sterbcroyalbank.com

- Royal Bank of Canada -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:f8:72 was issued on by GeoTrust, Inc..

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Royal Bank of Canada

Company registration number: rtRVa/x76h3CRx4kloUJi5F3JBK2zftp
Organization: Royal Bank of Canada
State / Province: Ontario
Locality: Toronto
Country: CA

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f8:72
Serial Number (int): 194674
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 26:fb:53:fb:59:e0:54:a9:19:29:49:d4:15:83:5e:51:32:3c:20:8b
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 6b:88:a0:3f:99:39:aa:de:04:5a:b4:83:fc:f2:31:60:4d:2b:09:d7
Fingerprint (sha256): 41:a5:72:21:82:65:11:83:8e:2b:91:46:ef:54:55:a9:e6:fe:32:9d:2f:11:c5:c5:5e:3f:63:4a:04:8c:0a:ab

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate sterbcroyalbank.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sterbcroyalbank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stercapleasing.com
www.stevisainfiniterbc.com
www.steworldprotect.com
www6.steroyalbank.com
www.istrbccampus.com
www.sterbctradeserviceadvantage.com
www.steinvestor-connect.com
www.sterbcadvisorconnect.com
www.sterbcwmconnect.com
booking.stercapexpress.com
sso.sterbc.com
stealternativeassets.com
sterbcrichardsonbarr.com
wmc2.sterbc.com
www.stealternativeassets.com
www.sterbcrichardsonbarr.com
www1.stecommissiondirect.com
www5.istrbc.com
cimsurvey.sterbc.com
csimobile.sterbccm.com
istrbcexpressenligne.ca
istrbcexpressenligne.com
istrbcexpressonline.ca
istrbcexpressonline.com
pos.sterbccaribbean.com
qa-carts.sterbc.com
rbcdx-1.sterbccm.com
rbcdx-2.sterbccm.com
rbcdx-3.sterbccm.com
rbcdx-4.sterbccm.com
signin-qa.sterbc.com
synapse-in.sterbc.com
usclientview.sterbc.com
wsie0.sterbc.com
www.istrbcexpressenligne.ca
www.istrbcexpressenligne.com
www.istrbcexpressonline.ca
www.istrbcexpressonline.com
www.sterbcits.com
www6.istrbc.com
nj00ap.istrbc.com
www.sterbccommerceinternationalavantage.com
portal2010.stercapleasing.com
spxgroup2010.sterbc.com
www6.sterbc.com
ist.sterbc.com
ist.sterbcroyalbank.com
istbronze.sterbc.com
istsilver.sterbc.com
qa.sterbc.com
qa.sterbcroyalbank.com
qabronze.sterbc.com
qasilver.sterbc.com
www.steassurancesrbc.com
www.stemondialprotect.com
www.sterbc.com
www.sterbcbank.com
www.sterbcbankusa.com
www.sterbcbanqueroyale.com
www.sterbcdirectinvesting.com
www.sterbcds.com
www.sterbcdvm.com
www.sterbcdx.com
www.sterbcfinancialplanning.com
www.sterbcgam.com
www.sterbcgestiondepartrimoine.com
www.sterbcgfs.com
www.sterbcgma.com
www.sterbciassurancecollective.com
www.sterbcigroupbenefits.com
www.sterbcinsurance.com
www.sterbcphnic.com
www.sterbcplacementsendirect.com
www.sterbcrealtorinsideaccess.com
www.sterbcrecompenses.com
www.sterbcrewards.com
www.sterbcroyalbank.com
www.sterbcsfc.com
www.sterbctravelprotection.com
www.sterbcvisainfinite.com
www.sterbcwealthmanagement.com
www.sterbcwm-usa.com
www.sterbtt.com
mist2wl.sterbcroyalbank.com
mist3wl.sterbcroyalbank.com
service.steroyalbank.com
ws1.sterbc.com
sailogon.sterbc.com
saiusdirectupload.sterbc.com
mdev2wl.sterbcroyalbank.com
mdev3wl.sterbcroyalbank.com
mdev4wl.sterbcroyalbank.com
mqa2wl.sterbcroyalbank.com
mqa3wl.sterbcroyalbank.com
mqa4wl.sterbcroyalbank.com
istcassupport.sterbc.com
istusclientview.sterbc.com
saicassupport.sterbc.com
saiusclientview.sterbc.com
sterbcroyalbank.com

Other certificates including the domain name sterbcroyalbank.com

(limited to 100 certificates)
sterbc.com
sterbc.com
steroyalbank.com
rbcscqa2.sterbcroyalbank.com
sterbc.com
sterbc.com
collect.sterbcroyalbank.com
ssoqa01.sterbcroyalbank.com
sterbc.com
rdqa1.sterbcroyalbank.com
mdev2wl.sterbcroyalbank.com
mdev4wl.sterbcroyalbank.com
sterbcinsurance.com
sterbc.com
sterbc.com
mobileistcoe.sterbcroyalbank.com
istsilver.sterbcroyalbank.com
steroyalbank.com
rddev1.sterbcroyalbank.com
steroyalbank.com
dacwebist.sterbcroyalbank.com
missuser.sterbcroyalbank.com
www1.steroyalbank.com
rbcrtdes.sterbcroyalbank.com
kyvos-aws.sterbc.com
silver.rbcroyalbank.com
sterbcinsurance.com
MQA3WL.STERBCROYALBANK.COM
fire.sengsara.com
mdev4gw.sterbcroyalbank.com
sterbc.com
sterbcinsurance.com
ssoist10.sterbcroyalbank.com
sterbcinsurance.com
sterbcinsurance.com
sterbc.com
rbc-akamai-nonprod.sterbc.com
sterbc.com
sterbc.com
steroyalbank.com
sterbc.com
rbc-akamai-nonprod.sterbc.com
sterbcinsurance.com
silver.rbcroyalbank.com
mobileasm.sterbcroyalbank.com
sterbc.com
sterbcinsurance.com
sterbc.com
sterbcinsurance.com
sterbcinsurance.com
silver.rbcroyalbank.com
mdev5gw.sterbcroyalbank.com
mobiledev.sterbcroyalbank.com
sterbcroyalbank.com
rddev3.sterbcroyalbank.com
sterbc.com
www.sterbcroyalbank.com
ssoist23.sterbcroyalbank.com
mobiledev1.sterbcroyalbank.com
sterbc.com
sterbc.com
rbccmobile.sterbcroyalbank.com
dacwebqa.sterbcroyalbank.com
sso.rbc.com
steroyalbank.com
sterbcinsurance.com
sterbc.com
rddev1.sterbcroyalbank.com
ssoist11.sterbcroyalbank.com
sterbcinsurance.com
steroyalbank.com
online.royalbank.com
sterbc.com
sterbcinsurance.com
schce.sterbcroyalbank.com
sterbcroyalbank.com
mqa2wl.sterbcroyalbank.com
rbc-akamai-nonprod.sterbc.com
steroyalbank.com
steroyalbank.com
sterbcroyalbank.com
iavapp.sterbcroyalbank.com
www.istbronze.sterbcroyalbank.com
mdev2wl.sterbcroyalbank.com
sterbc.com
sterbcinsurance.com
sterbc.com
mdev4gw.sterbcroyalbank.com
rbccmobileqa1.sterbcroyalbank.com
sterbc.com
mdev4gw.sterbcroyalbank.com
mobile.sterbcroyalbank.com
sterbcinsurance.com
wwwx3.sterbcroyalbank.com
www.cardsdev.sterbcroyalbank.com
steroyalbank.com
sterbcinsurance.com
sterbc.com
sterbcinsurance.com
sterbcroyalbank.com

Certificate

The complete raw certificate details for sterbcroyalbank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOqDCCDZCgAwIBAgIDAvhyMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM
IENBMB4XDTE0MDkwNjE3MzcwMloXDTE1MDUwNzA5NTcyOFowgZkxKTAnBgNVBAUT
IHJ0UlZhL3g3NmgzQ1J4NGtsb1VKaTVGM0pCSzJ6ZnRwMQswCQYDVQQGEwJDQTEQ
MA4GA1UECBMHT250YXJpbzEQMA4GA1UEBxMHVG9yb250bzEdMBsGA1UEChMUUm95
YWwgQmFuayBvZiBDYW5hZGExHDAaBgNVBAMTE3N0ZXJiY3JveWFsYmFuay5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgbdyM0FM4INaGVanm8OEn
pnwslatbsO7Gz6w4Topb4RK7HSwZUWQpmNbDQfuwWgmmuukZ7To39cLZ/c7zDvfd
27r8joXz5qh0Gr2TuylbqmiyPwVQJ0QbPTrD9VX0U6DVQh7Wv6B/G7oAAnpTQtPn
NbGbB774uHVO1JFAcxtX2t8Iw619qM1ZllCZhUdKbkRi3IGm6/D+U2cKR1Xg68rY
GWLkg26Q2I9EZuokTc0NTm3mChJ/+mxl/4yMppJYQV+AaTDCABTPRtTtM2dykWfG
lRSuyC+T3dsBEiWHd8NB9ooPPIW2AUfEOvVID8W2f4FqkoIdCselhELtNKT7UsKD
AgMBAAGjggtPMIILSzAfBgNVHSMEGDAWgBRCeVQbYc1VKz5j1TxIV/Wf+0XOSjAO
BgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIIJ
zAYDVR0RBIIJwzCCCb+CFnd3dy5zdGVyY2FwbGVhc2luZy5jb22CGnd3dy5zdGV2
aXNhaW5maW5pdGVyYmMuY29tghd3d3cuc3Rld29ybGRwcm90ZWN0LmNvbYIVd3d3
Ni5zdGVyb3lhbGJhbmsuY29tghR3d3cuaXN0cmJjY2FtcHVzLmNvbYIjd3d3LnN0
ZXJiY3RyYWRlc2VydmljZWFkdmFudGFnZS5jb22CG3d3dy5zdGVpbnZlc3Rvci1j
b25uZWN0LmNvbYIcd3d3LnN0ZXJiY2Fkdmlzb3Jjb25uZWN0LmNvbYIXd3d3LnN0
ZXJiY3dtY29ubmVjdC5jb22CGmJvb2tpbmcuc3RlcmNhcGV4cHJlc3MuY29tgg5z
c28uc3RlcmJjLmNvbYIYc3RlYWx0ZXJuYXRpdmVhc3NldHMuY29tghhzdGVyYmNy
aWNoYXJkc29uYmFyci5jb22CD3dtYzIuc3RlcmJjLmNvbYIcd3d3LnN0ZWFsdGVy
bmF0aXZlYXNzZXRzLmNvbYIcd3d3LnN0ZXJiY3JpY2hhcmRzb25iYXJyLmNvbYIc
d3d3MS5zdGVjb21taXNzaW9uZGlyZWN0LmNvbYIPd3d3NS5pc3RyYmMuY29tghRj
aW1zdXJ2ZXkuc3RlcmJjLmNvbYIWY3NpbW9iaWxlLnN0ZXJiY2NtLmNvbYIXaXN0
cmJjZXhwcmVzc2VubGlnbmUuY2GCGGlzdHJiY2V4cHJlc3NlbmxpZ25lLmNvbYIW
aXN0cmJjZXhwcmVzc29ubGluZS5jYYIXaXN0cmJjZXhwcmVzc29ubGluZS5jb22C
F3Bvcy5zdGVyYmNjYXJpYmJlYW4uY29tghNxYS1jYXJ0cy5zdGVyYmMuY29tghRy
YmNkeC0xLnN0ZXJiY2NtLmNvbYIUcmJjZHgtMi5zdGVyYmNjbS5jb22CFHJiY2R4
LTMuc3RlcmJjY20uY29tghRyYmNkeC00LnN0ZXJiY2NtLmNvbYIUc2lnbmluLXFh
LnN0ZXJiYy5jb22CFXN5bmFwc2UtaW4uc3RlcmJjLmNvbYIXdXNjbGllbnR2aWV3
LnN0ZXJiYy5jb22CEHdzaWUwLnN0ZXJiYy5jb22CG3d3dy5pc3RyYmNleHByZXNz
ZW5saWduZS5jYYIcd3d3LmlzdHJiY2V4cHJlc3NlbmxpZ25lLmNvbYIad3d3Lmlz
dHJiY2V4cHJlc3NvbmxpbmUuY2GCG3d3dy5pc3RyYmNleHByZXNzb25saW5lLmNv
bYIRd3d3LnN0ZXJiY2l0cy5jb22CD3d3dzYuaXN0cmJjLmNvbYIRbmowMGFwLmlz
dHJiYy5jb22CK3d3dy5zdGVyYmNjb21tZXJjZWludGVybmF0aW9uYWxhdmFudGFn
ZS5jb22CHXBvcnRhbDIwMTAuc3RlcmNhcGxlYXNpbmcuY29tghdzcHhncm91cDIw
MTAuc3RlcmJjLmNvbYIPd3d3Ni5zdGVyYmMuY29tgg5pc3Quc3RlcmJjLmNvbYIX
aXN0LnN0ZXJiY3JveWFsYmFuay5jb22CFGlzdGJyb256ZS5zdGVyYmMuY29tghRp
c3RzaWx2ZXIuc3RlcmJjLmNvbYINcWEuc3RlcmJjLmNvbYIWcWEuc3RlcmJjcm95
YWxiYW5rLmNvbYITcWFicm9uemUuc3RlcmJjLmNvbYITcWFzaWx2ZXIuc3RlcmJj
LmNvbYIYd3d3LnN0ZWFzc3VyYW5jZXNyYmMuY29tghl3d3cuc3RlbW9uZGlhbHBy
b3RlY3QuY29tgg53d3cuc3RlcmJjLmNvbYISd3d3LnN0ZXJiY2JhbmsuY29tghV3
d3cuc3RlcmJjYmFua3VzYS5jb22CGnd3dy5zdGVyYmNiYW5xdWVyb3lhbGUuY29t
gh13d3cuc3RlcmJjZGlyZWN0aW52ZXN0aW5nLmNvbYIQd3d3LnN0ZXJiY2RzLmNv
bYIRd3d3LnN0ZXJiY2R2bS5jb22CEHd3dy5zdGVyYmNkeC5jb22CH3d3dy5zdGVy
YmNmaW5hbmNpYWxwbGFubmluZy5jb22CEXd3dy5zdGVyYmNnYW0uY29tgiJ3d3cu
c3RlcmJjZ2VzdGlvbmRlcGFydHJpbW9pbmUuY29tghF3d3cuc3RlcmJjZ2ZzLmNv
bYIRd3d3LnN0ZXJiY2dtYS5jb22CInd3dy5zdGVyYmNpYXNzdXJhbmNlY29sbGVj
dGl2ZS5jb22CHHd3dy5zdGVyYmNpZ3JvdXBiZW5lZml0cy5jb22CF3d3dy5zdGVy
YmNpbnN1cmFuY2UuY29tghN3d3cuc3RlcmJjcGhuaWMuY29tgiB3d3cuc3RlcmJj
cGxhY2VtZW50c2VuZGlyZWN0LmNvbYIhd3d3LnN0ZXJiY3JlYWx0b3JpbnNpZGVh
Y2Nlc3MuY29tghl3d3cuc3RlcmJjcmVjb21wZW5zZXMuY29tghV3d3cuc3RlcmJj
cmV3YXJkcy5jb22CF3d3dy5zdGVyYmNyb3lhbGJhbmsuY29tghF3d3cuc3RlcmJj
c2ZjLmNvbYIed3d3LnN0ZXJiY3RyYXZlbHByb3RlY3Rpb24uY29tghp3d3cuc3Rl
cmJjdmlzYWluZmluaXRlLmNvbYIed3d3LnN0ZXJiY3dlYWx0aG1hbmFnZW1lbnQu
Y29tghR3d3cuc3RlcmJjd20tdXNhLmNvbYIPd3d3LnN0ZXJidHQuY29tghttaXN0
MndsLnN0ZXJiY3JveWFsYmFuay5jb22CG21pc3Qzd2wuc3RlcmJjcm95YWxiYW5r
LmNvbYIYc2VydmljZS5zdGVyb3lhbGJhbmsuY29tgg53czEuc3RlcmJjLmNvbYIT
c2FpbG9nb24uc3RlcmJjLmNvbYIcc2FpdXNkaXJlY3R1cGxvYWQuc3RlcmJjLmNv
bYIbbWRldjJ3bC5zdGVyYmNyb3lhbGJhbmsuY29tghttZGV2M3dsLnN0ZXJiY3Jv
eWFsYmFuay5jb22CG21kZXY0d2wuc3RlcmJjcm95YWxiYW5rLmNvbYIabXFhMnds
LnN0ZXJiY3JveWFsYmFuay5jb22CGm1xYTN3bC5zdGVyYmNyb3lhbGJhbmsuY29t
ghptcWE0d2wuc3RlcmJjcm95YWxiYW5rLmNvbYIYaXN0Y2Fzc3VwcG9ydC5zdGVy
YmMuY29tghppc3R1c2NsaWVudHZpZXcuc3RlcmJjLmNvbYIYc2FpY2Fzc3VwcG9y
dC5zdGVyYmMuY29tghpzYWl1c2NsaWVudHZpZXcuc3RlcmJjLmNvbYITc3RlcmJj
cm95YWxiYW5rLmNvbTA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vZ3Rzc2wtY3Js
Lmdlb3RydXN0LmNvbS9jcmxzL2d0c3NsLmNybDAdBgNVHQ4EFgQUJvtT+1ngVKkZ
KUnUFYNeUTI8IIswDAYDVR0TAQH/BAIwADBvBggrBgEFBQcBAQRjMGEwKgYIKwYB
BQUHMAGGHmh0dHA6Ly9ndHNzbC1vY3NwLmdlb3RydXN0LmNvbTAzBggrBgEFBQcw
AoYnaHR0cDovL2d0c3NsLWFpYS5nZW90cnVzdC5jb20vZ3Rzc2wuY3J0MEwGA1Ud
IARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdl
b3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0GCSqGSIb3DQEBBQUAA4IBAQBC6MqJ
H97BhiKDYYjsgQz8aZAcogE6shey75TfzlKp5zgcWtJFsusjg8UcsIIxEVgkcjq/
Nma1i7Nv9bf4tg0yFasqJ2aHvDjhvDzFDwFKE3iAc3kM6IPxfiRdQakdgkMmbSVd
F3KfiBtR1lHo7UUgiP4+1uW7sI9Xv07gJSKotS9GVaMpLt5vyeu9OYgAX0iiq5Km
eqPHKAzz/Q9hjnZgagQLsgRmbqOCAln6LfFxPxL9JbEQrCVd1/Bo2EiANSdqrduL
3hTVu9s30kDms4SXkg0sSYigJBvYnjcPm9A3x/ZvIUVowSzGvU8QjFje/EyVnmnP
u6qY38WxLIs3cP7u
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG3cjNBTOCDWhlWp5vDh
J6Z8LJWrW7Duxs+sOE6KW+ESux0sGVFkKZjWw0H7sFoJprrpGe06N/XC2f3O8w73
3du6/I6F8+aodBq9k7spW6posj8FUCdEGz06w/VV9FOg1UIe1r+gfxu6AAJ6U0LT
5zWxmwe++Lh1TtSRQHMbV9rfCMOtfajNWZZQmYVHSm5EYtyBpuvw/lNnCkdV4OvK
2Bli5INukNiPRGbqJE3NDU5t5goSf/psZf+MjKaSWEFfgGkwwgAUz0bU7TNncpFn
xpUUrsgvk93bARIlh3fDQfaKDzyFtgFHxDr1SA/Ftn+BapKCHQrHpYRC7TSk+1LC
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 194674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-06 17:37:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-07 09:57:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rtRVa/x76h3CRx4kloUJi5F3JBK2zftp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal Bank of Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sterbcroyalbank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20252303531000094251117002259866069153808575668753158198859026561491201951351832009820293035108321608381503331135716244938619482352504389825682864770506797520377880301109801364681833539349997398517864899562988681687907571986923246345351842031949404255650967078855466331950920552461069205257319906277790702515936957044476067859596269712198872378937920302975220762706423726906137524229192339245589293841089063078856473073404798987646094657546194468620711177691822351270389981361473122040588165663946504796729723706160108458135085280837901780018317910664947138637429687283716065579336782925559156035819193795062214607491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2499 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stercapleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevisainfiniterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steworldprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www6.steroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istrbccampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbctradeserviceadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinvestor-connect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcadvisorconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcwmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.stercapexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stealternativeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterbcrichardsonbarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmc2.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stealternativeassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcrichardsonbarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.stecommissiondirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.istrbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimsurvey.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csimobile.sterbccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istrbcexpressenligne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istrbcexpressenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istrbcexpressonline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istrbcexpressonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.sterbccaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-carts.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbcdx-1.sterbccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbcdx-2.sterbccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbcdx-3.sterbccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbcdx-4.sterbccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin-qa.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synapse-in.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usclientview.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsie0.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istrbcexpressenligne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istrbcexpressenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istrbcexpressonline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istrbcexpressonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www6.istrbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nj00ap.istrbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbccommerceinternationalavantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal2010.stercapleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spxgroup2010.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www6.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ist.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istbronze.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istsilver.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabronze.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qasilver.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steassurancesrbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemondialprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcbankusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcbanqueroyale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcdirectinvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcdvm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcfinancialplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcgam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcgestiondepartrimoine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcgfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcgma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbciassurancecollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcigroupbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcphnic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcplacementsendirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcrealtorinsideaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcrecompenses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcsfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbctravelprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcvisainfinite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcwealthmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbcwm-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterbtt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mist2wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mist3wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.steroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws1.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailogon.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saiusdirectupload.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev2wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev3wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev4wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqa2wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqa3wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqa4wl.sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istcassupport.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istusclientview.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saicassupport.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saiusclientview.sterbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterbcroyalbank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26fb53fb59e054a9192949d415835e51323c208b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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