CHWS3227.geico.net

- GEICO -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:18:e7:f4:4c:f9:39:a6:4e:c0:b8:84:f5:19:ca:6e:25:45:10 was issued on by Trustwave Holdings, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GEICO

Organization: GEICO
State / Province: Maryland
Locality: Chevy Chase
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:18:e7:f4:4c:f9:39:a6:4e:c0:b8:84:f5:19:ca:6e:25:45:10
Serial Number (int): 158274841210135764929739450750397337791972624
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 06:f4:12:92:12:94:3c:2f:9c:d8:40:d4:4d:92:8a:cc:58:35:5a:6c
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): d3:4a:f7:22:d6:28:be:00:32:1b:88:cb:fa:3b:69:c4:bc:cc:48:31
Fingerprint (sha256): 34:08:36:55:8d:b5:34:5d:38:d1:73:cd:4b:e4:85:25:15:00:35:f4:3c:d7:71:bd:be:06:94:69:b5:17:b8:a3

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate CHWS3227.geico.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CHWS3227.geico.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

CHWS3227.geico.net
fredmail2016.geico.net
plazamail2016.geico.net
mail.geico.com
autodiscover.geico.com
mailint.geico.net

Other certificates including the domain name geico.net

(limited to 100 certificates)
Plazamail2016.geico.net
frws2682.geico.net
FRWS7845.geico.net
FredMail2016.geico.net
telpdchvg01.anc.geico.net
CHWS7104.geico.net
CHWS7103.geico.net
phrpd6slb11.geico.net
CHWS7102.geico.net
FredMail2016.geico.net
CHWS7102.geico.net
telpdchvg02.anc.geico.net
CHWS7102.geico.net
CHWS7104.geico.net
cavemail.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
FRWS4732.geico.net
Plazamail2016.geico.net
FRWS4731.geico.net
CHWS7103.geico.net
telexabvg01.anc.geico.com
FRUA9173.geico.net
gfs.private.geico.com
FRWS4732.geico.net
Plazamail2016.geico.net
CHWS3227.geico.net
Plazamail2016.geico.net
gfsnp.private.geico.com
FredMail2016.geico.net
FredMail2016.geico.net
FredMail2016.geico.net
FRWS7845.geico.net
CHWS3227.geico.net
rdspd1chweb01.geico.net
gfs.private.geico.com
FRWS7847.geico.net
FRWS4731.geico.net
mail.geico.com
CHWS7103.geico.net
telpddavg02.anc.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
telpdabvg01.anc.geico.net
FRUA9171.geico.net
FRWS4731.geico.net
FRWS7847.geico.net
FRWS7845.geico.net
FRWS7846.geico.net
packageregistry-np.geico.net
FredMail2016.geico.net
mail.geico.com
mail.geico.com
FRWS7845.geico.net
FRUA9171.geico.net
CHWS7102.geico.net
CHWS3230.geico.net
voltage-pp-0000.private2.geicoddc.net
gfsnp.private.geico.com
CHWS7103.geico.net
CHWS7103.geico.net
FRWS7847.geico.net
telpddavg01.anc.geico.net
PLUA9175.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
Plazamail2016.geico.net
logoncop.geico.net
FredMail2016.geico.net
PLUA9172.geico.net
telpdabvg02.anc.geico.net
*.ise.geico.net
CHWS7104.geico.net
gfs.private.geico.com
FRWS7846.geico.net
FredMail2016.geico.net
*.ise.geico.net
kashmail.geico.net
telexabvg01.anc.geico.com
gfs.private.geico.com
FRWS4733.geico.net
FRWS7846.geico.net
telexabvg01.anc.geico.com
telpddavg01.anc.geico.net
FRUA9171.geico.net
FRWS7845.geico.net
telexabvg02.anc.geico.com
PLUA9176.geico.net
*.ise.geico.net
telpddavg01.anc.geico.net
telpddavg02.anc.geico.net
FRWS7846.geico.net
Plazamail2016.geico.net
FRWS7845.geico.net
*.ise.geico.net
FRWS7847.geico.net
CHWS7104.geico.net
gfsnp.private.geico.com

Certificate

The complete raw certificate details for CHWS3227.geico.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgITBxjn9Ez5OaZOwLiE9RnKbiVFEDANBgkqhkiG9w0BAQsF
ADCBhjEvMC0GA1UEAxMmVHJ1c3R3YXZlIE9WIFNIQTI1NiBQcmUtQ2VydGlmaWNh
dGUgQ0ExITAfBgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjEQMA4GA1UE
BxMHQ2hpY2FnbzERMA8GA1UECBMISWxsaW5vaXMxCzAJBgNVBAYTAlVTMB4XDTIw
MDIyNjE0MjAxMloXDTIyMDIyNTIwMjAxMlowYzEbMBkGA1UEAxMSQ0hXUzMyMjcu
Z2VpY28ubmV0MQ4wDAYDVQQKEwVHRUlDTzEUMBIGA1UEBxMLQ2hldnkgQ2hhc2Ux
ETAPBgNVBAgTCE1hcnlsYW5kMQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAMDbD03S14ek+X6MEqph0f4UY8lywwLLWvDdgmdG5gVL
EMy9PDRM/a9oWRkcRgeSsNIsCMGNVi2CQVDrRkKG+TTW8UCFefVjHSFIPtyMBBdG
XwQxThJaubwgZcEsnU794Tl9gFN9L8FDUPkq/eXjN84fnHGe0tw9bUiQjjqJcIMm
IgFG+iZwISvgGsonSU3gkC5sduDe0fD8rtua22bZNE9ypSndCHT1yargb3S4SLJu
IRXJkEVHMt7bF18H8yhf1ol2oiZaGL7qu8W4XCTx4EI99nbN7OWcXZLPJzndgzkf
XnNQEAXu8omewQqH/zmoUDbg6QEO6Xpl5EFEsJXKqF0CAwEAAaOCAhAwggIMMAwG
A1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMC
BggrBgEFBQcDATAdBgNVHQ4EFgQUBvQSkhKUPC+c2EDUTZKKzFg1WmwwHwYDVR0j
BBgwFoAUwM5MsAZIIQtN9KWs92v3ut1OBE8wPwYDVR0gBDgwNjA0BgZngQwBAgIw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly9zc2wudHJ1c3R3YXZlLmNvbS9DQTCBiwYD
VR0RBIGDMIGAghJDSFdTMzIyNy5nZWljby5uZXSCFmZyZWRtYWlsMjAxNi5nZWlj
by5uZXSCF3BsYXphbWFpbDIwMTYuZ2VpY28ubmV0gg5tYWlsLmdlaWNvLmNvbYIW
YXV0b2Rpc2NvdmVyLmdlaWNvLmNvbYIRbWFpbGludC5nZWljby5uZXQwNgYDVR0f
BC8wLTAroCmgJ4YlaHR0cDovL2NybC50cnVzdHdhdmUuY29tL09WQ0EyX0wxLmNy
bDBxBggrBgEFBQcBAQRlMGMwJgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRydXN0
d2F2ZS5jb20vMDkGCCsGAQUFBzAChi1odHRwOi8vc3NsLnRydXN0d2F2ZS5jb20v
aXNzdWVycy9PVkNBMl9MMS5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBAA8FkJMtdfouccxlBm36ohBfMec4J2dbIRt1nmR0XYzukyZa
VjS6Mfb6glqwHeaZg4NH5Nce4zlo0hWb1M++9nKgy96fiMIDRr9znkdVwuvy6fAT
ASE/oYPmyscUOMhFpkZJ5JSkUfQKcxPTbffiM3JVzxQW1SImwM7WJqWE3OeB3CYP
Sl2PM2Rf95hl5xXn/eZfhNlY5uE5Wtyj0+CLfrPAerXZ4uuKnnUB/JieKqm8l0Js
pEa+WXXgXeByJnAhfXQYLsy1hckqo1t18RFP9INKoTk66DdG2M8XUGpf8Guz5BWh
obfZ263sz86msbxTQyqSSlii1wCZl5edcBxymNk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNsPTdLXh6T5fowSqmHR
/hRjyXLDAsta8N2CZ0bmBUsQzL08NEz9r2hZGRxGB5Kw0iwIwY1WLYJBUOtGQob5
NNbxQIV59WMdIUg+3IwEF0ZfBDFOElq5vCBlwSydTv3hOX2AU30vwUNQ+Sr95eM3
zh+ccZ7S3D1tSJCOOolwgyYiAUb6JnAhK+AayidJTeCQLmx24N7R8Pyu25rbZtk0
T3KlKd0IdPXJquBvdLhIsm4hFcmQRUcy3tsXXwfzKF/WiXaiJloYvuq7xbhcJPHg
Qj32ds3s5Zxdks8nOd2DOR9ec1AQBe7yiZ7BCof/OahQNuDpAQ7pemXkQUSwlcqo
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158274841210135764929739450750397337791972624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 14:20:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-25 20:20:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHWS3227.geico.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEICO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chevy Chase'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24345776957664768960094012571455638942861128837353173804055478124068373608904897285626253182742596641034236408981165125639639016874021460710238036249188549805038804945728102191608827721526332114658206014310255768486774871100825899352992306656210390626813247863467695321005578376037588539231168533434679811389733540032817235167044014490995087032439677998317930936946001774032779851532032294204102637915207484129253049285042688422856556061588584469631003454538195583934371093868191971713160213716038586838332415846081343194122841539613861864060179698250307211451860063295561142643057627531092757741187769979981569632349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06f4129212943c2f9cd840d44d928acc58355a6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CHWS3227.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredmail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazamail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailint.geico.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f0590932d75fa2e71cc65066dfaa2105f31e73827675b211b759e64745d8cee93265a5634ba31f6fa825ab01de699838347e4d71ee33968d2159bd4cfbef672a0cbde9f88c20346bf739e4755c2ebf2e9f01301213fa183e6cac71438c845a64649e494a451f40a7313d36df7e2337255cf1416d52226c0ced626a584dce781dc260f4a5d8f33645ff79865e715e7fde65f84d958e6e1395adca3d3e08b7eb3c07ab5d9e2eb8a9e7501fc989e2aa9bc97426ca446be5975e05de0722670217d74182eccb585c92aa35b75f1114ff4834aa1393ae83746d8cf17506a5ff06bb3e415a1a1b7d9dbadeccfcea6b1bc53432a924a58a2d7009997979d701c7298d9