*.colonynetworks.com
- Colony Networks Inc. -
Issued by GeoTrust SSL CA
About this certificate
This digital certificate with serial number 02:da:39 was issued on by GeoTrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Colony Networks Inc.
Company registration number:
aQi5nPHMTwThAjnGGUmFt9Fu9Xk5JI7/
Organization: Colony Networks Inc.
Organization unit: Server Group
Organization: Colony Networks Inc.
Organization unit: Server Group
State / Province:
British Columbia
Locality: Vancouver
Country: CA
Locality: Vancouver
Country: CA
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:da:39Serial Number (int): 186937
Serial Number lenght: 18 bits, 3 octets
SubjectKeyId: ec:c0:2b:59:0c:6b:3e:50:ce:d2:7e:9e:7e:09:0d:86:95:e3:ea:6e
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a
Fingerprint (sha1): 7c:12:c8:6b:fd:72:df:36:f0:52:11:85:91:e5:5b:12:12:b2:b1:06
Fingerprint (sha256): 0a:90:97:25:36:4a:ba:34:ad:b0:f9:72:2a:fb:05:9b:98:b8:6c:1a:83:7e:e7:03:5e:4a:1d:01:86:cc:28:44
Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt
Revocation information
OCSP Server: http://gtssl-ocsp.geotrust.comCRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl
Check the revocation status for certificate *.colonynetworks.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.colonynetworks.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.colonynetworks.com
colonynetworks.com
colonynetworks.com
Other certificates including the domain name colonynetworks.com
(limited to 100 certificates)
colonynetworks.com
www.app.coupocket.com
rogers.go.colonynetworks.com
secure.colonynetworks.com
go-rogers.colonynetworks.com
rogers.colonynetworks.com
royallahaina.expressbook.io
play.adeptly.ai
*.colonynetworks.com
aprendiendo.app
www.indiadecides.app
nalu.app
uy.pronto.com.uy
support.colonynetworks.com
support.colonynetworks.com
colonynetworks.com
static.lolsquare.com
www.abcmedicinals.com
rogers-alpha.go.colonynetworks.com
colony-dev.go.colonynetworks.com
killingxboredom.com
chatcenter.ai
support.colonynetworks.com
support.colonynetworks.com
thisisoriflame.com
4starsschools.com
secure.colonynetworks.com
ahmednafies.com
colonynetworks.com
rfa.telico.cloud
www.klnr.app
www.stockeralerts.com
admin.colonynetworks.com
www.sanbeaman.com
www.zimage.app
app.codingbar.ai
www.sierrainsights.com
rogers-alpha.go.colonynetworks.com
mineapp.com.br
internal-admin-dev.colonynetworks.com
upsquared.com
www.ampledesigns.co.in
lights.superpads.app
phovo.co
support.colonynetworks.com
www.auto-techpro.com
colony-alpha.go.colonynetworks.com
dnd-schulsprecher.cf
johnsontech.co.uk
support.colonynetworks.com
dsar.redacted.ai
www.9plums.com
debuth.com
dias-art.ch
guest.colonynetworks.com
colonynetworks.com
www.ivonakov.info
omhkem.club
www.arnventures.co.ke
cloudone.colonynetworks.com
*.colonynetworks.com
business.dealbase.app
*.colonynetworks.com
egov.co.za
msfi.in
gd.cns.net.tw
stage.merchant.zipeli.com
kamytech.com
guest.colonynetworks.com
www.colonynetworks.com
zeh.arq.br
support.nushusociety.com
globalmaule.cl
*.colonynetworks.com
o.collageofficial.com
www.homepageda.com
www.diftg.co
app.mikisgym.com
customcalculator.app
mistercarseminovos.com.br
www.iamhcmc.app
www.anandkj.ml
rogers-alpha.colonynetworks.com
test.app.konch.ai
thomasbrosgreatwall.com.au
www.nktr.app
4starsschools.com
greenwooddevelopmentnj.com
colony.go.colonynetworks.com
app.bundleofsage.com
admin.colonynetworks.com
davidgalph.com
akai.app
www.vicpoolcomplianceinspections.com.au
buddywritings.com
saml.colonynetworks.com
guest.colonynetworks.com
royallahaina.expressbook.io
dlink.tamdiem247.com
xoxomensfashion.com
www.app.coupocket.com
rogers.go.colonynetworks.com
secure.colonynetworks.com
go-rogers.colonynetworks.com
rogers.colonynetworks.com
royallahaina.expressbook.io
play.adeptly.ai
*.colonynetworks.com
aprendiendo.app
www.indiadecides.app
nalu.app
uy.pronto.com.uy
support.colonynetworks.com
support.colonynetworks.com
colonynetworks.com
static.lolsquare.com
www.abcmedicinals.com
rogers-alpha.go.colonynetworks.com
colony-dev.go.colonynetworks.com
killingxboredom.com
chatcenter.ai
support.colonynetworks.com
support.colonynetworks.com
thisisoriflame.com
4starsschools.com
secure.colonynetworks.com
ahmednafies.com
colonynetworks.com
rfa.telico.cloud
www.klnr.app
www.stockeralerts.com
admin.colonynetworks.com
www.sanbeaman.com
www.zimage.app
app.codingbar.ai
www.sierrainsights.com
rogers-alpha.go.colonynetworks.com
mineapp.com.br
internal-admin-dev.colonynetworks.com
upsquared.com
www.ampledesigns.co.in
lights.superpads.app
phovo.co
support.colonynetworks.com
www.auto-techpro.com
colony-alpha.go.colonynetworks.com
dnd-schulsprecher.cf
johnsontech.co.uk
support.colonynetworks.com
dsar.redacted.ai
www.9plums.com
debuth.com
dias-art.ch
guest.colonynetworks.com
colonynetworks.com
www.ivonakov.info
omhkem.club
www.arnventures.co.ke
cloudone.colonynetworks.com
*.colonynetworks.com
business.dealbase.app
*.colonynetworks.com
egov.co.za
msfi.in
gd.cns.net.tw
stage.merchant.zipeli.com
kamytech.com
guest.colonynetworks.com
www.colonynetworks.com
zeh.arq.br
support.nushusociety.com
globalmaule.cl
*.colonynetworks.com
o.collageofficial.com
www.homepageda.com
www.diftg.co
app.mikisgym.com
customcalculator.app
mistercarseminovos.com.br
www.iamhcmc.app
www.anandkj.ml
rogers-alpha.colonynetworks.com
test.app.konch.ai
thomasbrosgreatwall.com.au
www.nktr.app
4starsschools.com
greenwooddevelopmentnj.com
colony.go.colonynetworks.com
app.bundleofsage.com
admin.colonynetworks.com
davidgalph.com
akai.app
www.vicpoolcomplianceinspections.com.au
buddywritings.com
saml.colonynetworks.com
guest.colonynetworks.com
royallahaina.expressbook.io
dlink.tamdiem247.com
xoxomensfashion.com
Certificate
The complete raw certificate details for *.colonynetworks.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIDAto5MA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTE0MDQyNjE4MjAxMVoXDTE0MTAxOTA3MDE0M1owgbwxKTAnBgNVBAUT IGFRaTVuUEhNVHdUaEFqbkdHVW1GdDlGdTlYazVKSTcvMQswCQYDVQQGEwJDQTEZ MBcGA1UECBMQQnJpdGlzaCBDb2x1bWJpYTESMBAGA1UEBxMJVmFuY291dmVyMR0w GwYDVQQKExRDb2xvbnkgTmV0d29ya3MgSW5jLjEVMBMGA1UECxMMU2VydmVyIEdy b3VwMR0wGwYDVQQDDBQqLmNvbG9ueW5ldHdvcmtzLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKhOOKA+RYBUlmJFSJ0Gb7KwbHSUbjXLDsDfeC6O ed32s905aOVti4RdUc3i903TVICfjhfsPW7kGppbXWQYk7/5e6WpML2L4ti69cgr mJb7qcGImZWFjvskm54yH4U6gZDMYexXzTjnrE6A59VNUjnweGsaD2hJ+HnAqnBn bweyDSEp1V4jzcMlznifhxz8O1Uy/iAmHGxVHg5/nZg5+aPS1K6kN+M/vul00jSW KO+x7HJe2px/jyfM+AYzJy2S91/sZafzGv4T7vAzoDb3AnA+g2MdMeSXM36RqmAQ 7zB89sFP05r5wW2SF5KIvXRQ1FhCAdiIyB/+kzQTGSVFD+kCAwEAAaOCAbQwggGw MB8GA1UdIwQYMBaAFEJ5VBthzVUrPmPVPEhX9Z/7Rc5KMA4GA1UdDwEB/wQEAwIE sDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0RBCwwKoIUKi5j b2xvbnluZXR3b3Jrcy5jb22CEmNvbG9ueW5ldHdvcmtzLmNvbTA9BgNVHR8ENjA0 MDKgMKAuhixodHRwOi8vZ3Rzc2wtY3JsLmdlb3RydXN0LmNvbS9jcmxzL2d0c3Ns LmNybDAdBgNVHQ4EFgQU7MArWQxrPlDO0n6efgkNhpXj6m4wDAYDVR0TAQH/BAIw ADBvBggrBgEFBQcBAQRjMGEwKgYIKwYBBQUHMAGGHmh0dHA6Ly9ndHNzbC1vY3Nw Lmdlb3RydXN0LmNvbTAzBggrBgEFBQcwAoYnaHR0cDovL2d0c3NsLWFpYS5nZW90 cnVzdC5jb20vZ3Rzc2wuY3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEG CCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3Bz MA0GCSqGSIb3DQEBBQUAA4IBAQAeoeVHanH44PaumCTGr1yK8t3yW3QMAg51th4r 2PYQm6R7+q0A5gqfE7Pk3VFeoSg3qqqK/FqRT+sJcwES+Oq6OJ43sxS+XORUEgky OwXs9OenDCNlD5VKyjmG/c/ClQElXi4zK0I+QyrDItJ0++fHCOxNiQvZn3NiC5ld lU2lR2aGY87hVtDl36MJTOWkwFvH1GWXiBCGbgFM3LNf5JFiSJv2vswBGd9k8maP y/0F4YP8DIHz6o6dkbHf4WE9/fhYl5ZpQ3ucdCsj7s1H4FYoBTSdBOYBGB/qeT8X D8l/L0D5j2MxqmhmgyKe5TbKReKF/KvsOF9gaDt6Fbgrmk79 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE44oD5FgFSWYkVInQZv srBsdJRuNcsOwN94Lo553faz3Tlo5W2LhF1RzeL3TdNUgJ+OF+w9buQamltdZBiT v/l7pakwvYvi2Lr1yCuYlvupwYiZlYWO+ySbnjIfhTqBkMxh7FfNOOesToDn1U1S OfB4axoPaEn4ecCqcGdvB7INISnVXiPNwyXOeJ+HHPw7VTL+ICYcbFUeDn+dmDn5 o9LUrqQ34z++6XTSNJYo77Hscl7anH+PJ8z4BjMnLZL3X+xlp/Ma/hPu8DOgNvcC cD6DYx0x5JczfpGqYBDvMHz2wU/TmvnBbZIXkoi9dFDUWEIB2IjIH/6TNBMZJUUP 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 186937 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-26 18:20:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-19 07:01:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aQi5nPHMTwThAjnGGUmFt9Fu9Xk5JI7/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colony Networks Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server Group' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.colonynetworks.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21246607543220135891069548713720284253163810643444620984867069801891330309057683652267491069631190011507227586001001286407441925466844401343924027878755288325114952062538142112853990995405324782730957778901071114308163970378286288215665930914083905290773027510671024799048579809095856574760542151171719102790736374016451820645964773527055651297208941703536661766056466876526716501035673581128572539287373072424566910812727321844205406515601263980761185063241285272751500603631007359465296150880346135420736530849953635312558369474019005046232027149920463428626975301644694032729330619788409358840280842881622836842473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colonynetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonynetworks.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ecc02b590c6b3e50ced27e9e7e090d8695e3ea6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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