cdn03.c3edge.net
- ChinaCache North America -
Issued by GeoTrust SSL CA
About this certificate
This digital certificate with serial number 02:26:f8 was issued on by GeoTrust, Inc..
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
ChinaCache North America
Company registration number:
IbKPZsG0TyCQYAwmzpmC9x9cRjoEw6xw
Organization: ChinaCache North America
Organization unit: CCNA
Organization: ChinaCache North America
Organization unit: CCNA
State / Province:
California
Locality: Diamond Bar
Country: US
Locality: Diamond Bar
Country: US
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:26:f8Serial Number (int): 141048
Serial Number lenght: 18 bits, 3 octets
SubjectKeyId: 25:b5:d9:6a:c3:4c:05:00:91:92:57:50:6e:3c:9f:2a:ed:73:4f:69
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a
Fingerprint (sha1): 9a:d9:94:d6:ab:5d:04:e6:e6:65:59:7b:32:d6:e6:58:09:cf:53:9a
Fingerprint (sha256): 1d:4e:85:a8:a6:55:d9:47:1d:1c:4a:21:43:e3:1c:4f:49:f2:6f:a7:3b:03:4d:08:55:2e:f8:c1:80:df:f3:99
Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt
Revocation information
OCSP Server: http://gtssl-ocsp.geotrust.comCRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl
Check the revocation status for certificate cdn03.c3edge.net
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn03.c3edge.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
media.yoox.biz
www.xmos.com
a0.muscache.com
a1.muscache.com
a2.muscache.com
a3.muscache.com
spdy.muscache.com
cn-cdn.raymondweil.cn
cn-cdn.raymond-weil.com
cdn03.c3edge.net
www.xmos.com
a0.muscache.com
a1.muscache.com
a2.muscache.com
a3.muscache.com
spdy.muscache.com
cn-cdn.raymondweil.cn
cn-cdn.raymond-weil.com
cdn03.c3edge.net
Other certificates including the domain name c3edge.net
(limited to 100 certificates)
cdn03.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
munin.orca.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
munin.orca.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
Certificate
The complete raw certificate details for cdn03.c3edge.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAib4MA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTEzMDQwODExMTU0NVoXDTE1MDQwNTAxMTUzOFowgbAxKTAnBgNVBAUT IEliS1Bac0cwVHlDUVlBd216cG1DOXg5Y1Jqb0V3Nnh3MQswCQYDVQQGEwJVUzET MBEGA1UECBMKQ2FsaWZvcm5pYTEUMBIGA1UEBxMLRGlhbW9uZCBCYXIxITAfBgNV BAoTGENoaW5hQ2FjaGUgTm9ydGggQW1lcmljYTENMAsGA1UECxMEQ0NOQTEZMBcG A1UEAxMQY2RuMDMuYzNlZGdlLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALttfWL/NWr4/8xea59qDMhk/5VlQ+WVuvkJHbbIXKpeK3niybIscz1Z 5AzTHFotEdAnhVoQucPlg6od6Opol+SE51PfFxtI/zCoajw6YIsgpwP0kP5U9pjP +YRzG2lTjAaflg8Xbb2i6beft62T11DLrXjoafJfv1f6y/kljHU8ggmhrMs2dQcZ xskga3BMv6Dc++zLbxCdaOwKpCjhi88rDpnaUARuRbGIM4dkNelM/zSecHRph6NO B6wbOLYxL2sPJnPjfChlc6lk8n8+yhH8KU2BEekD1MiVdOdnWk5ZbRD46W07xQbe nBQUmHhX0xWrBLBcl7NlQD8vcqGqq1sCAwEAAaOCAkQwggJAMB8GA1UdIwQYMBaA FEJ5VBthzVUrPmPVPEhX9Z/7Rc5KMA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwgcIGA1UdEQSBujCBt4IObWVkaWEueW9veC5i aXqCDHd3dy54bW9zLmNvbYIPYTAubXVzY2FjaGUuY29tgg9hMS5tdXNjYWNoZS5j b22CD2EyLm11c2NhY2hlLmNvbYIPYTMubXVzY2FjaGUuY29tghFzcGR5Lm11c2Nh Y2hlLmNvbYIVY24tY2RuLnJheW1vbmR3ZWlsLmNughdjbi1jZG4ucmF5bW9uZC13 ZWlsLmNvbYIQY2RuMDMuYzNlZGdlLm5ldDA9BgNVHR8ENjA0MDKgMKAuhixodHRw Oi8vZ3Rzc2wtY3JsLmdlb3RydXN0LmNvbS9jcmxzL2d0c3NsLmNybDAdBgNVHQ4E FgQUJbXZasNMBQCRkldQbjyfKu1zT2kwDAYDVR0TAQH/BAIwADBvBggrBgEFBQcB AQRjMGEwKgYIKwYBBQUHMAGGHmh0dHA6Ly9ndHNzbC1vY3NwLmdlb3RydXN0LmNv bTAzBggrBgEFBQcwAoYnaHR0cDovL2d0c3NsLWFpYS5nZW90cnVzdC5jb20vZ3Rz c2wuY3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVo dHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0GCSqGSIb3DQEB BQUAA4IBAQBXC7TQ+oXZylUsKRIimLK4Xm8CSBzsp7DnHc8L+QE7czXp+HwOJ0jo 8Mn2L/NLLkyVhn0tmAVCGeU6EDZS7z88S2W+5k2M/TyRvJvxE7qFn4hfKxDtHm11 7N9kYpozvEHFtKKz7xGfCu51i3V74PiRUenQkMkRdgml75IIxjt4p7cnuH3mqTQ+ 2CKkjjtOtD+FOpY0pS1F6RVGfh4j0Kd33AdjFbPovCKNmhILAKMVmh7IYc49qRWA yAyn9yqDQwwnaQfi0kue1+l+mpQssTfkc3eruEbfkQNjVsNUgPnDNDA1sXLYjffv s6x+m+yR/YfeYrSm0Q6zRIL1gPF9DVwb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu219Yv81avj/zF5rn2oM yGT/lWVD5ZW6+Qkdtshcql4reeLJsixzPVnkDNMcWi0R0CeFWhC5w+WDqh3o6miX 5ITnU98XG0j/MKhqPDpgiyCnA/SQ/lT2mM/5hHMbaVOMBp+WDxdtvaLpt5+3rZPX UMuteOhp8l+/V/rL+SWMdTyCCaGsyzZ1BxnGySBrcEy/oNz77MtvEJ1o7AqkKOGL zysOmdpQBG5FsYgzh2Q16Uz/NJ5wdGmHo04HrBs4tjEvaw8mc+N8KGVzqWTyfz7K EfwpTYER6QPUyJV052daTlltEPjpbTvFBt6cFBSYeFfTFasEsFyXs2VAPy9yoaqr WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 141048 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-08 11:15:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-05 01:15:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IbKPZsG0TyCQYAwmzpmC9x9cRjoEw6xw' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Diamond Bar' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ChinaCache North America' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CCNA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn03.c3edge.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23660554457288961644581633262035170325213834027991296281542672875569814927438433269179472953938323791838623639969669688605207872133913308073080910029312661103561240759624802212422897663452197938518865871161974130580479872782076040089718110733989075120565400945136078524453018779927193334206580735382934649218497881177559436664338118730526183408943309811544661650204674067792717767673585112210908323709981750068432594346008675523965852661074932628740364135214513110268638111964176333110008699581625695816590414408446425944452622323855152858443000095748756985219797909724618470995462482417849177933524753752070231337819 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.yoox.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xmos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a0.muscache.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.muscache.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2.muscache.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3.muscache.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spdy.muscache.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn-cdn.raymondweil.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn-cdn.raymond-weil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn03.c3edge.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 25b5d96ac34c0500919257506e3c9f2aed734f69 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00570bb4d0fa85d9ca552c29122298b2b85e6f02481ceca7b0e71dcf0bf9013b7335e9f87c0e2748e8f0c9f62ff34b2e4c95867d2d98054219e53a103652ef3f3c4b65bee64d8cfd3c91bc9bf113ba859f885f2b10ed1e6d75ecdf64629a33bc41c5b4a2b3ef119f0aee758b757be0f89151e9d090c9117609a5ef9208c63b78a7b727b87de6a9343ed822a48e3b4eb43f853a9634a52d45e915467e1e23d0a777dc076315b3e8bc228d9a120b00a3159a1ec861ce3da91580c80ca7f72a83430c276907e2d24b9ed7e97e9a942cb137e47377abb846df91036356c35480f9c3343035b172d88df7efb3ac7e9bec91fd87de62b4a6d10eb34482f580f17d0d5c1b