*.asoa.org

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 01:72:61 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.asoa.org,OU=GT29999407+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:72:61
Serial Number (int): 94817
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): d5:5e:fd:59:7c:b7:a9:ea:66:0b:ec:4c:f1:b7:89:d3:7a:2e:9c:9f
Fingerprint (sha256): 1a:07:39:4b:25:78:a6:68:4b:5f:c2:eb:8f:b7:79:be:ae:f0:b4:d7:87:f3:ab:cf:2b:d8:77:f6:75:bb:40:90

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate *.asoa.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.asoa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.asoa.org
asoa.org

Other certificates including the domain name asoa.org

(limited to 100 certificates)
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
india.polo-development.com
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
go.rescuevocations.org
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
www.frailtycertification.com
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
members.asoa.org
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
asoa.org
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
*.asoa.org
www.summitmortgagetraining.com
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
community.asoa.org
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
community.asoa.org
community.asoa.org
members.asoa.org
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
5645478960037888-fe1.pantheonsite.io
community.asoa.org
www.summitmortgagetraining.com
careers.asoa.org
*.asoa.org
*.asoa.org
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5727950116749312-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
community.asoa.org
uspa.polo-development.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
ukraine.polo-development.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
members2.asoa.org
shop.asoa.org
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
members.asoa.org
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
community.asoa.org
www.summitmortgagetraining.com
members.asoa.org
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
community.asoa.org

Certificate

The complete raw certificate details for *.asoa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEpTCCA42gAwIBAgIDAXJhMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdSYXBpZFNTTCBTSEEy
NTYgQ0EgLSBHMzAeFw0xNTAxMDUwMTAwMThaFw0xNjAzMDgwODAwMThaMIGOMRMw
EQYDVQQLEwpHVDI5OTk5NDA3MTEwLwYDVQQLEyhTZWUgd3d3LnJhcGlkc3NsLmNv
bS9yZXNvdXJjZXMvY3BzIChjKTE1MS8wLQYDVQQLEyZEb21haW4gQ29udHJvbCBW
YWxpZGF0ZWQgLSBSYXBpZFNTTChSKTETMBEGA1UEAwwKKi5hc29hLm9yZzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJR74YEWOvu+Cv18tddxcl+yE8O
kzaVHC5lpA/camlKo3LEx2CUC4If8pGK95cocMLL6L1iEtjNgbi0L6aEgFX4Y69e
RMYjvrJtX24NYmstIObfNi3H7UM+qwsosEyN00HBu3sUNhKL07CJJmeC/pWzZjXe
t90RgniAxSCC32gi8pan7K9eYqLMF++Vjdsr0+e/Ls/vd+5mIF3/7Za/59/7MQ03
yxjEPsAcTvBXJwC+g6bPsJcYrWAbQFJGqHFHxmTx9cI9zhhbFM7p1DvNVUWiDojC
ze5fykK+UTMwqwmScYSJEKqVLlYN/vEX8m9/VWPpAoZuxPQ4R3CckJtGMwECAwEA
AaOCAVAwggFMMB8GA1UdIwQYMBaAFMOc8/zTRgg0u85Gf6B8W/PiCMtZMFcGCCsG
AQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2d2LnN5bWNkLmNvbTAmBggr
BgEFBQcwAoYaaHR0cDovL2d2LnN5bWNiLmNvbS9ndi5jcnQwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHREEGDAWggoq
LmFzb2Eub3Jngghhc29hLm9yZzArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Yu
c3ltY2IuY29tL2d2LmNybDAMBgNVHRMBAf8EAjAAMEUGA1UdIAQ+MDwwOgYKYIZI
AYb4RQEHNjAsMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBpZHNzbC5jb20v
bGVnYWwwDQYJKoZIhvcNAQELBQADggEBABzr1jHOuSa3hyNUhbZjb1SKpIwTUVx9
aS2m59e90fMNdc1JOianQBd19yVbssDia27oA77xIBgXWTmdMQNqxyFxRv2LetIC
MQJfq1DSA/stRqjCnY7uMplU23+40rL1w7auD8roiB1D46sO4asAzVtFfLReeC4n
bkJpVnvNwEuphcWQvDQi3BLaUATjdQ3lpONQ9u1V8xy+udxwtBbBhnTO5CJDVxnc
TdI0C+Bn879utvpYpr4rdg5Ty9ctmsFbi8PYG1qFT0l2j80LcJhigbhDbJRDbMt6
AbRawIsZWEq7InapZujNSqgHS2JGURORfluysAKW0mP6c455aH+rp0A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslHvhgRY6+74K/Xy113F
yX7ITw6TNpUcLmWkD9xqaUqjcsTHYJQLgh/ykYr3lyhwwsvovWIS2M2BuLQvpoSA
Vfhjr15ExiO+sm1fbg1iay0g5t82LcftQz6rCyiwTI3TQcG7exQ2EovTsIkmZ4L+
lbNmNd633RGCeIDFIILfaCLylqfsr15ioswX75WN2yvT578uz+937mYgXf/tlr/n
3/sxDTfLGMQ+wBxO8FcnAL6Dps+wlxitYBtAUkaocUfGZPH1wj3OGFsUzunUO81V
RaIOiMLN7l/KQr5RMzCrCZJxhIkQqpUuVg3+8Rfyb39VY+kChm7E9DhHcJyQm0Yz
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-05 01:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-08 08:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT29999407'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.asoa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22510822253271482413823547779010047216870588100596008379113345729412300899687396893506758342955402057860039785410823746489972907578386230795343612465483390332205334685962219587797181741770365472641385406871477636889846313586534630841188759759097343201792550352234966382020047353299274504842587735161662183977034406864649164841249616063432521446225915726544039245940166305816831813535843500219294849636772886469684192552657151897490040179154921820419313338695834489406807808935337114936226784593481652920648003750354479241522753363239387835665967616744770314677580987815403138837797802169780731381818461404151408898817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asoa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asoa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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