citrix.mccolls.com.au

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:b4:f9 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=citrix.mccolls.com.au,OU=GT16229677+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b4:f9
Serial Number (int): 111865
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): fc:5a:8b:cc:d6:89:1e:8e:9a:50:e2:df:08:08:b7:ed:62:08:9b:bc
Fingerprint (sha256): 14:c2:39:f7:7a:64:8f:56:c8:9b:d8:79:85:89:fb:8b:48:63:cc:ce:2a:7f:ee:6a:d8:93:e7:77:24:db:c5:3c

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate citrix.mccolls.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.mccolls.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.mccolls.com.au

Other certificates including the domain name mccolls.com.au

(limited to 100 certificates)
mccolls.com.au
mccolls.com.au
*.mccolls.com.au
mccolls.com.au
helpdesk.brisbanemarkets.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maitland.nsw.gov.au
citrix.mccolls.com.au
servicedesk.mcson.com.au
citrix.mccolls.com.au
mail.mccolls.com.au
helpdesk.benedict.com.au
citrix.mccolls.com.au
helpdesk.mstglobal.com
*.mccolls.com.au
uat.mccolls.com.au
citrix.mccolls.com.au
lyncweb.mccolls.com.au
farm.mccolls.com.au
mccolls.com.au
mccolls.com.au
mccolls.com.au
servicedesk.stgiles.org.au
dashmate-dev.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maranoa.qld.gov.au
uat.mccolls.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.mstglobal.com
mccolls.com.au
mccolls.com.au
helpdesk.mccolls.com.au
mccolls.com.au
mccolls.com.au
uat.mccolls.com.au
mccolls.com.au
helpdesk.mstglobal.com
mccolls.com.au
helpdesk.benedict.com.au
mccolls.com.au
servicedesk.mcson.com.au
helpdesk.mccolls.com.au
mccolls.com.au
helpdesk.benedict.com.au
servicedesk.stgiles.org.au
servicedesk.4dmedical.com
servicedesk.4dmedical.com
helpdesk.maranoa.qld.gov.au
servicedesk.maib.tas.gov.au
uat.mccolls.com.au
servicedesk.4dmedical.com
servicedesk.maib.tas.gov.au
helpdesk.benedict.com.au
mail.mccolls.com.au
servicedesk.mcson.com.au
uat.mccolls.com.au
uat.mccolls.com.au
helpdesk.mstglobal.com
uat.mccolls.com.au
helpdesk.maitland.nsw.gov.au
mail.mccolls.com.au
helpdesk.benedict.com.au
*.mccolls.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
dm2staging.mccolls.com.au
mccolls.com.au
helpdesk.benedict.com.au
mccolls.com.au
servicedesk.stgiles.org.au
helpdesk.maitland.nsw.gov.au
dashmate.mccolls.com.au
*.mccolls.com.au
servicedesk.maib.tas.gov.au
citrix.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.benedict.com.au
bookings.mccolls.com.au
mail.mccolls.com.au
mccolls.com.au
uat.mccolls.com.au
servicedesk.pulseenergy.co.nz
helpdesk.maitland.nsw.gov.au
mccolls.com.au
dashmate.mccolls.com.au
servicedesk.mcson.com.au
citrix.mccolls.com.au
dashmate.mccolls.com.au
mccolls.com.au
servicedesk.pulseenergy.co.nz
helpdesk.brisbanemarkets.com.au
mccolls.com.au
dashmate.mccolls.com.au
uat.mccolls.com.au
mccolls.com.au
mail.mccolls.com.au
uat.mccolls.com.au
servicedesk.stgiles.org.au

Certificate

The complete raw certificate details for citrix.mccolls.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIDAbT5MA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh
dGVkIFNTTDEgMB4GA1UEAxMXR2VvVHJ1c3QgRFYgU1NMIENBIC0gRzQwHhcNMTUw
NzA4MTIwMDM4WhcNMTgwODA5MDMwMzM0WjCBoTETMBEGA1UECxMKR1QxNjIyOTY3
NzExMC8GA1UECxMoU2VlIHd3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwcyAo
YykxNTE3MDUGA1UECxMuRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkIC0gUXVpY2tT
U0woUikgUHJlbWl1bTEeMBwGA1UEAxMVY2l0cml4Lm1jY29sbHMuY29tLmF1MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmyu+M5+9VxkW3vHK78Qb6WH
agbryf/cwxH5mptmgrM+0Jl6FfMnDNx4dXn4uiC9Y6opT01425G/pJEtN4hMwOA8
hzXaSTSRjX/XQfui4vt22p+OgG8oDwNl9I6ZK/dPQksN043cZFbwJm1T4Xl4wm68
TqGBljg+RZcH1IeAHVnlupJmf25hsVvS1X83XefwgjcVpl9cdpBjAt1VN1KhD59b
NBWvQzr9DxJZ+tWje8IXNW77LGc2BJzReHlqP2FS2MyO40qQ0vPC8WkeSfzeXXAc
JYOEi1Yz5x1GUHAoUVI2NKGwPifPvThIu0Kqg4M36e1f9zMILQBQjRJ+8R5W6QID
AQABo4IBYjCCAV4wHwYDVR0jBBgwFoAUC1Dsd+8qm//sA6EK/63G5CoYxz4wVwYI
KwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Uuc3ltY2QuY29tMCYG
CCsGAQUFBzAChhpodHRwOi8vZ3Uuc3ltY2IuY29tL2d1LmNydDAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCAGA1UdEQQZMBeC
FWNpdHJpeC5tY2NvbGxzLmNvbS5hdTArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8v
Z3Uuc3ltY2IuY29tL2d1LmNybDAMBgNVHRMBAf8EAjAAMFYGA1UdIARPME0wSwYG
Z4EMAQIBMEEwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9y
ZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDANBgkqhkiG9w0BAQsFAAOCAQEA0rKE
V9xsUbvtL0GRJ9vhn2TgQxQrRjwnrah1Q7Ab6a4Ev91i4VvWsaunBF3J1EdctqID
Fpx35cFA+k2Ub0uXRTRmkdxyDk5wWStKRMWM3GLW4uebDLXWFoF3MP1gNUosU3MG
ba1c5XfcP3fiZ8yinGui84th2HMhwyQUGPj8QY9loPXsVkJ3KWAU7P6x92AwhyOI
LcaiPbEBOtj5g/dOeeRls4Rv4aNR9+92OQfdxJC/OrU+PvxKff+obGceQ8fIS+3B
N3ECVs4yAGWj8U1ycj3s34G1wkXWdFpwKqbsWegmZUYQZE8R2KZYuPWLKKa+2F/J
NYWFKIh0fpdvSVVXrg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmyu+M5+9VxkW3vHK78Q
b6WHagbryf/cwxH5mptmgrM+0Jl6FfMnDNx4dXn4uiC9Y6opT01425G/pJEtN4hM
wOA8hzXaSTSRjX/XQfui4vt22p+OgG8oDwNl9I6ZK/dPQksN043cZFbwJm1T4Xl4
wm68TqGBljg+RZcH1IeAHVnlupJmf25hsVvS1X83XefwgjcVpl9cdpBjAt1VN1Kh
D59bNBWvQzr9DxJZ+tWje8IXNW77LGc2BJzReHlqP2FS2MyO40qQ0vPC8WkeSfze
XXAcJYOEi1Yz5x1GUHAoUVI2NKGwPifPvThIu0Kqg4M36e1f9zMILQBQjRJ+8R5W
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-08 12:00:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 03:03:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT16229677'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix.mccolls.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21514105667653505504501555251166511763816055197287700876101986810228504124361801398048391541336370995557587151359349195345696766874122684333267488722692960092194316864083850521037827415080733701563872410310926606861767373368970979372341195206017237888982348097902424744453195839982075035623772482339643941732938053317743961974474536203309147435335348589047021827848056223219948807634188172684595680984545938775193904295130039766935709686670578599638717590293562781948723567789478896555053682035020598709698857562251123453066787117393930356372527056048512737039358583984957687486409211366524779645641511213145056499433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.mccolls.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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