view.baptisthealthsystem.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 09:7f:ac was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=zITzzKuLkgXsGgIBXRYLv6r8HabOC9Su,CN=view.baptisthealthsystem.com,OU=GT19516210+OU=See www.rapidssl.com/resources/cps (c)12+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:7f:ac
Serial Number (int): 622508
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 0f:f4:ac:b6:44:44:5e:3a:1a:ae:33:20:e5:e1:ae:a3:90:f2:2d:22
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): d1:77:bf:50:49:85:ce:d3:32:a5:ad:f3:7f:fe:41:a3:75:19:f1:03
Fingerprint (sha256): 31:e2:97:66:db:5b:a1:99:62:7a:6e:2d:53:37:37:cf:9f:89:c6:4f:2e:97:97:bc:96:d7:ee:f0:f8:24:56:26

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate view.baptisthealthsystem.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for view.baptisthealthsystem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

view.baptisthealthsystem.com

Other certificates including the domain name baptisthealthsystem.com

(limited to 100 certificates)
digital.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
providers.baptisthealthsystem.com
tenethealth.com
digital.baptisthealthsystem.com
tenethealth.com
digital.baptisthealthsystem.com
*.baptisthealthsystem.com
tenethealth.com
tenethealth.com
vpn.baptisthealthsystem.com
tenethealth.com
tenethealth.com
view.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
tenethealth.com
bhsrltst.baptisthealthsystem.com
webmail.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
tenethealth.com
webmail.baptisthealthsystem.com
tenethealth.com
digital.baptisthealthsystem.com
cpacs.baptisthealthsystem.com
webmail.baptisthealthsystem.com
info.baptisthealthsystem.com
tenethealth.com
*.baptisthealthsystem.com
tenethealth.com
sni.cloudflaressl.com
digital.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
vpn.baptisthealthsystem.com
tenethealth.com
webmail.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
digital.baptisthealthsystem.com
tenethealth.com
bhsrl.baptisthealthsystem.com
satxmusectx1.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
webmail.baptisthealthsystem.com
webmail.baptisthealthsystem.com
tenethealth.com
GWMAIL.BAPTISTHEALTHSYSTEM.COM
tenethealth.com
tenethealth.com
tenethealth.com
tenethealth.com
*.baptisthealthsystem.com
doctorsearch.baptisthealthsystem.com
tenethealth.com
bhspacs.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
bhsrl.baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
tenethealth.com
*.baptisthealthsystem.com
tenethealth.com
3drecon.baptisthealthsystem.com
vpn.baptisthealthsystem.com
www.baptisthealthsystem.com
ahpsa.baptisthealthsystem.com
tenethealth.com
3drecon.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
info.baptisthealthsystem.com
digital.baptisthealthsystem.com
webmail.baptisthealthsystem.com
ahpsa.baptisthealthsystem.com
sni.cloudflaressl.com
cpacs.baptisthealthsystem.com
digital.baptisthealthsystem.com
www.baptisthealthsystem.com
webmail.baptisthealthsystem.com
baptisthealthsystem.com
tenethealth.com
tenethealth.com
tenethealth.com
www.baptisthealthsystem.com
pacs.baptisthealthsystem.com
tenethealth.com
www.baptisthealthsystem.com
cpacs.baptisthealthsystem.com
bhsrl.baptisthealthsystem.com
airstrip.baptisthealthsystem.com
oblink.baptisthealthsystem.com

Certificate

The complete raw certificate details for view.baptisthealthsystem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIDCX+sMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTIxMjAzMDQ1MTE2WhcNMTMxMjA2MTUxMzU1WjCByzEpMCcGA1UEBRMgeklU
enpLdUxrZ1hzR2dJQlhSWUx2NnI4SGFiT0M5U3UxEzARBgNVBAsTCkdUMTk1MTYy
MTAxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg
KGMpMTIxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk
U1NMKFIpMSUwIwYDVQQDExx2aWV3LmJhcHRpc3RoZWFsdGhzeXN0ZW0uY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+ryggtCQDQmw1Ii7rN6eNmX
QU8eTSWzKMo5fveCj4t5x4OTZbAg4huecTZqJUMdzuH4mbA1ltg73aIhmfCMzp8M
fz+2O8ih7eE7Xef916iDuJ0aai29wDC2w3W/NyvpT5/q9HRW0ufWNkDSND+pj7n1
/mo5qVB88UkjHp+nkPrbR/eW8fIMhTa+Awq3rPKYyJ/Lsm+iMQ+WVUXFUJkm0aQA
eLXzMYSWZSVd0y/tcYoAA2+U3uRMGikYFfDwEoi6k5s3kFdx/1ddpg7PDxcGORF+
EoB0/Vwu+Y4t4Y5AecHI7rmVct2O/TeNicFDSFbReCt75yXlGngASIKxu8R0NwID
AQABo4IBtzCCAbMwHwYDVR0jBBgwFoAUa2k9ahhCSt2PAmU5/TUkhniRFjAwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAnBgNV
HREEIDAeghx2aWV3LmJhcHRpc3RoZWFsdGhzeXN0ZW0uY29tMEMGA1UdHwQ8MDow
OKA2oDSGMmh0dHA6Ly9yYXBpZHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvcmFw
aWRzc2wuY3JsMB0GA1UdDgQWBBQP9Ky2REReOhquMyDl4a6jkPItIjAMBgNVHRMB
Af8EAjAAMHgGCCsGAQUFBwEBBGwwajAtBggrBgEFBQcwAYYhaHR0cDovL3JhcGlk
c3NsLW9jc3AuZ2VvdHJ1c3QuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vcmFwaWRz
c2wtYWlhLmdlb3RydXN0LmNvbS9yYXBpZHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpg
hkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29t
L3Jlc291cmNlcy9jcHMwDQYJKoZIhvcNAQEFBQADggEBAB30mMGPiJZoTasH7u3t
F2Cg/ATXsAi7BoXT3/+mcTcSPVaovtjxCgvrszPgWBaaSOXgJXqw0flxbO6RkxXm
RvBMs0CoSCsBj16toq8kB3bMqEU0P4lwr/E3lg0YFA1R729vlP7xoSNsQsI3T8pb
YVUxMRK6cMIx3cYn8TRA8UwlIN3YHQqiQ0gbvqLjEWWSz0FwAQHvEPxOUr7w2YNq
99w5QcadhLRf4H+Qz9wJx7Qaqzptj761cCxWAD7GCvC4vdFhUnwVuPpGC5tF9vxG
DiL3hDoYabRWwoua5W6nwgxleG8+LcJUDJK0BcuZffwiT4fMEuya5QofpZaMhHFS
AQ0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+ryggtCQDQmw1Ii7rN6
eNmXQU8eTSWzKMo5fveCj4t5x4OTZbAg4huecTZqJUMdzuH4mbA1ltg73aIhmfCM
zp8Mfz+2O8ih7eE7Xef916iDuJ0aai29wDC2w3W/NyvpT5/q9HRW0ufWNkDSND+p
j7n1/mo5qVB88UkjHp+nkPrbR/eW8fIMhTa+Awq3rPKYyJ/Lsm+iMQ+WVUXFUJkm
0aQAeLXzMYSWZSVd0y/tcYoAA2+U3uRMGikYFfDwEoi6k5s3kFdx/1ddpg7PDxcG
ORF+EoB0/Vwu+Y4t4Y5AecHI7rmVct2O/TeNicFDSFbReCt75yXlGngASIKxu8R0
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 622508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-03 04:51:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-06 15:13:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zITzzKuLkgXsGgIBXRYLv6r8HabOC9Su'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT19516210'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'view.baptisthealthsystem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26247185958076139503012540372821903514281744260755376827018838443834484488486898135721747792722306554275027958304530176056527441659035785117178468543945973073441322119965306299003311715397785102374903758905720108510626922125731158179076536046450178822099390041107624258249183662385378482786543972046728305513806021717298629640509203046359551306959318458374087029091795849009245853782854902295314511898163258249202305896205382863199031299486977047270369792563396945468055361321361648885394815721563737043319051642486546987225993168282827013881726926781915371567312310360289400098056472540258032099124799520886518740023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.baptisthealthsystem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ff4acb644445e3a1aae3320e5e1aea390f22d22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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