portail.novosst.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 15:a1:aa was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=DrYQC193jYNIXmu9enIYnVGMjqimbqT2,CN=portail.novosst.com,OU=GT93806262+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:a1:aa
Serial Number (int): 1417642
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 5c:0d:f5:ad:5c:13:27:fb:17:64:cd:2c:e3:40:9c:4d:58:7f:fd:64
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): c4:ef:a1:cb:7e:f5:a3:06:42:20:48:2e:79:3f:8e:b6:4a:16:30:d7
Fingerprint (sha256): 3b:62:22:e4:41:e6:14:53:66:6c:8f:d4:6e:51:4b:96:54:01:a4:30:b7:90:fe:82:70:6f:cc:32:cc:73:e6:79

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate portail.novosst.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portail.novosst.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portail.novosst.com

Other certificates including the domain name novosst.com

(limited to 100 certificates)
www.novosst.com
portail.novosst.com
desk-test.oniwa.co.jp
www.novosst.com
webservices.novosst.com
dc.novosst.com
www.novosst.com
hrs.novosst.com
portail2.novosst.com
novosst.com
hrs.novosst.com
www.novosst.com
support.filenorthcarolina.com
support.metaco.com
www.novosst.com
support.metaco.com
etrenovo.novosst.com
www.novosst.com
support.supergrp.com
servicedesk.cyberschooltech.net
apps.novosst.com
*.formation.novosst.com
desk-test.oniwa.co.jp
novosst-test.novosst.com
help.logicfusion.com
service.prodigitude.com
support.metaco.com
support.lewisit.org
www.novosst.com
*.essais.novosst.com
www.novosst.com
servicedesk.cyberschooltech.net
service.prodigitude.com
help.logicfusion.com
soutienit.novosst.com
portail.novosst.com
portail.novosst.com
desk-test.oniwa.co.jp
formation.novosst.com
*.essais.novosst.com
portail.novosst.com
apps.novosst.com
apps.novosst.com
service.prodigitude.com
portail.novosst.com
www.novosst.com
www.novosst.com
help.logicfusion.com
portail.novosst.com
apps.novosst.com
*.formation.novosst.com
portail2.novosst.com
portail.novosst.com
support.beepec.com
portail2.novosst.com
support.lewisit.org
appsinternes.novosst.com
www.novosst.com
dc.novosst.com
novosst.com
apps.novosst.com
portail.novosst.com
support.supergrp.com
novosst-test.novosst.com
support.metaco.com
support.metaco.com
soutienit.novosst.com
www.novosst.com
www.novosst.com
dc.novosst.com
appsinternes.novosst.com
novosst.com
soutienit.novosst.com
support.metaco.com
novosst.com
novosst-test.novosst.com
www.novosst.com
support.beepec.com
portail2.novosst.com
soutienit.novosst.com
apps.novosst.com
formation.novosst.com
support.metaco.com
support.metaco.com
support.supergrp.com
support.supergrp.com
help.adics.net
novosst.com
support.metaco.com
desk.elephantintheroom.website
novosst.com
*.formation.novosst.com
help.adics.net
rds.novosst.com
support.beepec.com
desk-test.oniwa.co.jp
gcnss-xwyc1-lidc01.novosst.com
novosst.com
gcnss-xwyc1-cidc01.novosst.com
support.beepec.com

Certificate

The complete raw certificate details for portail.novosst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIDFaGqMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTQxMDA4MTEwMDI5WhcNMTUxMDEwMjE0OTI2WjCBwjEpMCcGA1UEBRMgRHJZ
UUMxOTNqWU5JWG11OWVuSVluVkdNanFpbWJxVDIxEzARBgNVBAsTCkdUOTM4MDYy
NjIxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg
KGMpMTQxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk
U1NMKFIpMRwwGgYDVQQDExNwb3J0YWlsLm5vdm9zc3QuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLOLPpoUHsNeyuLDrhQ/yf5BBb2JnczNdhvo
e6ZfoksTLIsjoxi9KbO7PDhmh3QK1FvxRd9d0U7hCgFrdCvL6jMWsT0i5BvQ5mCw
El2ikwja5eBe0gfTUDZdmOIueNm+KAs2I4aP7Id1Q2qbDwnklELzhKmfJLBOs+6D
NzP4ZmsIdl+mSOyYk6FVEqRMpk4HlLWbC1rwYsA+9uxVmwAIB963JXqTTHxNXWtS
Ic6v0ysly1nVkupC37GKtlY41kArqJgZ+4BmpGV7bJ6/iHkxbCiAkriIOiJZzTsY
u08ffHXJKnsyLsbAiyfkYse5NxvK0oRvXjlC7XlF5g4gpM2NZQIDAQABo4IBrjCC
AaowHwYDVR0jBBgwFoAUa2k9ahhCSt2PAmU5/TUkhniRFjAwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAeBgNVHREEFzAVghNw
b3J0YWlsLm5vdm9zc3QuY29tMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9yYXBp
ZHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2NybHMvcmFwaWRzc2wuY3JsMB0GA1UdDgQW
BBRcDfWtXBMn+xdkzSzjQJxNWH/9ZDAMBgNVHRMBAf8EAjAAMHgGCCsGAQUFBwEB
BGwwajAtBggrBgEFBQcwAYYhaHR0cDovL3JhcGlkc3NsLW9jc3AuZ2VvdHJ1c3Qu
Y29tMDkGCCsGAQUFBzAChi1odHRwOi8vcmFwaWRzc2wtYWlhLmdlb3RydXN0LmNv
bS9yYXBpZHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYB
BQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwDQYJ
KoZIhvcNAQEFBQADggEBACe/LApxWSLCsVcuKRTf+4oqntLWSrx7NpAiI7C2o884
Y3c4X9ukFWnxE0CazUsmg34dW94rD+jMY6ho/HQR/XYFCjmQ2+YX2cCbbCuLrxvS
keTFUUCAgNEG0ZYsMVp2xuE1QplXhdE2WzaNIPaWNPoV7CdtI66qC/wUCXYSEdfY
HBOtlvAPR6P97XHY6bkLUij7GoNLzHkw9jL+2B8/iq2i+oXCRPGrX/aDQr+9ZVGI
6RiKFbFjoylMmuza7oaoyi09YdY497EytfC7H3c3S0Z3nlGHz7NZiFzyNw/jEJMR
Utw7S+5afUourY9XnVCoZt0mOGbbW3Ia6j4R4y6vXcE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLOLPpoUHsNeyuLDrhQ/
yf5BBb2JnczNdhvoe6ZfoksTLIsjoxi9KbO7PDhmh3QK1FvxRd9d0U7hCgFrdCvL
6jMWsT0i5BvQ5mCwEl2ikwja5eBe0gfTUDZdmOIueNm+KAs2I4aP7Id1Q2qbDwnk
lELzhKmfJLBOs+6DNzP4ZmsIdl+mSOyYk6FVEqRMpk4HlLWbC1rwYsA+9uxVmwAI
B963JXqTTHxNXWtSIc6v0ysly1nVkupC37GKtlY41kArqJgZ+4BmpGV7bJ6/iHkx
bCiAkriIOiJZzTsYu08ffHXJKnsyLsbAiyfkYse5NxvK0oRvXjlC7XlF5g4gpM2N
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1417642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-08 11:00:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-10 21:49:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DrYQC193jYNIXmu9enIYnVGMjqimbqT2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT93806262'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portail.novosst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24831244182058539664554994705599199226287308638396212784489943150988665567316152495038222426440918005270798472727548631234827597586290220759178364755580345174087777460661117004557047599879163538093342344262538298173710691467708625217296646094411585362208474300184827022644310285198230641429198517557207046552886872006495502689155923890396901193058970274178127185010399764426475935093509538224490662263482876438304072023310058923362905447470680267616373900330524329177603517338677190350552166757246814067695273082919197442300909922227471008358543677219217571590941891612792548414192189335396943017391791348349263514981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.novosst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c0df5ad5c1327fb1764cd2ce3409c4d587ffd64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027bf2c0a715922c2b1572e2914dffb8a2a9ed2d64abc7b36902223b0b6a3cf386377385fdba41569f113409acd4b26837e1d5bde2b0fe8cc63a868fc7411fd76050a3990dbe617d9c09b6c2b8baf1bd291e4c551408080d106d1962c315a76c6e13542995785d1365b368d20f69634fa15ec276d23aeaa0bfc1409761211d7d81c13ad96f00f47a3fded71d8e9b90b5228fb1a834bcc7930f632fed81f3f8aada2fa85c244f1ab5ff68342bfbd655188e9188a15b163a3294c9aecdaee86a8ca2d3d61d638f7b132b5f0bb1f77374b46779e5187cfb359885cf2370fe310931152dc3b4bee5a7d4a2ead8f579d50a866dd263866db5b721aea3e11e32eaf5dc1