mydesktop.grcc.edu

- Grand Rapids Community College -

Issued by AffirmTrust Extended Validation CA - EV1

About this certificate

This digital certificate with serial number 72:15:47:05:55:30:50:c1:00:00:00:00:58:07:ab:b3 was issued on by AffirmTrust.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grand Rapids Community College

Company registration number: 01-01-1914
Organization: Grand Rapids Community College
State / Province: Michigan
Locality: Grand Rapids
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 72:15:47:05:55:30:50:c1:00:00:00:00:58:07:ab:b3
Serial Number (int): 151642470227096948354851002358463703987
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ba:47:b8:9d:ac:d7:8d:03:e6:27:22:cc:35:13:5e:1b:49:6e:5f:3c
AuthorityKeyId: db:ef:65:37:0b:e5:47:cb:35:d1:90:1f:03:c1:bc:88:c7:a7:ea:80

Fingerprint (sha1): 25:2e:a3:19:46:a3:1f:e6:80:17:43:15:67:6b:f3:81:a1:3b:c3:e0
Fingerprint (sha256): 33:12:7a:71:42:a4:e8:a3:ac:41:bf:1e:88:6b:aa:ab:0f:5a:9b:5a:6b:da:8c:c7:d4:cd:5b:ac:d5:45:6c:37

Issuing Certificate URL: http://aia.affirmtrust.com/aftev1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftev1ca.crl

Check the revocation status for certificate mydesktop.grcc.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mydesktop.grcc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

desk.grcc.edu
mydesktop.grcc.edu
vs-csgw1.grcc.edu

Other certificates including the domain name grcc.edu

(limited to 100 certificates)
papercut.grcc.edu
5178081291534336-fe1.pantheonsite.io
hrprod.grcc.edu
5178081291534336-fe1.pantheonsite.io
5762952716091392-fe3.pantheonsite.io
pspt.grcc.edu
grccwireless.grcc.edu
SCCM.AD.GRCC.EDU
mydesktop.grcc.edu
webnow.grcc.edu
mydesktop.grcc.edu
eprint.grcc.edu
ccsurveys.grcc.edu
epupg1.grcc.edu
eprint.grcc.edu
bb.grcc.edu
bbadb1.grcc.edu
dworksmove.grcc.edu
ACS.grcc.edu
ACS.grcc.edu
webnow.grcc.edu
alertus.ad.grcc.edu
subjectguides.grcc.edu
mydesktop.grcc.edu
5178081291534336-fe1.pantheonsite.io
grccwireless.grcc.edu
imagenow.grcc.edu
lib.grcc.edu
phire.grcc.edu
ibtst.grcc.edu
Analytics.grcc.edu
selfservice.grcc.edu
dworkstst.grcc.edu
mydesktop.grcc.edu
ccsurveys.grcc.edu
bb.grcc.edu
lib.grcc.edu
pi.grcc.edu
sarsweb.grcc.edu
lib.grcc.edu
oc.grcc.edu
air.grcc.edu
lib.grcc.edu
sccmdb.ad.grcc.edu
pstools.grcc.edu
inowprodfcc.grcc.edu
csdev.grcc.edu
ndam.grcc.edu
5178081291534336-fe1.pantheonsite.io
imagenow.grcc.edu
relay.grcc.edu
grcc.edu
grcc.edu
bbtstf5.grcc.edu
pstools.grcc.edu
analytics.grcc.edu
grcc.edu
5178081291534336-fe1.pantheonsite.io
bb.grcc.edu
subjectguides.grcc.edu
*.grcc.edu
hammerhead.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
psdeves1-2017.ad.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
dworks.grcc.edu
ds.grcc.edu
*.grcc.edu
mail.grcc.edu
guac.grcc.edu
sccm.ad.grcc.edu
gwsync.grcc.edu
bb.grcc.edu
mydesktop.grcc.edu
guac.grcc.edu
ibtst.grcc.edu
dooraccess.grcc.edu
prtg.grcc.edu
grccwireless.grcc.edu
guac.grcc.edu
mydesktop.grcc.edu
sccm.ad.grcc.edu
lib.grcc.edu
*.grcc.edu
ACS.grcc.edu
alertus.ad.grcc.edu
edocstst.grcc.edu
idatahub.grcc.edu
prtg.grcc.edu
subjectguides.grcc.edu
imagenowtst.grcc.edu
Unity1.grcc.edu
lib.grcc.edu
psupges1.ad.grcc.edu
*.grcc.edu
oc.grcc.edu
pstst.grcc.edu
Unity1.grcc.edu

Certificate

The complete raw certificate details for mydesktop.grcc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrzCCBpegAwIBAgIQchVHBVUwUMEAAAAAWAerszANBgkqhkiG9w0BAQsFADCB
gzELMAkGA1UEBhMCQ0ExFDASBgNVBAoTC0FmZmlybVRydXN0MSswKQYDVQQLEyJT
ZWUgd3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MTEwLwYDVQQDEyhBZmZp
cm1UcnVzdCBFeHRlbmRlZCBWYWxpZGF0aW9uIENBIC0gRVYxMB4XDTE3MDYwMTIx
MzQ0MVoXDTE5MDYwMjIyMDQzN1owgeExCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhN
aWNoaWdhbjEVMBMGA1UEBxMMR3JhbmQgUmFwaWRzMRMwEQYLKwYBBAGCNzwCAQMT
AlVTMRkwFwYLKwYBBAGCNzwCAQITCE1pY2hpZ2FuMScwJQYDVQQKEx5HcmFuZCBS
YXBpZHMgQ29tbXVuaXR5IENvbGxlZ2UxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5p
emF0aW9uMRMwEQYDVQQFEwowMS0wMS0xOTE0MRswGQYDVQQDExJteWRlc2t0b3Au
Z3JjYy5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFb08NszuI
1LGFChcYjmsvO0Dp1GU9u9sLQGGk5IezY85e9eIOVw0nTfPI96n55ONv1FwU2KWa
zOnYNCIH3zaR5bbJMoCnoUX8cDihazTNGaSxtnAcVF5gIy4u7tJiDBLNCiY5DpSs
xxsFP32LDSb9MEPS3jzBcpWFlQEzowvlFatn2zqjEax8iYQ1gOGCS02GvqIHrpis
mdff3wrHnCxAP3BTtgFiY6EDDcsfvMLvsNa/qNsP+C0Ezrhx4/rinUPgne5sWSY1
ftoiK2xrOz2hhqJaUQPAPhimWp96cB9VqrobleIg5vBEiYpDKxA+T8EkMgZSP9LN
RFlHXMXbZkF5AgMBAAGjggO9MIIDuTA/BgNVHREEODA2gg1kZXNrLmdyY2MuZWR1
ghJteWRlc2t0b3AuZ3JjYy5lZHWCEXZzLWNzZ3cxLmdyY2MuZWR1MIIB9gYKKwYB
BAHWeQIEAgSCAeYEggHiAeAAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJ
eqj9ywAAAVxlsHVNAAAEAwBHMEUCIHYTcTpPBbEw/UyglWvdcis98amhmMZH79Uj
bwT8/cdjAiEAtrNkrbx4Zv+cLNQIrT0aDC4djwyobeq309/gxNp2kO0AdgBWFAaa
L9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAVxlsHa6AAAEAwBHMEUCIQDZ
8F+GJhtxWy+8j9MaRP1rea+opkLHDfUKIug0/tTLjgIgdhdUTCwSzYT0msENCu5U
VM/l3uob94qDV9cIrCnxDOUAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTN
tuy+zAAAAVxlsHjYAAAEAwBHMEUCIBWoEhwy1aJhc5Qaklne8zmDrjinjxOJrnqB
oPrILTSHAiEAghTJPQgV46dCGWiZTXPhRnvL2+lWmVvJMvjoK6g0I5oAdgCkuQmQ
tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVxlsHm5AAAEAwBHMEUCIFzC
lQzlXXahoiF3IV0+c0lY6ZL4biEiB5UZioL8d9WAAiEAlv5sfl6jvw8Vg0NGxOQS
hyqy8ipRJgtcn7QlYsP/Nh0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAJBgNVHRMEAjAAMGwGCCsGAQUFBwEBBGAwXjAnBggr
BgEFBQcwAYYbaHR0cDovL29jc3AuYWZmaXJtdHJ1c3QuY29tMDMGCCsGAQUFBzAC
hidodHRwOi8vYWlhLmFmZmlybXRydXN0LmNvbS9hZnRldjFjYS5jcnQwVgYDVR0g
BE8wTTBCBgorBgEEAYKPCQIBMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3LmFm
ZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MAcGBWeBDAEBMDwGA1UdHwQ1MDMwMaAv
oC2GK2h0dHA6Ly9jcmwuYWZmaXJtdHJ1c3QuY29tL2NybC9hZnRldjFjYS5jcmww
HwYDVR0jBBgwFoAU2+9lNwvlR8s10ZAfA8G8iMen6oAwHQYDVR0OBBYEFLpHuJ2s
140D5icizDUTXhtJbl88MA0GCSqGSIb3DQEBCwUAA4IBAQAiGZcng8JVRlYsj4qh
5hwzSZkaR0iQoExRPtozSTti2m4mbjmMNRHF8TVsdSawgOQXv3JKG8jpTNIxweyq
XYSgt7UUKFKadJGFv9qi+VAGgsoJoAbIvk/4kF9pwL30ZtaO8oa+G01G3yesn9ZK
CnQqDIfskefVpf9pxL4LmBRV9Wg+oSeKxEMIfAdRddMLpDdFJBZYoJM9Ii4vfuIM
grWfDemTZHMwxUNt8TSnr+IHdY3b60coaqHfnja4EXKq5ZMJHgg00CexCdtQYMbm
0eH6CHYpMjrA0nP1/teo3wKIpbk0gDZzKwsttDQgxeMgh3QBcT8IluXu2WbxWVGb
Dg5Q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW9PDbM7iNSxhQoXGI5r
LztA6dRlPbvbC0BhpOSHs2POXvXiDlcNJ03zyPep+eTjb9RcFNilmszp2DQiB982
keW2yTKAp6FF/HA4oWs0zRmksbZwHFReYCMuLu7SYgwSzQomOQ6UrMcbBT99iw0m
/TBD0t48wXKVhZUBM6ML5RWrZ9s6oxGsfImENYDhgktNhr6iB66YrJnX398Kx5ws
QD9wU7YBYmOhAw3LH7zC77DWv6jbD/gtBM64ceP64p1D4J3ubFkmNX7aIitsazs9
oYaiWlEDwD4YplqfenAfVaq6G5XiIObwRImKQysQPk/BJDIGUj/SzURZR1zF22ZB
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151642470227096948354851002358463703987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Extended Validation CA - EV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-01 21:34:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 22:04:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids Community College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01-01-1914'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mydesktop.grcc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24923834494692215909102914629156465360942758706156618061950968740149203977685739532805887658691472398693981457209620372266287733905857539295954863763938591732583934310670828595044273465531041617212419593164832183270396867215270065174883355385672536374181906750630012168361590275023249997089187047845729883529470977559513356597615110844892006962394605850779929359846298598482137145806833573767793711263417184005890237780717548087379651705673529301902195173557928250729886382910376195115404645175816308454895895531488429251406721609660667747745413031095995636329610586808064935219408244958369693634286587147819642405241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydesktop.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vs-csgw1.grcc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftev1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.1 (AffirmTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftev1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbef65370be547cb35d1901f03c1bc88c7a7ea80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba47b89dacd78d03e62722cc35135e1b496e5f3c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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