www.sec.state.vt.us

- Vermont Secretary of State -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 4a:74:1e:bf:67:7b:74:7c:17:7a:81:bd:43:3a:46:52 was issued on by GeoTrust Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Vermont Secretary of State

Company registration number: Government Entity
Organization: Vermont Secretary of State
State / Province: Vermont
Locality: Montpelier
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:74:1e:bf:67:7b:74:7c:17:7a:81:bd:43:3a:46:52
Serial Number (int): 98965801760567168345403685565246359122
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 3f:45:10:25:57:0d:da:dc:7e:05:5e:3a:0b:39:6f:63:ac:e0:03:a8
Fingerprint (sha256): 14:75:27:c0:b0:27:54:69:19:09:f5:4f:6e:42:a1:3a:a7:97:82:96:3f:df:f4:40:0a:7f:2b:6e:ac:44:96:16

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate www.sec.state.vt.us

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sec.state.vt.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.olvr.sec.state.vt.us
www.lobbying.sec.state.vt.us
secure.vtprofessionals.org
enterpriseregistration.sec.state.vt.us
lobbying.sec.state.vt.us
www.mvp.sec.state.vt.us
mail.administration.sec.state.vt.us
alfresco.sec.state.vt.us
www.campaignfinance.sec.state.vt.us
www.vtsosonline.com
prod-exch-01d.administration.sec.state.vt.us
trader2.administration.sec.state.vt.us
vtelectionresults.sec.state.vt.us
campaignfinance.sec.state.vt.us
olvr.sec.state.vt.us
mail.sec.state.vt.us
mvp.sec.state.vt.us
schedule.administration.sec.state.vt.us
administration.sec.state.vt.us
autodiscover.administration.sec.state.vt.us
vtsosonline.com
vems.sec.state.vt.us
autodiscover.sec.state.vt.us
dms.sec.state.vt.us
dms.administration.sec.state.vt.us
www.vems.sec.state.vt.us
fs.sec.state.vt.us
www.sec.state.vt.us

Other certificates including the domain name state.vt.us

(limited to 100 certificates)
erecruit.per.state.vt.us
gfs.dps.state.vt.us
ibi-montpelier-1.infosec.state.vt.us
anrmaps.vermont.gov
incapsula.com
nws.vdh.state.vt.us
vtmapir-admin.dvha.ahs.state.vt.us
incapsula.com
vjiss2.dps.state.vt.us
ahssqld08d.ahs.state.vt.us
vtcnp.doe.state.vt.us
devcms.sec.state.vt.us
incapsula.com
wave.ed.state.vt.us
tvie2140.infosec.state.vt.us
www.sec.state.vt.us
selfserve.education.state.vt.us
incapsula.com
docstar.dps.state.vt.us
www.sec.state.vt.us
nextest.dps.state.vt.us
www.ahsnet.ahs.state.vt.us
telecomservices.dii.state.vt.us
incapsula.com
citrix.ahs.state.vt.us
cag.state.vt.us
OBWFE2-TEST.ahs.state.vt.us
incapsula.com
incapsula.com
incapsula.com
dpsgisweb2.dps.state.vt.us
trader.administration.sec.state.vt.us
incapsula.com
ent-footprints.state.vt.us
incapsula.com
panopticon.infosec.state.vt.us
incapsula.com
fsdnet.ahs.state.vt.us
vepards.dps.state.vt.us
incapsula.com
OBWFEAPP5.ahs.state.vt.us
vepardswb2.dps.state.vt.us
www.sec.state.vt.us
view.leg.state.vt.us
incapsula.com
ahs-obwfeapp4-test.ahs.state.vt.us
obwfeapp7.ahs.state.vt.us
nws.vdh.state.vt.us
anrmaps.vermont.gov
incapsula.com
fsdnet.ahs.state.vt.us
fsdnet.ahs.state.vt.us
pike.atg.state.vt.us
nws.vdh.state.vt.us
*.vttaxnet.tax.state.vt.us
www.sec.state.vt.us
ftp2.tre.state.vt.us
incapsula.com
vtdpscrimentel.dps.state.vt.us
VEMservices.dps.state.vt.us
analytics.dps.state.vt.us
incapsula.com
DMVCIS01.aot.state.vt.us
citrix.labor.state.vt.us
*.erp.state.vt.us
secure.atg.state.vt.us
www.sec.state.vt.us
nws.vdh.state.vt.us
adfs.vtransweb.aot.state.vt.us
incapsula.com
slog-dvha.ahs.state.vt.us
incapsula.com
jury.eservices.crt.state.vt.us
vjiss2.dps.state.vt.us
incapsula.com
aotadfs.dps.state.vt.us
infoonmycase.ahs.state.vt.us
vepardscopweb.dps.state.vt.us
nomos.dps.state.vt.us
www.sec.state.vt.us
publicportal.courts.vt.gov
www.aot.state.vt.us
OBWFEAPP3.ahs.state.vt.us
anrnode.anr.state.vt.us
incapsula.com
ftp2.tre.state.vt.us
incapsula.com
mybenefits.ahs.state.vt.us
incapsula.com
www.brightfutures.dcf.state.vt.us
incapsula.com
anrnode.anr.state.vt.us
*.erp.state.vt.us
secure.education.state.vt.us
quick.ahs.state.vt.us
*.erp.state.vt.us
incapsula.com
cms.sec.state.vt.us
agocapcomplaint.atg.state.vt.us
alfresco.sec.state.vt.us

Certificate

The complete raw certificate details for www.sec.state.vt.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux8nO97lkfcGOW+XB8A0
0pSyN5027/MG4LRh2LTIDwLaX8jbYl9s9vHe/8DRxv/JdrapPMFARbYWw480g/I+
GDF2+Hay0PXkvsfl1QlPdSPIkBLhbTmIqXMzZzT7YhopOXt00JV+FfcIepeWE1AJ
46YzpyRlPPm9Ar7AdH5Oh3WNhBJYdf8svU3cfJRZz/YJlzd7tFNvYYKQ7zqzZyPn
Cu6p7qaiLlNeBNnsDIXjITvbBaE6AnhLMbpod5GJahk2pLkFkwdXpEPddA9PmK5E
gc+hx2w2uEoerPgITCfDtfhgcUtWPmmYyRAAAbzX1w0MftEzeFsOwAIgEPdUJD3a
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98965801760567168345403685565246359122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Montpelier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vermont Secretary of State'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.sec.state.vt.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23621925272388346498559686379287694684312409637792957535062555947220607883173601980018774852208861004586701977155396370476512260447887226542800683023588913043867866516609293259373869376113055875019422811099986849355273933043321058710062694866562056646454876141321124078464054393216408326918028343499673741452920833879636242378404861795229521054247073337055575543638865878435689154112374543074748227524085881221172507999549491983675100563660750787298710637417268602013299991497334673671855379795334905754917085715391882917548198376846556285197534755471264559439089197655089576098206122926753084881930676968914794961559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (830 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvr.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lobbying.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vtprofessionals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobbying.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvp.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfresco.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campaignfinance.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtsosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-exch-01d.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trader2.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtelectionresults.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaignfinance.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvr.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvp.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schedule.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtsosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vems.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.administration.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vems.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.sec.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sec.state.vt.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015821156d0f0000040300483046022100ae53a19717629d5323eea6f89c13590312b3809fa88ecb4019d333db5f3d180c022100b7e2c277eddf679d0bedd939528a931e040ad152e5df45776fb61cd381cf3f3c00770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015821156d350000040300483046022100bd6df36c6bdb687a6ad1d0cd656c039d9c01229e277e68da396b4cad4af748f7022100afeaca769a9c0aeb2073031e570c1ad4aa5ba5056f93da6c8d7c53f731b4c1e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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