www.gig1.prda.capgroup.com

Issued by GeoTrust SSL CA

About this certificate


This digital certificate with serial number 03:05:eb was issued on by GeoTrust, Inc. .

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Capital Group Companies Inc

Company registration number: HK3cUbRDaf/YwnvW9Lc8oMvUW0SZ24vZ
Organization: Capital Group Companies Inc
Organization unit: Information Security
State / Province: California
Locality: Los Angeles
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
State / Province: California
Locality: Los Angeles
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:eb
Serial Number (int): 198123
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 4e:a3:96:28:09:75:42:fd:b4:85:e3:24:49:2d:92:dc:48:12:44:83
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 12:ac:62:d8:f6:67:23:3d:a6:00:7c:1b:08:03:80:4f:08:fe:4d:a0
Fingerprint (sha256): 0d:97:52:35:cf:4a:57:19:96:c4:17:f8:d5:57:39:6e:a0:47:34:f2:c2:75:b7:75:34:59:d5:48:4b:08:1d:16

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for the current certificate on www.gig1.prda.capgroup.com
51
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

omslit.oms.prd.thecapitalgroup.com
omslit.stg.thecapitalgroup.com
omslit.oms.stg.thecapitalgroup.com
soni.sni2.stg.thecapitalgroup.com
www.cgw.p1.thecapitalgroup.com
www.p1.thecapitalgroup.com
www.afs3.s4.stg.americanfunds.com
www.afs3.stg.americanfunds.com
americanfunds.com
m.afsm.dev.americanfunds.com
m.dev.americanfunds.com
www.afw.dev.americanfunds.com
www.planadmin.rpw.stg.americanfunds.com
planadmin.stg.americanfunds.com
www.planadmin.stg.americanfunds.com
www.sponsor.rpw.stg.americanfunds.com
www.sponsor.stg.americanfunds.com
pr.retire.rpw.stg.americanfunds.com
pr.retire.stg.americanfunds.com
myretirement.retire.rpw.stg.americanfunds.com
myretirement.retire.stg.americanfunds.com
ascensus.retire.rpw.stg.americanfunds.com
ascensus.retire.stg.americanfunds.com
americanfundsretirement.retire.rpw.stg.americanfunds.com
americanfundsretirement.retire.stg.americanfunds.com
www.planadmin.rpw.prd.americanfunds.com
www.sponsor.rpw.prd.americanfunds.com
pr.retire.rpw.prd.americanfunds.com
myretirement.retire.rpw.prd.americanfunds.com
ascensus.retire.rpw.prd.americanfunds.com
americanfundsretirement.retire.rpw.prd.americanfunds.com
groupinvestments.ogi.stg.americanfunds.com
groupinvestments.stg.americanfunds.com
groupinvestments.ogi.prd.americanfunds.com
www.cgw.stg.capgroup.com
www.stg.capgroup.com
www.cgw.prd.capgroup.com
advisers.afi.stg.americanfunds.com
advisers.stg.americanfunds.com
advisers.afi.prd.americanfunds.com
www.cgw.stg.thecapitalgroup.com
www.stg.thecapitalgroup.com
www.cgw.prd.thecapitalgroup.com
www.afw.stg.americanfunds.com
www.stg.americanfunds.com
m.afsm.stg.americanfunds.com
m.stg.americanfunds.com
m.afsm.prd.americanfunds.com
www.afw.prd.americanfunds.com
www.afs2.p3.prd.americanfunds.com
www.gig1.prda.capgroup.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIMMjCCCxqgAwIBAgIDAwXrMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTE0MTEwNDAzMTc1NFoXDTE2MDEwNjE0NDEwNVowgc0xKTAnBgNVBAUT IEhLM2NVYlJEYWYvWXdudlc5TGM4b012VVcwU1oyNHZaMQswCQYDVQQGEwJVUzET MBEGA1UECBMKQ2FsaWZvcm5pYTEUMBIGA1UEBxMLTG9zIEFuZ2VsZXMxJDAiBgNV BAoTG0NhcGl0YWwgR3JvdXAgQ29tcGFuaWVzIEluYzEdMBsGA1UECxMUSW5mb3Jt YXRpb24gU2VjdXJpdHkxIzAhBgNVBAMTGnd3dy5naWcxLnByZGEuY2FwZ3JvdXAu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YdGksjMdqDQEjW9 cwqIt2/rciWjoFtCDQIxysQYb10cUa+Vc5QhP1oPjwtoso/y+SzFl/9ZQpWj5bf2 m2twgTP6PO4IOXx8DCKB9RMiCMLIUuM6YAPPQYJrgtEECSjwS72r51+IkhXbR5Sc hf4QOiTgb3Xx81v1uWVV5cgz9Afe5RpNN8xsxliwEGQaN62SSh0amfum33jsuy4+ krNR8HRie0SAV+DBNGlIEVGhydWJzlivZXQmsBYszJZBMU16s2fvMva2Z1iGP+82 wRXF24qUrdJqGtcOX9hzpoEvNlLGMb4C2glr5yPYnIaUWbS31Xlos6QR4ONAcca7 6euTZQIDAQABo4IIpTCCCKEwHwYDVR0jBBgwFoAUQnlUG2HNVSs+Y9U8SFf1n/tF zkowDgYDVR0PAQH/BAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjCCByIGA1UdEQSCBxkwggcVgiJvbXNsaXQub21zLnByZC50aGVjYXBpdGFsZ3Jv dXAuY29tgh5vbXNsaXQuc3RnLnRoZWNhcGl0YWxncm91cC5jb22CIm9tc2xpdC5v bXMuc3RnLnRoZWNhcGl0YWxncm91cC5jb22CIXNvbmkuc25pMi5zdGcudGhlY2Fw aXRhbGdyb3VwLmNvbYIed3d3LmNndy5wMS50aGVjYXBpdGFsZ3JvdXAuY29tghp3 d3cucDEudGhlY2FwaXRhbGdyb3VwLmNvbYIhd3d3LmFmczMuczQuc3RnLmFtZXJp Y2FuZnVuZHMuY29tgh53d3cuYWZzMy5zdGcuYW1lcmljYW5mdW5kcy5jb22CEWFt ZXJpY2FuZnVuZHMuY29tghxtLmFmc20uZGV2LmFtZXJpY2FuZnVuZHMuY29tghdt LmRldi5hbWVyaWNhbmZ1bmRzLmNvbYIdd3d3LmFmdy5kZXYuYW1lcmljYW5mdW5k cy5jb22CJ3d3dy5wbGFuYWRtaW4ucnB3LnN0Zy5hbWVyaWNhbmZ1bmRzLmNvbYIf cGxhbmFkbWluLnN0Zy5hbWVyaWNhbmZ1bmRzLmNvbYIjd3d3LnBsYW5hZG1pbi5z dGcuYW1lcmljYW5mdW5kcy5jb22CJXd3dy5zcG9uc29yLnJwdy5zdGcuYW1lcmlj YW5mdW5kcy5jb22CIXd3dy5zcG9uc29yLnN0Zy5hbWVyaWNhbmZ1bmRzLmNvbYIj cHIucmV0aXJlLnJwdy5zdGcuYW1lcmljYW5mdW5kcy5jb22CH3ByLnJldGlyZS5z dGcuYW1lcmljYW5mdW5kcy5jb22CLW15cmV0aXJlbWVudC5yZXRpcmUucnB3LnN0 Zy5hbWVyaWNhbmZ1bmRzLmNvbYIpbXlyZXRpcmVtZW50LnJldGlyZS5zdGcuYW1l cmljYW5mdW5kcy5jb22CKWFzY2Vuc3VzLnJldGlyZS5ycHcuc3RnLmFtZXJpY2Fu ZnVuZHMuY29tgiVhc2NlbnN1cy5yZXRpcmUuc3RnLmFtZXJpY2FuZnVuZHMuY29t gjhhbWVyaWNhbmZ1bmRzcmV0aXJlbWVudC5yZXRpcmUucnB3LnN0Zy5hbWVyaWNh bmZ1bmRzLmNvbYI0YW1lcmljYW5mdW5kc3JldGlyZW1lbnQucmV0aXJlLnN0Zy5h bWVyaWNhbmZ1bmRzLmNvbYInd3d3LnBsYW5hZG1pbi5ycHcucHJkLmFtZXJpY2Fu ZnVuZHMuY29tgiV3d3cuc3BvbnNvci5ycHcucHJkLmFtZXJpY2FuZnVuZHMuY29t giNwci5yZXRpcmUucnB3LnByZC5hbWVyaWNhbmZ1bmRzLmNvbYItbXlyZXRpcmVt ZW50LnJldGlyZS5ycHcucHJkLmFtZXJpY2FuZnVuZHMuY29tgilhc2NlbnN1cy5y ZXRpcmUucnB3LnByZC5hbWVyaWNhbmZ1bmRzLmNvbYI4YW1lcmljYW5mdW5kc3Jl dGlyZW1lbnQucmV0aXJlLnJwdy5wcmQuYW1lcmljYW5mdW5kcy5jb22CKmdyb3Vw aW52ZXN0bWVudHMub2dpLnN0Zy5hbWVyaWNhbmZ1bmRzLmNvbYImZ3JvdXBpbnZl c3RtZW50cy5zdGcuYW1lcmljYW5mdW5kcy5jb22CKmdyb3VwaW52ZXN0bWVudHMu b2dpLnByZC5hbWVyaWNhbmZ1bmRzLmNvbYIYd3d3LmNndy5zdGcuY2FwZ3JvdXAu Y29tghR3d3cuc3RnLmNhcGdyb3VwLmNvbYIYd3d3LmNndy5wcmQuY2FwZ3JvdXAu Y29tgiJhZHZpc2Vycy5hZmkuc3RnLmFtZXJpY2FuZnVuZHMuY29tgh5hZHZpc2Vy cy5zdGcuYW1lcmljYW5mdW5kcy5jb22CImFkdmlzZXJzLmFmaS5wcmQuYW1lcmlj YW5mdW5kcy5jb22CH3d3dy5jZ3cuc3RnLnRoZWNhcGl0YWxncm91cC5jb22CG3d3 dy5zdGcudGhlY2FwaXRhbGdyb3VwLmNvbYIfd3d3LmNndy5wcmQudGhlY2FwaXRh bGdyb3VwLmNvbYIdd3d3LmFmdy5zdGcuYW1lcmljYW5mdW5kcy5jb22CGXd3dy5z dGcuYW1lcmljYW5mdW5kcy5jb22CHG0uYWZzbS5zdGcuYW1lcmljYW5mdW5kcy5j b22CF20uc3RnLmFtZXJpY2FuZnVuZHMuY29tghxtLmFmc20ucHJkLmFtZXJpY2Fu ZnVuZHMuY29tgh13d3cuYWZ3LnByZC5hbWVyaWNhbmZ1bmRzLmNvbYIhd3d3LmFm czIucDMucHJkLmFtZXJpY2FuZnVuZHMuY29tghp3d3cuZ2lnMS5wcmRhLmNhcGdy b3VwLmNvbTA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vZ3Rzc2wtY3JsLmdlb3Ry dXN0LmNvbS9jcmxzL2d0c3NsLmNybDAdBgNVHQ4EFgQUTqOWKAl1Qv20heMkSS2S 3EgSRIMwDAYDVR0TAQH/BAIwADBvBggrBgEFBQcBAQRjMGEwKgYIKwYBBQUHMAGG Hmh0dHA6Ly9ndHNzbC1vY3NwLmdlb3RydXN0LmNvbTAzBggrBgEFBQcwAoYnaHR0 cDovL2d0c3NsLWFpYS5nZW90cnVzdC5jb20vZ3Rzc2wuY3J0MEwGA1UdIARFMEMw QQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0 LmNvbS9yZXNvdXJjZXMvY3BzMA0GCSqGSIb3DQEBBQUAA4IBAQBxpv9lhSlV6AcW DZhKYdVbt8mkFe5l4PVHoeJz1wxY8yzir+0vZcjkdoXYSw6GDJXQ3kHljt0oL5Vk xoeGYO+vx0Lt+2st4b3u9FwkqrgHZ0KJvpNuJkg6BNRTWMWRJHwbzg2TCh0LprQk 3CPfJw8B1ZnhyFTyFzUdYHZ56Gk/nbdY9s1ZuRZKxBL3tihUeAA+dxZwcsl7p8Ev PcV0N7IdhODMfjphSvVOngIY/kfiYn6XUyhx+k8Hw0UopiAq9yf9zI0pWHxJQl3u I9YMslj0FrH2ougyePCaeu7xMA7BHWBdjIDGEl4r/IqL//QnR4gqe1oTp6jKN7jX qyT7KBie -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YdGksjMdqDQEjW9cwqI t2/rciWjoFtCDQIxysQYb10cUa+Vc5QhP1oPjwtoso/y+SzFl/9ZQpWj5bf2m2tw gTP6PO4IOXx8DCKB9RMiCMLIUuM6YAPPQYJrgtEECSjwS72r51+IkhXbR5Schf4Q OiTgb3Xx81v1uWVV5cgz9Afe5RpNN8xsxliwEGQaN62SSh0amfum33jsuy4+krNR 8HRie0SAV+DBNGlIEVGhydWJzlivZXQmsBYszJZBMU16s2fvMva2Z1iGP+82wRXF 24qUrdJqGtcOX9hzpoEvNlLGMb4C2glr5yPYnIaUWbS31Xlos6QR4ONAcca76euT ZQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 198123 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-04 03:17:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-06 14:41:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK3cUbRDaf/YwnvW9Lc8oMvUW0SZ24vZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Angeles' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Capital Group Companies Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gig1.prda.capgroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28975278759881311014058230394617085772997839292191290970124835349325011915295082940613590772416161587279345182687521433169545663572513276187932673609774803481276661381852238072889396258888948514451944507321334154926615114837807570596815842416421991136839637007221864961034844634714912823916303604358856189054847314890700298210841403358087845776779615358433206184483814059281481122071410888154937300153020430815372096470275989408948768238600727369595048030186744132066077617370414729009587057826938170170172559649785281828553495890090393274620518461114639917308965367288616350875139842154372104175700520593681684337509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1817 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omslit.oms.prd.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omslit.stg.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omslit.oms.stg.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soni.sni2.stg.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgw.p1.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p1.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afs3.s4.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afs3.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.afsm.dev.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afw.dev.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planadmin.rpw.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planadmin.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planadmin.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sponsor.rpw.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sponsor.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.retire.rpw.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.retire.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myretirement.retire.rpw.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myretirement.retire.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensus.retire.rpw.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensus.retire.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfundsretirement.retire.rpw.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfundsretirement.retire.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planadmin.rpw.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sponsor.rpw.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.retire.rpw.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myretirement.retire.rpw.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensus.retire.rpw.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfundsretirement.retire.rpw.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupinvestments.ogi.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupinvestments.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupinvestments.ogi.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgw.stg.capgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.capgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgw.prd.capgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers.afi.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers.afi.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgw.stg.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgw.prd.thecapitalgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afw.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.afsm.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.stg.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.afsm.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afw.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afs2.p3.prd.americanfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gig1.prda.capgroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ea39628097542fdb485e324492d92dc48124483 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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