www.resmed.com

- ResMed Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 03:0a:1d was issued on by GeoTrust, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ResMed Inc.

Company registration number: HpR/YQm-bcuYcTpJ3Lh2ZDZ2OHbHyR2j
Organization: ResMed Inc.
Organization unit: IT
State / Province: California
Locality: San Diego
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:1d
Serial Number (int): 199197
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 8a:27:7e:35:72:9a:32:ac:a0:1e:ec:33:15:15:79:3b:e1:e3:02:03
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 6b:91:ff:6b:9b:ec:90:42:83:f9:00:08:50:87:96:75:f3:e7:2e:8a
Fingerprint (sha256): 0d:2a:85:78:02:68:34:c6:d6:6e:f8:04:e7:2d:85:02:b8:77:12:bd:da:dc:81:60:ed:00:50:c1:b4:04:5c:5c

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.resmed.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.resmed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onlinestore.resmed.com
store.resmed.com
connect.resmed.com
ssluat.resmed.com
ssl.resmed.com
wwwuat.resmed.com
secureuat.resmed.com
secure.resmed.com
www.resmed.com
resmed.com

Other certificates including the domain name resmed.com

(limited to 100 certificates)
www.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
dev-learninghub.resmed.com
ssl2.cdngc.net
uat-b2baccounts.resmed.com
ams-preview.resmed.com
ssl2.cdngc.net
cloud.latam.resmed.com
ssl2.cdngc.net
itstatus.resmed.com
origin-es.resmed.com
ssl2.cdngc.net
virginpulse.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
support.myair2.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
cpap-masks-ebook.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
xms.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
view.email.resmed.com
ssl2.cdngc.net
mydhtpeople.resmed.com
pages.resmed.com
www.resmed.com
dawn-api-dev.resmed.com
www.resmed.com
apim.resmed.com
ssl2.cdngc.net
sslvpn.resmed.com.sg
ssl2.cdngc.net
data.resmed.com
ssl2.cdngc.net
mail.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
devx.resmed.com
accountroc.resmed.com
prod.19.slot.cdn.salesforce-communities.com
ssl2.cdngc.net
ssl2.cdngc.net
www.resmed.com
dawn-api.resmed.com
ux-coe4.resmed.com
personalcomfort-stgbackend.resmed.com
www.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
sslvpn.resmed.com.sg
api.amrdev.multiviewfacerecon.resmed.com
ssl2.cdngc.net
hackathon.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
ex.support.resmed.com
ssl2.cdngc.net
pulse.resmed.com
mail.resmed.com
eudev-www.resmed.com
webforms-api.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
ap.resmed.com
ssl2.cdngc.net
newsroom.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
newsroom.resmed.com
ssl2.cdngc.net
ams-preview.resmed.com
www.resmed.com
careers.resmed.com
sparc.resmed.com
myairpulse.resmed.com
splus.resmed.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
mail.resmed.com
www.resmed.com
www.resmed.com
san-24-s12.tlsprovisioning.exacttarget.com
ssl2.cdngc.net
ssl2.cdngc.net
careers.resmed.com
ssl2.cdngc.net
www.resmed.com

Certificate

The complete raw certificate details for www.resmed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAwodMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM
IENBMB4XDTE0MTIwOTA2MzI0NloXDTE2MDIxMDEyNTg1MFowgZ0xKTAnBgNVBAUT
IEhwUi9ZUW0tYmN1WWNUcEozTGgyWkRaMk9IYkh5UjJqMQswCQYDVQQGEwJVUzET
MBEGA1UECBMKQ2FsaWZvcm5pYTESMBAGA1UEBxMJU2FuIERpZWdvMRQwEgYDVQQK
EwtSZXNNZWQgSW5jLjELMAkGA1UECxMCSVQxFzAVBgNVBAMTDnd3dy5yZXNtZWQu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx60N3f4Kw6ul1U32
QYkhM6GCeUC5FGHPbbMvmxp3YXKblJnKK/hsrRlzokYBzZ8uXKtUL9rXC1ilVaab
J5IB9uidCZ7vXpa/fNIrKan+SVfsaVomAYHM4m7m97sFOWUqy+prgcf10Xqco4NS
BaOaoMvCG714lrSKkmJ1CS//qn2oqjyoDDDelO1A3xvN4XyxAqSDBQbW/sTV2tkc
56XTmAolea9stFrHumvXjvln9ktpXpS2lDCrrDNWJvGBEl9eOSnYmEPu8JTtgA30
VSthy20Xk7PvE2o0D1xOu+NQ6ta7u4Gft9fWATczpmY8wZOlv2RvduOR1O0aNs6C
+FeAuwIDAQABo4ICRjCCAkIwHwYDVR0jBBgwFoAUQnlUG2HNVSs+Y9U8SFf1n/tF
zkowDgYDVR0PAQH/BAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjCBxAYDVR0RBIG8MIG5ghZvbmxpbmVzdG9yZS5yZXNtZWQuY29tghBzdG9yZS5y
ZXNtZWQuY29tghJjb25uZWN0LnJlc21lZC5jb22CEXNzbHVhdC5yZXNtZWQuY29t
gg5zc2wucmVzbWVkLmNvbYIRd3d3dWF0LnJlc21lZC5jb22CFHNlY3VyZXVhdC5y
ZXNtZWQuY29tghFzZWN1cmUucmVzbWVkLmNvbYIOd3d3LnJlc21lZC5jb22CCnJl
c21lZC5jb20wPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2d0c3NsLWNybC5nZW90
cnVzdC5jb20vY3Jscy9ndHNzbC5jcmwwHQYDVR0OBBYEFIonfjVymjKsoB7sMxUV
eTvh4wIDMAwGA1UdEwEB/wQCMAAwbwYIKwYBBQUHAQEEYzBhMCoGCCsGAQUFBzAB
hh5odHRwOi8vZ3Rzc2wtb2NzcC5nZW90cnVzdC5jb20wMwYIKwYBBQUHMAKGJ2h0
dHA6Ly9ndHNzbC1haWEuZ2VvdHJ1c3QuY29tL2d0c3NsLmNydDBMBgNVHSAERTBD
MEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5nZW90cnVz
dC5jb20vcmVzb3VyY2VzL2NwczANBgkqhkiG9w0BAQUFAAOCAQEARYRwnI17bayR
HVTAaqb3zM3KV6LiXbdsPegW+KJb8FC+oauYEkRzQA/nTDjGqHCKjdo7ZpJUgleZ
E6GoHAmkeh2T4BKvw94PX0n8KnPNRxne79PIR9J4AOK0UGo+Lzc5SmfxEYom/huO
6hyS7aXKakHKScdfigK7lLBdo5O4lzYx7HEG827VDws7y3A9HRCR+/UGraxg+4n/
CSoiNiIF9ICFAzSJlb5I3K+bqy90r0gq+WxJ3sPSDICPv5WvhhExotA73nggqVjn
bX22FZIIifNgEsRXuvdC5fZAhPcD696804/Cd2tM+sLIAlXqkyDxdMMRT554wMMk
p2/CoqI14A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx60N3f4Kw6ul1U32QYkh
M6GCeUC5FGHPbbMvmxp3YXKblJnKK/hsrRlzokYBzZ8uXKtUL9rXC1ilVaabJ5IB
9uidCZ7vXpa/fNIrKan+SVfsaVomAYHM4m7m97sFOWUqy+prgcf10Xqco4NSBaOa
oMvCG714lrSKkmJ1CS//qn2oqjyoDDDelO1A3xvN4XyxAqSDBQbW/sTV2tkc56XT
mAolea9stFrHumvXjvln9ktpXpS2lDCrrDNWJvGBEl9eOSnYmEPu8JTtgA30VSth
y20Xk7PvE2o0D1xOu+NQ6ta7u4Gft9fWATczpmY8wZOlv2RvduOR1O0aNs6C+FeA
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-09 06:32:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-10 12:58:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HpR/YQm-bcuYcTpJ3Lh2ZDZ2OHbHyR2j'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Diego'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ResMed Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.resmed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25206758879298063880029442796081409174494376413552526709558036817272742919133471566792444378123196433731815309001648118954961466496716338087471511598744066446429174006137244652067580940464839188745606856114011413938848399939237810745097031145150227329825369355297013757700406614864909536719196155628984937141688010972439593829638189051570215226524312519138282092590789296801656317952726108201910996935610558173121716376831159510306828839012291943676077239231786179554028195779166840171286362377391113300674712364022260471879880393883911667200562901096265298211021804357472450794579982945585930368617067519227595292859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinestore.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssluat.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwuat.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureuat.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resmed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a277e35729a32aca01eec331515793be1e30203
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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