trid-adconnect.radford.edu

- Radford University -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:e3:b3 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Radford University

Company registration number: 3s8XOpG7RZ6PRgt9luE/kjFCX8aVSTeD
Organization: Radford University
State / Province: Virginia
Locality: Radford
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e3:b3
Serial Number (int): 189363
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: f6:f6:95:dc:b6:03:a8:26:5a:ba:b9:95:31:ce:e4:99:e2:79:7a:19
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 67:73:48:20:8c:90:67:bd:aa:87:cb:65:a6:07:e4:d6:bf:28:5c:c0
Fingerprint (sha256): 0f:f9:8f:78:00:78:30:9b:14:8f:20:30:f7:0b:73:7c:46:4a:47:7c:09:32:7a:b3:68:df:76:6c:f6:8c:4f:62

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate trid-adconnect.radford.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trid-adconnect.radford.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trid-adconnect.radford.edu

Other certificates including the domain name radford.edu

(limited to 100 certificates)
mobile.radford.edu
holst.radford.edu
mozart.radford.edu
degree-aud.radford.edu
ssa.radford.edu
myru.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
learn.radford.edu
aceweb.radford.edu
list.radford.edu
monitor.radford.edu
ruems-dev.radford.edu
hd-wsus.radford.edu
cca-svr-30.radford.edu
sapphire.radford.edu
www.radford.edu
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
*.asp.radford.edu
ssb.radford.edu
support.radford.edu
sso-pprd.radford.edu
ruwireless.radford.edu
ru-data.radford.edu
webwork.radford.edu
impactlms.radford.edu
sqlteacher.radford.edu
mlad01.radford.edu
aceweb.radford.edu
ssbxe.radford.edu
www.radford.edu
edge-uc3.peopleadmin.com
esm.radford.edu
trident-pprd.radford.edu
eva1.radford.edu
eva1-dev.radford.edu
monk.radford.edu
journals.radford.edu
webapps.radford.edu
libguides.radford.edu
mobile.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
trid-adconnect.radford.edu
batch1.radford.edu
ise.radford.edu
edge_uc3.peopleadmin.com
ru-portal.portal.radford.edu
edge-uc3.peopleadmin.com
encore.radford.edu
edge-uc3.peopleadmin.com
portal.radford.edu
edge_uc3.peopleadmin.com
celearntest.radford.edu
armad01.radford.edu
author-train.radford.edu
ruems-dev.radford.edu
edge_uc3.peopleadmin.com
geog-grant.radford.edu
odyssey-web.radford.edu
sites.radford.edu
classclimate.radford.edu
wagner.radford.edu
wagner.radford.edu
bonita6-pprd.radford.edu
netappsrv1.radford.edu
gitlab.radford.edu
ldaps.radford.edu
list.radford.edu
onecampus.radford.edu
cca-svr-40.radford.edu
collegiatelink.studentvoice.com
breeze.radford.edu
appnav-pprd.radford.edu
support.radford.edu
cognos.radford.edu
*.asp.radford.edu
sso.radford.edu
my.radford.edu
tutortrac.radford.edu
myru.radford.edu
hd-wsus.radford.edu
edge_uc3.peopleadmin.com
owa.radford.edu
libguides.radford.edu
learntest.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
libguides.radford.edu
onecampus.radford.edu
lp5-beis.radford.edu
edge_uc3.peopleadmin.com
list.radford.edu
classclimate.radford.edu
journals.radford.edu
webvpn.radford.edu
trident.radford.edu
ssb.radford.edu
edge-uc3.peopleadmin.com
webvpn.radford.edu
tutortrac.radford.edu
edge-uc3.peopleadmin.com

Certificate

The complete raw certificate details for trid-adconnect.radford.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIDAuOzMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM
IENBMB4XDTE0MDYwMTIyMDI1NVoXDTE1MDYwNTA2MDQxN1owgZ8xKTAnBgNVBAUT
IDNzOFhPcEc3Ulo2UFJndDlsdUUva2pGQ1g4YVZTVGVEMQswCQYDVQQGEwJVUzER
MA8GA1UECBMIVmlyZ2luaWExEDAOBgNVBAcTB1JhZGZvcmQxGzAZBgNVBAoTElJh
ZGZvcmQgVW5pdmVyc2l0eTEjMCEGA1UEAxMadHJpZC1hZGNvbm5lY3QucmFkZm9y
ZC5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYsQ9OjJCSGKX
H2tNSO4pUeOIXtnqNMw8I9kN6o49E7G/JACwjAPuAsbiIc3Zmc4txVQA6joH1fuz
EdD8AI3X9Rflrl+avLxxCJ5Q3W3KgMQC1MjEI9sst+vcpoDn31E7XPGbLSByMBeY
5NNTuy0u3UF0pvItKccq9LH+v/pFWnlLZcTsCrBMdVfSuLcZyEnwnr7Vdj9rLO6P
uPYO9EW9r6vqwLBwwGSJe2C5qSqMPXqvr8Q57Xx1GbOj6qLuNlFUg28AmKrIb4Vz
cl0g7uSQFqd8MiAFOC9t+LMbYkUjigtTRSU8Bi4VljbookRzgiXwycdJs+qkT0Yl
tiMhWcuPAgMBAAGjggGmMIIBojAfBgNVHSMEGDAWgBRCeVQbYc1VKz5j1TxIV/Wf
+0XOSjAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMCUGA1UdEQQeMByCGnRyaWQtYWRjb25uZWN0LnJhZGZvcmQuZWR1MD0GA1Ud
HwQ2MDQwMqAwoC6GLGh0dHA6Ly9ndHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMv
Z3Rzc2wuY3JsMB0GA1UdDgQWBBT29pXctgOoJlq6uZUxzuSZ4nl6GTAMBgNVHRMB
Af8EAjAAMG8GCCsGAQUFBwEBBGMwYTAqBggrBgEFBQcwAYYeaHR0cDovL2d0c3Ns
LW9jc3AuZ2VvdHJ1c3QuY29tMDMGCCsGAQUFBzAChidodHRwOi8vZ3Rzc2wtYWlh
Lmdlb3RydXN0LmNvbS9ndHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2
MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl
cy9jcHMwDQYJKoZIhvcNAQEFBQADggEBAFsKvIM8937TdW3DR+j3lpNqLKwZLfpN
dHPF8wyOAC62Vu23wj9nwhGUr2ReqdxSfQXl2gDrLxUtIGAmEIkepNcNAbY+GRdZ
q1Luk6PGq+5OGcMEXuusks19shlNaH7kBDkBHGNsCM8N09MpnUCoooRobkTiUtwm
KPuh9usb2hqHHvRqEMgRXLUd5rENOsBaDXD26/n30o2+bxdqzPO+YZ/snog/W9K7
3TY6Z68hxJjG+T1ZJ49mflEuwwgTfw8T0Dd4j0PzoivN5hmcNRkUNgB4aYjzyWgx
DKDmxXnyaOhyeHDggxQwDvVnXPcWgBeyigCcwHP1T7y6U8xgRFowsCA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWLEPToyQkhilx9rTUju
KVHjiF7Z6jTMPCPZDeqOPROxvyQAsIwD7gLG4iHN2ZnOLcVUAOo6B9X7sxHQ/ACN
1/UX5a5fmry8cQieUN1tyoDEAtTIxCPbLLfr3KaA599RO1zxmy0gcjAXmOTTU7st
Lt1BdKbyLSnHKvSx/r/6RVp5S2XE7AqwTHVX0ri3GchJ8J6+1XY/ayzuj7j2DvRF
va+r6sCwcMBkiXtguakqjD16r6/EOe18dRmzo+qi7jZRVINvAJiqyG+Fc3JdIO7k
kBanfDIgBTgvbfizG2JFI4oLU0UlPAYuFZY26KJEc4Il8MnHSbPqpE9GJbYjIVnL
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-01 22:02:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-05 06:04:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3s8XOpG7RZ6PRgt9luE/kjFCX8aVSTeD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trid-adconnect.radford.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20878023924976504213421688869963812024726816268281475849477340000874484408351046496257353742503592181422739836211635382885383026174409245021899727802588873623041032314713784135875409335817221221948705311049493597458092679282812498911294749180907230311473286422122211788740833889517841910512216629580127794589016967299886116266426715339641217003276581274844103603192557057980609208816795920002588652063925397629079161259760442818615180551639349373090093121958657575321887318990332798783531284501667918412228067686800770818406811089770393947042931621077411013904510737161596583726316269870899627933845382100922402458511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trid-adconnect.radford.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6f695dcb603a8265abab99531cee499e2797a19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b0abc833cf77ed3756dc347e8f796936a2cac192dfa4d7473c5f30c8e002eb656edb7c23f67c21194af645ea9dc527d05e5da00eb2f152d20602610891ea4d70d01b63e191759ab52ee93a3c6abee4e19c3045eebac92cd7db2194d687ee40439011c636c08cf0dd3d3299d40a8a284686e44e252dc2628fba1f6eb1bda1a871ef46a10c8115cb51de6b10d3ac05a0d70f6ebf9f7d28dbe6f176accf3be619fec9e883f5bd2bbdd363a67af21c498c6f93d59278f667e512ec308137f0f13d037788f43f3a22bcde6199c3519143600786988f3c968310ca0e6c579f268e8727870e08314300ef5675cf7168017b28a009cc073f54fbcba53cc60445a30b020