mail.stage.lotuslive.com

Issued by GeoTrust SSL CA

About this certificate


This digital certificate with serial number 01:d4:c9 was issued on by GeoTrust, Inc. .

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

INTERNATIONAL BUSINESS MACHINES CORPORATION

Company registration number: f/SboAWWvPnkSd8zQ2Ri1EXa9GDL9nVy
Organization: INTERNATIONAL BUSINESS MACHINES CORPORATION
State / Province: New York
Locality: Armonk
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
State / Province: New York
Locality: Armonk
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d4:c9
Serial Number (int): 120009
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 77:65:fd:a6:ba:09:75:e4:31:52:ff:a6:9c:f1:0b:3e:a1:c2:1b:eb
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): df:18:d4:7f:a4:64:c3:d5:40:e6:2d:4e:42:ac:17:76:a4:16:48:85
Fingerprint (sha256): c6:b6:59:66:f4:7c:3f:17:eb:b6:44:52:2a:5f:2f:94:7e:90:42:bf:bf:cd:84:f5:96:66:36:45:17:52:f7:2a

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for the current certificate on mail.stage.lotuslive.com
22
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.na.collabservstage.com
ftp.stage.lotuslive.com
ftp.na.collabservstage.com
mail-usw.stage.lotuslive.com
usw.mail.na.collabservstage.com
img-usw.mail.stage.lotuslive.com
img-usw.mail.na.collabservstage.com
img-usw01.mail.stage.lotuslive.com
img-usw01.mail.na.collabservstage.com
img-usw02.mail.stage.lotuslive.com
img-usw02.mail.na.collabservstage.com
img-usw03.mail.stage.lotuslive.com
img-usw03.mail.na.collabservstage.com
tlsmxroute.mail.stage.lotuslive.com
tlsmxroute.mail.na.collabservstage.com
carddav-usw.mail.stage.lotuslive.com
carddav-usw.mail.na.collabservstage.com
mxroute.mail.stage.lotuslive.com
mxroute.mail.na.collabservstage.com
mxroute-bk.mail.stage.lotuslive.com
mxroute-bk.mail.na.collabservstage.com
mail.stage.lotuslive.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIICDCCBvCgAwIBAgIDAdTJMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTEyMTExOTAyMTA1MVoXDTEzMDgxNDE2MzIzNVowgbUxKTAnBgNVBAUT IGYvU2JvQVdXdlBua1NkOHpRMlJpMUVYYTlHREw5blZ5MQswCQYDVQQGEwJVUzER MA8GA1UECBMITmV3IFlvcmsxDzANBgNVBAcTBkFybW9uazE0MDIGA1UEChMrSU5U RVJOQVRJT05BTCBCVVNJTkVTUyBNQUNISU5FUyBDT1JQT1JBVElPTjEhMB8GA1UE AxMYbWFpbC5zdGFnZS5sb3R1c2xpdmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAshrEUWeYSD3QWJ3C8V9YXoaYKoqOD00fjJ+E0jf3pfbHRrt1 TJxJeBLFKx+irK21rd77guy/HB8Va0+I0l9mWHtpE8XWWEtSTagzvZXT2ymx8JjW yFAA/0+Jbvd8LMVfrYuB5o2pen7XPMKuco41jueRKQA8HEDHieLZB+dLWF2EEB9j yfAt7G8VDLP+B+qr3KfzDJnB/Yl302tMucDafWl3twC2iFGNNTMtug2Ryi61GkP1 UrjOH7r+oqRqNsC/fOJQl/yfV3eRknhc8W84+fQLacOl911DuAInsiUF1rCScjST 6aiX3bKJvM1/ZUl+kKRskjrLrsBt8BR5IMzf7QIDAQABo4IEkzCCBI8wHwYDVR0j BBgwFoAUQnlUG2HNVSs+Y9U8SFf1n/tFzkowDgYDVR0PAQH/BAQDAgSwMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCCAxAGA1UdEQSCAwcwggMDghttYWls Lm5hLmNvbGxhYnNlcnZzdGFnZS5jb22CF2Z0cC5zdGFnZS5sb3R1c2xpdmUuY29t ghpmdHAubmEuY29sbGFic2VydnN0YWdlLmNvbYIcbWFpbC11c3cuc3RhZ2UubG90 dXNsaXZlLmNvbYIfdXN3Lm1haWwubmEuY29sbGFic2VydnN0YWdlLmNvbYIgaW1n LXVzdy5tYWlsLnN0YWdlLmxvdHVzbGl2ZS5jb22CI2ltZy11c3cubWFpbC5uYS5j b2xsYWJzZXJ2c3RhZ2UuY29tgiJpbWctdXN3MDEubWFpbC5zdGFnZS5sb3R1c2xp dmUuY29tgiVpbWctdXN3MDEubWFpbC5uYS5jb2xsYWJzZXJ2c3RhZ2UuY29tgiJp bWctdXN3MDIubWFpbC5zdGFnZS5sb3R1c2xpdmUuY29tgiVpbWctdXN3MDIubWFp bC5uYS5jb2xsYWJzZXJ2c3RhZ2UuY29tgiJpbWctdXN3MDMubWFpbC5zdGFnZS5s b3R1c2xpdmUuY29tgiVpbWctdXN3MDMubWFpbC5uYS5jb2xsYWJzZXJ2c3RhZ2Uu Y29tgiN0bHNteHJvdXRlLm1haWwuc3RhZ2UubG90dXNsaXZlLmNvbYImdGxzbXhy b3V0ZS5tYWlsLm5hLmNvbGxhYnNlcnZzdGFnZS5jb22CJGNhcmRkYXYtdXN3Lm1h aWwuc3RhZ2UubG90dXNsaXZlLmNvbYInY2FyZGRhdi11c3cubWFpbC5uYS5jb2xs YWJzZXJ2c3RhZ2UuY29tgiBteHJvdXRlLm1haWwuc3RhZ2UubG90dXNsaXZlLmNv bYIjbXhyb3V0ZS5tYWlsLm5hLmNvbGxhYnNlcnZzdGFnZS5jb22CI214cm91dGUt YmsubWFpbC5zdGFnZS5sb3R1c2xpdmUuY29tgiZteHJvdXRlLWJrLm1haWwubmEu Y29sbGFic2VydnN0YWdlLmNvbYIYbWFpbC5zdGFnZS5sb3R1c2xpdmUuY29tMD0G A1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9ndHNzbC1jcmwuZ2VvdHJ1c3QuY29tL2Ny bHMvZ3Rzc2wuY3JsMB0GA1UdDgQWBBR3Zf2mugl15DFS/6ac8Qs+ocIb6zAMBgNV HRMBAf8EAjAAMG8GCCsGAQUFBwEBBGMwYTAqBggrBgEFBQcwAYYeaHR0cDovL2d0 c3NsLW9jc3AuZ2VvdHJ1c3QuY29tMDMGCCsGAQUFBzAChidodHRwOi8vZ3Rzc2wt YWlhLmdlb3RydXN0LmNvbS9ndHNzbC5jcnQwTAYDVR0gBEUwQzBBBgpghkgBhvhF AQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291 cmNlcy9jcHMwDQYJKoZIhvcNAQEFBQADggEBAA9jtLC4lBcRj7kM8sU4vCPhzzkS CWEZ9HmUSfK7x5w/LUBCkqTqXhg8BbWsCUI9+fIPHLgrUcdGUFNxA8KLDkh1Lm4V exfCpaxEoFc67ktxq0K11JIQZfO+X3zMfq2+RUIdawgoPnF8HW8NJhf4guLoSZDZ 05zPqiYJrsTIwc/ZbAFSOC+myj/dHQjIbisNFSZFtcMN7Wqt4VaYTXQvxTqsm1V2 H5m+k361mPvwsuxiDC+hC1BE7UtT6tRH+PF97Oe4kquxeIlWRubpRziahPt69La1 qYHGHDtRWG8bnAbPo89GVY/wXLudU4Sf09WlstJ6FWOLlQ422AIT4TGeeuc= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshrEUWeYSD3QWJ3C8V9Y XoaYKoqOD00fjJ+E0jf3pfbHRrt1TJxJeBLFKx+irK21rd77guy/HB8Va0+I0l9m WHtpE8XWWEtSTagzvZXT2ymx8JjWyFAA/0+Jbvd8LMVfrYuB5o2pen7XPMKuco41 jueRKQA8HEDHieLZB+dLWF2EEB9jyfAt7G8VDLP+B+qr3KfzDJnB/Yl302tMucDa fWl3twC2iFGNNTMtug2Ryi61GkP1UrjOH7r+oqRqNsC/fOJQl/yfV3eRknhc8W84 +fQLacOl911DuAInsiUF1rCScjST6aiX3bKJvM1/ZUl+kKRskjrLrsBt8BR5IMzf 7QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 120009 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-19 02:10:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-14 16:32:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f/SboAWWvPnkSd8zQ2Ri1EXa9GDL9nVy' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Armonk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INTERNATIONAL BUSINESS MACHINES CORPORATION' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.stage.lotuslive.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22483617518085708972844378157581104773457147037294153266075081122808242654750257635621193943556665253416257597853319844820458646781501990564280740626532108280288982004124525645632003323678955380640247862755940214663328339999726687258573560444651047662575136404117077259161925418517110313490251559143113340976799012438715657263890548680450344590400250539189893559654222484077211417719602961836268522191240779415508056013308249299768223663968467835314128317700609803583242457809125688421800703172984037271614228095018551277767955519922124928123648539366235972686714985443382393325580393949417314614465914939271526801389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (775 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-usw.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usw.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw01.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw01.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw02.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw02.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw03.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-usw03.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlsmxroute.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlsmxroute.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carddav-usw.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carddav-usw.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxroute.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxroute.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxroute-bk.mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxroute-bk.mail.na.collabservstage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stage.lotuslive.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7765fda6ba0975e43152ffa69cf10b3ea1c21beb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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