
alijaya.id
quicktourney.xyz
denreyes.com
support.dragonmetrics.com
www.behsadriemer.com
astroholidayz.gurutu.in
dragonmetrics.com
aplug.io
didu.ml
www.fincablancaibiza.com
drobakterrasse.com
app.dragonmetrics.com
foodtrain.540.co
help.dragonmetrics.com
www.bloodandbuttercups.com
app.dragonmetrics.com
leonardsamples.com
reports.roque-online.com
reslife.oakwoodfriends.org
www.prayforamerica.app
calculator.truckdesk.com
lti.alchem.ie
hereful.kevinzou.xyz
cheesecakeinteractive.com
dev1.dragonmetrics.com
www.getfit.global
nds.today
s.aiii.ai
dthreepdx.com
api.dragonmetrics.com
testsite6.dragonmetrics.com
api.dragonmetrics.com
dev9.dragonmetrics.com
support.dragonmetrics.com
astroholidayz.gurutu.in
enlaces.montesdetoledo.net
api.dragonmetrics.com
testsite3.dragonmetrics.com
barbarians.com
app.dragonmetrics.com
app.vaskerum.dk
support.dragonmetrics.com
sites.crcasas.org
www.tofydely.com
dev1.dragonmetrics.com
api.dragonmetrics.com
www.appstetix.com
prev.dragonmetrics.com
help.dragonmetrics.com
www.passyourexam.pe
www.janzi.de
support.dragonmetrics.com
cloud.pioreactor.com
s.aiii.ai
realtimesensors.chasm-power.com

Certificate

The complete raw certificate details for support.dragonmetrics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIDAR4CMA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh
dGVkIFNTTDEgMB4GA1UEAxMXR2VvVHJ1c3QgRFYgU1NMIENBIC0gRzQwHhcNMTUw
NDE1MTYyMDA0WhcNMTYwNjE2MTI0NTEzWjCBpTETMBEGA1UECxMKR1QxMTM1MDIz
MzExMC8GA1UECxMoU2VlIHd3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwcyAo
YykxNTE3MDUGA1UECxMuRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkIC0gUXVpY2tT
U0woUikgUHJlbWl1bTEiMCAGA1UEAxMZc3VwcG9ydC5kcmFnb25tZXRyaWNzLmNv
bTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMnbpLNMuIV2L06v2RKN
PzNE53/q40H45IqJobEEsbgGTHfqt5ZjF42fX4EiCopka9b7jLlXRfXScY4TVUUl
+Z+EsTVs2rf3NDhw1sejpTnd4vUYk3Q6LS7eSlnsAb8BHDHfixN2yjPCnr7gKjUB
4lzz+8fKpYL7Jz5ZZ9zzSZvEjT7UtcsIjkPG8j1dh0ptDCL2F3HMc3mKxHXnGaIl
oFJKObx7UhInjdoYdwHKDbt12IPna/fuX6l8z9Iwo9OifHa592guZbbHj6qOcXSB
pg3SY1BHiEDCtwPf69AYJO5rsG2PBf2Jwlfgj9vu0iz3JGZlaaqSpduh7+jIN9y1
eYJi7G9DbVk/ciyKTP1adAzNPaOyi7+DCn0pwbZz7Nyjt2jAhK/EIULgkx6vPwX0
hyi4gvBoLooGCURRcKKbe95nG1Th6r1hY0cxp5XwRFiZAk3HmKn5TpmtRAGObu+w
VbLQIO+5HoOz1NdY/ie9EWvkq5Q3zCTVzvS7HEyjrBwnKh7oXVU9CGYUgquJQKQ4
o2Q4s+v9ZQC3c67yAnmckMlP5PfENwvswBg6XOon0Gt+N2lxTxNDLS3UZDF+JZP5
DCLz5ekPoRBt4f8fxsY4fQ6jzdIsVbACbAgZtImXBXs4UGmfPIIm+CGuB5jwSoUr
sv7z44PF15KBOcDUIMtzcTyZAgMBAAGjggFmMIIBYjAfBgNVHSMEGDAWgBQLUOx3
7yqb/+wDoQr/rcbkKhjHPjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0
dHA6Ly9ndS5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9ndS5zeW1jYi5j
b20vZ3UuY3J0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwJAYDVR0RBB0wG4IZc3VwcG9ydC5kcmFnb25tZXRyaWNzLmNvbTAr
BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Uuc3ltY2IuY29tL2d1LmNybDAMBgNV
HRMBAf8EAjAAMFYGA1UdIARPME0wSwYGZ4EMAQIBMEEwPwYIKwYBBQUHAgEWM2h0
dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdh
bDANBgkqhkiG9w0BAQsFAAOCAQEA3qY1hoNz+ekrAfArOhacfE4ymEgYEMmcOibC
dbfLZlLWpvQ+McrI3IoUkmift3/0i7sGdWsmoalYS1RS4BkYRs+GbSUfkxGO5vvv
E3VI9YKY9uuTyL+575sZ6cP422L7ExnfnRbEhUUDB1FdZsMENdCerBlxuVJ3q5w1
ttAEYIx2bk2VJvbJN4tGHTTxu2TvyXa2iT3xl9y3WUZvhGtduQ2nrQTu9+PJvQZA
pq4SbYw/yzfCr8LrJCVVmdWgaSyHmZnWbXC6ZTZixsVHKZ7mFP7kaJn+Ulu2Bthp
LkexhVibMIpm4IO/Gm0R9C75R63qGIH7amWORHDHD+UwY25HFg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-15 16:20:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-16 12:45:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT11350233'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.dragonmetrics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823508718353139321681140154776386747315540269795425045286516240121000225179222788167846647223194620792103239186531384979331876171901372112104174949826489705180055055675231921157199256735818789511615561440576411860377898089881093927902182808851725572818664926283555310686480174788433849869976989926096706415162577249012159837292978819009728674346000214191583268208424648060993052477112860302397026829847223487882772862395093415215735499173212723450367379062036033476827971461293964556745101459231099318471567109686366671493796692365928494752526426863150334257218380863693172436208227816307678203719583980021929359238022123341756240736784900633534487951342750709962913613023926505806656833716090524894998019341989443261344052789804923541051580014970441638316780157064356625522573291261779628748719381722439485945254729162404159912879564089600824768739935298375554097554448054052255708829884003162974463583693323535421379169259245111939991699651713618221415080547075016531113797709535454509629410589192601611673644911616993953679127177686612466188064645084575692732498421766066030717571269125045076496168944622777648498571230018109873383910101217680488320256613503057870831726993830205330430868127732054762113401116953042707910705101977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dragonmetrics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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