*.gallery.gecompany.com
- General Electric Company -
Issued by Trusted Secure Certificate Authority 5
About this certificate
This digital certificate with serial number 16:63:6c:3a:12:8a:9a:7c:7b:cc:32:a4:ad:71:87:82 was issued on by Corporation Service Company.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
General Electric Company
Organization:
General Electric Company
Organization unit: Corporate
Organization unit: Enterprise SSL Wildcard
Organization unit: Corporate
Organization unit: Enterprise SSL Wildcard
Address:
3135 Easton Turnpike
Postal code: 06828
State / Province: CT
Locality: Fairfield
Country: US
Postal code: 06828
State / Province: CT
Locality: Fairfield
Country: US
Corporation Service Company
Organization:
Corporation Service Company
State / Province:
DE
Locality: Wilmington
Country: US
Locality: Wilmington
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 16:63:6c:3a:12:8a:9a:7c:7b:cc:32:a4:ad:71:87:82Serial Number (int): 29759248397472008827491858964731234178
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: e6:e3:2e:87:11:23:ed:74:21:75:5a:e2:ee:fd:a7:53:5b:f7:df:fb
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4
Fingerprint (sha1): fa:ae:e7:4b:c1:6e:5b:e9:16:86:f3:8e:b1:03:f4:9a:49:da:f4:6b
Fingerprint (sha256): 32:2a:ab:04:5d:bc:48:7c:b9:05:83:6f:a6:8e:cf:96:10:19:83:12:ac:00:01:8e:6e:90:7f:01:ff:b4:b1:dd
Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl
Check the revocation status for certificate *.gallery.gecompany.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gallery.gecompany.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gallery.gecompany.com
gallery.gecompany.com
gallery.gecompany.com
Other certificates including the domain name gecompany.com
(limited to 100 certificates)
*.ecomex.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com
Certificate
The complete raw certificate details for *.gallery.gecompany.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIQFmNsOhKKmnx7zDKkrXGHgjANBgkqhkiG9w0BAQsFADCB hjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxLzAtBgNVBAMT JlRydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSA1MB4XDTE2MDgy NDAwMDAwMFoXDTE5MDgyNDIzNTk1OVowgdgxCzAJBgNVBAYTAlVTMQ4wDAYDVQQR EwUwNjgyODELMAkGA1UECBMCQ1QxEjAQBgNVBAcTCUZhaXJmaWVsZDEdMBsGA1UE CRMUMzEzNSBFYXN0b24gVHVybnBpa2UxITAfBgNVBAoTGEdlbmVyYWwgRWxlY3Ry aWMgQ29tcGFueTESMBAGA1UECxMJQ29ycG9yYXRlMSAwHgYDVQQLExdFbnRlcnBy aXNlIFNTTCBXaWxkY2FyZDEgMB4GA1UEAwwXKi5nYWxsZXJ5LmdlY29tcGFueS5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdls006m+BZlqvgpc sosJ4aXlzTZRIKT+Ll7xf9vYzF4N6J7e+dHU27i6JIu3U8ZZ6ihfvo4xlWEksK08 fARTSeHfekz7jOD6cMzuO37kIIWrQXy43poHRSrs4F5Ycuhk6RnsaAZEE4dTqoyG HdBvqLvUkI4c2zO9LEIIsDPphK2Z2Y8xqtJ9s/lb6N38EN2AxO4fTK6cxE1OppqL iPo8EdTgP85zQx+u6Sn27u08653VY1baXjp8e8qpSY4g4Ie8/sf2hXAkfO++6RYU pnSSHgDhTQk0Gr8ux0+uT0EM3KKbEonhZIJumcKBpsZM4vt/fxY7ctvUjxOm42ji KPNhAgMBAAGjggHgMIIB3DAfBgNVHSMEGDAWgBTyu1Xu/I/P0D8UaBqVfnkOqxcw 9DAdBgNVHQ4EFgQU5uMuhxEj7XQhdVri7v2nU1v33/swDgYDVR0PAQH/BAQDAgWg MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsG A1UdIAREMEIwNgYLKwYBBAGyMQECAggwJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9j cHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgIwUAYDVR0fBEkwRzBFoEOgQYY/aHR0 cDovL2NybC51c2VydHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1 dGhvcml0eTUuY3JsMIGCBggrBgEFBQcBAQR2MHQwSwYIKwYBBQUHMAKGP2h0dHA6 Ly9jcnQudXNlcnRydXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNhdGVBdXRo b3JpdHk1LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNv bTA5BgNVHREEMjAwghcqLmdhbGxlcnkuZ2Vjb21wYW55LmNvbYIVZ2FsbGVyeS5n ZWNvbXBhbnkuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQCHeZ0Iw9acR3UFo2rees1I JGEb3Wik7Rqn6NjdcdjUMw6B0J76DxQ9hhvNJ5HpdqwU0OdpdAH+0Y/CasF7qbbJ owfH5bshazCNR899nVCTYBUatgenTj/QAaygFXTUeW82A96oliroLrec213Lw0Zk +YUzj9yhXa91Mtnh2PWito1OlYwS0JOjdrMsQk2w78h6oBZ2mmXPk8RBElRkdWdR vgAakKvPHH1vhSlQDwXakO8JDBayLGlsmHSYHLYJJhnaL32X/3BthV1pIyp3ILOP uELPdsfoy6XzsSpkVK71W7MK9u06WrNGFKE4tmvFHSZH/+bBtyCMIVrdWc8PBFxR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43ZbNNOpvgWZar4KXLKL CeGl5c02USCk/i5e8X/b2MxeDeie3vnR1Nu4uiSLt1PGWeooX76OMZVhJLCtPHwE U0nh33pM+4zg+nDM7jt+5CCFq0F8uN6aB0Uq7OBeWHLoZOkZ7GgGRBOHU6qMhh3Q b6i71JCOHNszvSxCCLAz6YStmdmPMarSfbP5W+jd/BDdgMTuH0yunMRNTqaai4j6 PBHU4D/Oc0Mfrukp9u7tPOud1WNW2l46fHvKqUmOIOCHvP7H9oVwJHzvvukWFKZ0 kh4A4U0JNBq/LsdPrk9BDNyimxKJ4WSCbpnCgabGTOL7f38WO3Lb1I8TpuNo4ijz YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 29759248397472008827491858964731234178 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06828' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fairfield' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3135 Easton Turnpike' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Electric Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL Wildcard' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gallery.gecompany.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28714458881653780874438339656488179261081320151305801935608347290512482411436877414388380378582830853196218124488646929153997197575898735957151566170764175568383927705297712086237930663953885910448914025466668453397423511415758165874538346118436042418170621983618627478823415901556966771867193411853994704094755037187458317513161791858619967120755610543002157214247508413875438477904870106934737745322312208791338618841179089350464060402968005812465875939048559919668584546053083891967678223615303903378126350593042711822801769743339860782943404989613069033769112004145200251835028169002204760234859915465524758770529 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e6e32e871123ed7421755ae2eefda7535bf7dffb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallery.gecompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.gecompany.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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