rss2-q.carrsqc.com
- Safeway Inc. -
Issued by GeoTrust SSL CA
About this certificate
This digital certificate with serial number 02:a0:0d was issued on by GeoTrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Safeway Inc.
Company registration number:
NTbAaZJwoWe7lSVu-RnM4b5GGIopxOpZ
Organization: Safeway Inc.
Organization unit: IT
Organization: Safeway Inc.
Organization unit: IT
State / Province:
California
Locality: Pleasanton
Country: US
Locality: Pleasanton
Country: US
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:a0:0dSerial Number (int): 172045
Serial Number lenght: 18 bits, 3 octets
SubjectKeyId: cf:9c:ec:2a:6d:c6:31:72:6d:9c:1d:4e:f4:ef:64:66:38:10:78:a8
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a
Fingerprint (sha1): 58:dc:5d:de:97:a1:ae:cc:92:c7:70:aa:78:d3:17:a8:97:7b:2d:3f
Fingerprint (sha256): 0b:a6:3a:ef:d1:56:b2:4a:c3:8b:0c:34:43:6c:52:b6:f5:31:0c:22:6a:d7:34:ed:4e:2f:0f:c3:66:f6:ef:00
Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt
Revocation information
OCSP Server: http://gtssl-ocsp.geotrust.comCRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl
Check the revocation status for certificate rss2-q.carrsqc.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rss2-q.carrsqc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rss2-q.carrsqc.com
Other certificates including the domain name carrsqc.com
(limited to 100 certificates)
peoplesoft-pr.safeway.com
incapsula.com
shop-qa3.safeway.com
shop-dev1-origin.safeway.com
auth2-q.carrsqc.com
www-qa1.albertsons.com
www-qa2.albertsons.com
answers-texaneyecare.pagescdn.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
incapsula.com
ngcp-qi.tomthumb.com
imperva.com
shop-qa3-origin.safeway.com
shop-qa1.safeway.com
www.carrsqc.com
www-qa3.albertsons.com
shop-qa1.safeway.com
incapsula.com
ngcp-qa2.tomthumb.com
www-dev1.albertsons.com
imperva.com
shop-qa1.safeway.com
api-qa1-origin.safeway.com
shop-dev1-origin.safeway.com
incapsula.com
peoplesoft-pr.safeway.com
events.biggestfantour.com
www-dev2.albertsons.com
shop-qa1.safeway.com
peoplesoft-pr.safeway.com
shop-qa1.safeway.com
api-qa3-origin.safeway.com
auth-prf.carrsqc.com
rss2-q.carrsqc.com
ctsecure.mywebgrocer.com
api-stage-origin.safeway.com
api-dev1-origin.safeway.com
shop-qa3.safeway.com
auth.carrsqc.com
shop.carrsqc.com
shop-prod-origin.safeway.com
shop-qa1.safeway.com
incapsula.com
ngcp-qa2.safeway.com
shop.carrsqc.com
shop-qa1-origin.safeway.com
www-qa2.albertsons.com
local.carrsqc.com
www-dev1-origin.safeway.com
peoplesoft-pr.safeway.com
san3.yext-cdn.com
imperva.com
www.safeway.com
shop-qa2-origin.safeway.com
www.tomthumb.com
shop-qa1-origin.safeway.com
ecomqa.carrsqc.com
www-beta.albertsons.com
shop-dev3-origin.safeway.com
peoplesoft-pr.safeway.com
api-qa1-origin.safeway.com
san2.yext-cdn.com
ecom-dev1-azweb.safeway.com
san2.yext-cdn.com
ngcp-qa2.safeway.com
imperva.com
www-stage-origin.safeway.com
answers-dallasrenalgroup.pagescdn.com
www-qa1.albertsons.com
incapsula.com
shop-qa1.safeway.com
shop-dev3-origin.safeway.com
imperva.com
shop.carrsqc.com
api-prod-origin.safeway.com
incapsula.com
www-dev3.albertsons.com
shop-qa3.safeway.com
imperva.com
api-prod.safeway.com
shop-qa1.safeway.com
api-prod-origin.safeway.com
coupons.albertsons.com
ngcp-qa2.tomthumb.com
shop-qa3-origin.safeway.com
www.tomthumb.com
local.carrsqc.com
imperva.com
www-stage-origin.safeway.com
ngcp-qa2.safeway.com
shop-dev1-origin.safeway.com
www-qa1-origin.safeway.com
api-qa2-origin.safeway.com
shop-qa3-origin.safeway.com
shop-prod-origin.safeway.com
incapsula.com
ctsecure.mywebgrocer.com
ngcp-qa2.safeway.com
incapsula.com
shop-qa3.safeway.com
shop-dev1-origin.safeway.com
auth2-q.carrsqc.com
www-qa1.albertsons.com
www-qa2.albertsons.com
answers-texaneyecare.pagescdn.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
incapsula.com
ngcp-qi.tomthumb.com
imperva.com
shop-qa3-origin.safeway.com
shop-qa1.safeway.com
www.carrsqc.com
www-qa3.albertsons.com
shop-qa1.safeway.com
incapsula.com
ngcp-qa2.tomthumb.com
www-dev1.albertsons.com
imperva.com
shop-qa1.safeway.com
api-qa1-origin.safeway.com
shop-dev1-origin.safeway.com
incapsula.com
peoplesoft-pr.safeway.com
events.biggestfantour.com
www-dev2.albertsons.com
shop-qa1.safeway.com
peoplesoft-pr.safeway.com
shop-qa1.safeway.com
api-qa3-origin.safeway.com
auth-prf.carrsqc.com
rss2-q.carrsqc.com
ctsecure.mywebgrocer.com
api-stage-origin.safeway.com
api-dev1-origin.safeway.com
shop-qa3.safeway.com
auth.carrsqc.com
shop.carrsqc.com
shop-prod-origin.safeway.com
shop-qa1.safeway.com
incapsula.com
ngcp-qa2.safeway.com
shop.carrsqc.com
shop-qa1-origin.safeway.com
www-qa2.albertsons.com
local.carrsqc.com
www-dev1-origin.safeway.com
peoplesoft-pr.safeway.com
san3.yext-cdn.com
imperva.com
www.safeway.com
shop-qa2-origin.safeway.com
www.tomthumb.com
shop-qa1-origin.safeway.com
ecomqa.carrsqc.com
www-beta.albertsons.com
shop-dev3-origin.safeway.com
peoplesoft-pr.safeway.com
api-qa1-origin.safeway.com
san2.yext-cdn.com
ecom-dev1-azweb.safeway.com
san2.yext-cdn.com
ngcp-qa2.safeway.com
imperva.com
www-stage-origin.safeway.com
answers-dallasrenalgroup.pagescdn.com
www-qa1.albertsons.com
incapsula.com
shop-qa1.safeway.com
shop-dev3-origin.safeway.com
imperva.com
shop.carrsqc.com
api-prod-origin.safeway.com
incapsula.com
www-dev3.albertsons.com
shop-qa3.safeway.com
imperva.com
api-prod.safeway.com
shop-qa1.safeway.com
api-prod-origin.safeway.com
coupons.albertsons.com
ngcp-qa2.tomthumb.com
shop-qa3-origin.safeway.com
www.tomthumb.com
local.carrsqc.com
imperva.com
www-stage-origin.safeway.com
ngcp-qa2.safeway.com
shop-dev1-origin.safeway.com
www-qa1-origin.safeway.com
api-qa2-origin.safeway.com
shop-qa3-origin.safeway.com
shop-prod-origin.safeway.com
incapsula.com
ctsecure.mywebgrocer.com
ngcp-qa2.safeway.com
Certificate
The complete raw certificate details for rss2-q.carrsqc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIDAqANMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTEzMTEwNjE4MjUzMVoXDTE2MDEwODE3NDUyM1owgaQxKTAnBgNVBAUT IE5UYkFhWkp3b1dlN2xTVnUtUm5NNGI1R0dJb3B4T3BaMQswCQYDVQQGEwJVUzET MBEGA1UECBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKUGxlYXNhbnRvbjEWMBQGA1UE ChMNU2FmZXdheSAgSW5jLjELMAkGA1UECxMCSVQxGzAZBgNVBAMTEnJzczItcS5j YXJyc3FjLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMs3DcgA 44ZmDeAd1AeZ+Jq62Lw7Ty1X+Ven5MbW0EuYNuBzS5d9YyzJ/yaXaNXvFZoAMDrj KF/6J439J8PrTiURpMRvdj5oBkouvz3GOzGD5wr7RdKZdTR7xZmFT2Cxnc10auUu WgUNEwDVNt6xAZorwEZBZKiSx5KfABuEe9xLRYK4Bng/ec93a7UVau25xsIzaR9l O0/gthXoV7EdkvucdY/7yOfoxQcL5QNnqaPQfY8yfhojNjvXvbki+mZVaTCqT6N6 IBIAFdNiqfJ8843QyusBCk/CVg095vKnp5JgFXpCo77XKXJR7g6Qw8Vy+BuUu0YC 4hponk+2PN6TzTkCAwEAAaOCAZ4wggGaMB8GA1UdIwQYMBaAFEJ5VBthzVUrPmPV PEhX9Z/7Rc5KMA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwHQYDVR0RBBYwFIIScnNzMi1xLmNhcnJzcWMuY29tMD0GA1UdHwQ2 MDQwMqAwoC6GLGh0dHA6Ly9ndHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvZ3Rz c2wuY3JsMB0GA1UdDgQWBBTPnOwqbcYxcm2cHU7072RmOBB4qDAMBgNVHRMBAf8E AjAAMG8GCCsGAQUFBwEBBGMwYTAqBggrBgEFBQcwAYYeaHR0cDovL2d0c3NsLW9j c3AuZ2VvdHJ1c3QuY29tMDMGCCsGAQUFBzAChidodHRwOi8vZ3Rzc2wtYWlhLmdl b3RydXN0LmNvbS9ndHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMw MQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9j cHMwDQYJKoZIhvcNAQEFBQADggEBAHhWvPKftUFYox9Zj01cgT7xnS6mINWQiwat WVSsW6JxA4EU17NyZGSOw7W3l+0yiHWJlI4136zQGEuIZtWX8eK+aGfUQTKYmDo6 KAStWlkyC4BuhcL7/wYrs/wfC7p5Li1XvyveMa7e0xYbymFIJRgicLw9/vJtznOI Nea6ynsExccPBe/x32udT6NuJr5AVlQym0J7BOLVi9XSAygdokXDePQyPm4u1i8+ gzaQzedYU5A1fXVsYpOvexPmP8I9EAuG94WwB9USGTJnQQyvtI6x+GmSg/cKjzYd NUb89Kp7Prs6DTE8ts7taLPQX7/+2hWcF9YQtF72pGRxmFS+6hA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzcNyADjhmYN4B3UB5n4 mrrYvDtPLVf5V6fkxtbQS5g24HNLl31jLMn/Jpdo1e8VmgAwOuMoX/onjf0nw+tO JRGkxG92PmgGSi6/PcY7MYPnCvtF0pl1NHvFmYVPYLGdzXRq5S5aBQ0TANU23rEB mivARkFkqJLHkp8AG4R73EtFgrgGeD95z3drtRVq7bnGwjNpH2U7T+C2FehXsR2S +5x1j/vI5+jFBwvlA2epo9B9jzJ+GiM2O9e9uSL6ZlVpMKpPo3ogEgAV02Kp8nzz jdDK6wEKT8JWDT3m8qenkmAVekKjvtcpclHuDpDDxXL4G5S7RgLiGmieT7Y83pPN OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 172045 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-06 18:25:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-08 17:45:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTbAaZJwoWe7lSVu-RnM4b5GGIopxOpZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Safeway Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rss2-q.carrsqc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25653523965014111830777649131171688025800124502949024546768967688272086235422556901533692715892624775065096172992873595764476520164087060211145213633409820811407154186924283759315178487457666652036950714598170613984861971223732773561491382640141668689766340619944812195646919206070401478589145137282102894964805586808507779105436019989136255127170013193004869179002652959348152419571382437291461100029969347405089192401994876869218258742778564215897987012631127227907120656613552139053252974611315509552694578540788729215683819776026053749101165355506327200481831167683164739779611045082608507783977801863555561278777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss2-q.carrsqc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf9cec2a6dc631726d9c1d4ef4ef6466381078a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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