*.aaps.org
Issued by RapidSSL SHA256 CA - G3
About this certificate
This digital certificate with serial number 03:85:58 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.aaps.org,OU=GT68051951+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:85:58Serial Number (int): 230744
Serial Number lenght: 18 bits, 3 octets
SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59
Fingerprint (sha1): a5:68:3e:5d:c9:0d:00:31:ff:38:01:b9:df:50:8c:43:55:dc:b7:54
Fingerprint (sha256): 42:8d:76:f8:0f:22:fa:a4:ab:7c:5e:54:90:14:fe:fb:f6:09:21:13:99:d2:b6:9b:57:59:e1:7b:dd:e2:b9:eb
Issuing Certificate URL: http://gv.symcb.com/gv.crt
Revocation information
OCSP Server: http://gv.symcd.comCRL Distribution Point: http://gv.symcb.com/gv.crl
Check the revocation status for certificate *.aaps.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.aaps.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aaps.org
aaps.org
aaps.org
Other certificates including the domain name aaps.org
(limited to 100 certificates)
community.aaps.org
banking-business-review.com
161511-web1.vilcek.org
careerfair.aaps.org
imissql.aaps.org
careers.aaps.org
tls.automattic.com
banking-business-review.com
community.aaps.org
community.aaps.org
161511-web1.vilcek.org
161511-web1.vilcek.org
community.aaps.org
161511-web1.vilcek.org
careerfair.aaps.org
brassunion.com
careers.aaps.org
161511-web1.vilcek.org
community.aaps.org
careerfair.aaps.org
160.167.tmcapital.com
www.aaps.org
buyersguide.aaps.org
afscme57.org
160.167.tmcapital.com
banking-business-review.com
161511-web1.vilcek.org
banking-business-review.com
www.aaps.org
www.aaps.org
members.aaps.org
imis20.aaps.org
alldata.com
tls.automattic.com
banking-business-review.com
banking-business-review.com
buyersguide.aaps.org
161511-web1.vilcek.org
2.www.upenn.edu
community.aaps.org
alldata.com
careerfair.aaps.org
www.aaps.org
www.aaps.org
www.aaps.org
eduhup.com
161511-web1.vilcek.org
www.aaps.org
eduhup.com
community.aaps.org
banking-business-review.com
community.aaps.org
banking-business-review.com
service.aaps.org
aaps.org
161511-web1.vilcek.org
banking-business-review.com
careerfair.aaps.org
www.aaps.org
161511-web1.vilcek.org
community.aaps.org
tls.automattic.com
tls.automattic.com
careerfair.aaps.org
alldata.com
161511-web1.vilcek.org
banking-business-review.com
dev.secure.aaps.org
community.aaps.org
*.aaps.org
afscme57.org
161511-web1.vilcek.org
community.aaps.org
aaps.org
alldata.com
160.167.tmcapital.com
aandetietheknot.com
2.www.upenn.edu
banking-business-review.com
banking-business-review.com
members.aaps.org
careers.aaps.org
alldata.com
tls.automattic.com
banking-business-review.com
alldata.com
careers.aaps.org
161511-web1.vilcek.org
imis.aaps.org
*.aaps.org
www.aaps.org
alldata.com
161511-web1.vilcek.org
community.aaps.org
2.www.upenn.edu
161511-web1.vilcek.org
boxoffice.mcny.org
banking-business-review.com
banking-business-review.com
tls.automattic.com
banking-business-review.com
161511-web1.vilcek.org
careerfair.aaps.org
imissql.aaps.org
careers.aaps.org
tls.automattic.com
banking-business-review.com
community.aaps.org
community.aaps.org
161511-web1.vilcek.org
161511-web1.vilcek.org
community.aaps.org
161511-web1.vilcek.org
careerfair.aaps.org
brassunion.com
careers.aaps.org
161511-web1.vilcek.org
community.aaps.org
careerfair.aaps.org
160.167.tmcapital.com
www.aaps.org
buyersguide.aaps.org
afscme57.org
160.167.tmcapital.com
banking-business-review.com
161511-web1.vilcek.org
banking-business-review.com
www.aaps.org
www.aaps.org
members.aaps.org
imis20.aaps.org
alldata.com
tls.automattic.com
banking-business-review.com
banking-business-review.com
buyersguide.aaps.org
161511-web1.vilcek.org
2.www.upenn.edu
community.aaps.org
alldata.com
careerfair.aaps.org
www.aaps.org
www.aaps.org
www.aaps.org
eduhup.com
161511-web1.vilcek.org
www.aaps.org
eduhup.com
community.aaps.org
banking-business-review.com
community.aaps.org
banking-business-review.com
service.aaps.org
aaps.org
161511-web1.vilcek.org
banking-business-review.com
careerfair.aaps.org
www.aaps.org
161511-web1.vilcek.org
community.aaps.org
tls.automattic.com
tls.automattic.com
careerfair.aaps.org
alldata.com
161511-web1.vilcek.org
banking-business-review.com
dev.secure.aaps.org
community.aaps.org
*.aaps.org
afscme57.org
161511-web1.vilcek.org
community.aaps.org
aaps.org
alldata.com
160.167.tmcapital.com
aandetietheknot.com
2.www.upenn.edu
banking-business-review.com
banking-business-review.com
members.aaps.org
careers.aaps.org
alldata.com
tls.automattic.com
banking-business-review.com
alldata.com
careers.aaps.org
161511-web1.vilcek.org
imis.aaps.org
*.aaps.org
www.aaps.org
alldata.com
161511-web1.vilcek.org
community.aaps.org
2.www.upenn.edu
161511-web1.vilcek.org
boxoffice.mcny.org
banking-business-review.com
banking-business-review.com
tls.automattic.com
Certificate
The complete raw certificate details for *.aaps.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEoTCCA4mgAwIBAgIDA4VYMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdSYXBpZFNTTCBTSEEy NTYgQ0EgLSBHMzAeFw0xNTA0MDcwNDMzNTNaFw0xODA1MDgxNjEzMThaMIGOMRMw EQYDVQQLEwpHVDY4MDUxOTUxMTEwLwYDVQQLEyhTZWUgd3d3LnJhcGlkc3NsLmNv bS9yZXNvdXJjZXMvY3BzIChjKTE1MS8wLQYDVQQLEyZEb21haW4gQ29udHJvbCBW YWxpZGF0ZWQgLSBSYXBpZFNTTChSKTETMBEGA1UEAwwKKi5hYXBzLm9yZzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPTrt6hUpgI2mG8qJPaLpk1+CyfV XxuTZ9m7swk2Lp4+eJBr/EDywXFUGrZJ9cBR83daK/xZp1PvMbHyN3kKo2h0rczU TYfdyBjpkW3G61d4n4lmgrB18+lg0/kdaAOVLXPpnyb1EtBMUTElT53dLICm6g1o ICIbkO81oux3XHz6LLruqEnSzt7eNouLf+LLVu5rAphfZwBGW3cOwEzKPDea3TvD H1CA7PGV9vqsNh36Vuo4glQ1l5L3yG75QfGtY0bQZfeeZCxnvHzdBMuLLjxjIe3M /0W6MS+kvnAh7ipcHjfPbgJmuqSsiZ+zgWVhR4kys3lcV6pFtBsL0vht3KMCAwEA AaOCAUwwggFIMB8GA1UdIwQYMBaAFMOc8/zTRgg0u85Gf6B8W/PiCMtZMFcGCCsG AQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2d2LnN5bWNkLmNvbTAmBggr BgEFBQcwAoYaaHR0cDovL2d2LnN5bWNiLmNvbS9ndi5jcnQwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHREEGDAWggoq LmFhcHMub3JngghhYXBzLm9yZzArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Yu c3ltY2IuY29tL2d2LmNybDAMBgNVHRMBAf8EAjAAMEEGA1UdIAQ6MDgwNgYGZ4EM AQIBMCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdh bDANBgkqhkiG9w0BAQsFAAOCAQEAlM72etkbRtwxanxFaV2VPVULxxSMML+PRL9A mDxI5tiuuA7HBdf146sSIPBmKZ2+JzMFfVZXoZeuZhmt7+2qJx9l0Ukm1oPEacME Azilx2mJ/Bn5xN/3hOpe0Rfz1Iu/54PIK+95OW3rntLIAXl7U47K5c9vv85IGbJ1 V9V8/WyeERZoqdtO4xXkDRh1zEHqb/4PDzz2a0AEuz0Uy0BZSsiS8WcSv+PimF40 6x0UcdlpLEqEISyijgpPpHqRxqS8rHAlW9e6YEbZyB9oKAZCs2rDWLND+7M6UO5W WAmFG7anS4bhnQX5QyHG9aEICH/miAq7G2NF11Dznjt4s5HPjQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ou3qFSmAjaYbyok9oum TX4LJ9VfG5Nn2buzCTYunj54kGv8QPLBcVQatkn1wFHzd1or/FmnU+8xsfI3eQqj aHStzNRNh93IGOmRbcbrV3ifiWaCsHXz6WDT+R1oA5Utc+mfJvUS0ExRMSVPnd0s gKbqDWggIhuQ7zWi7HdcfPosuu6oSdLO3t42i4t/4stW7msCmF9nAEZbdw7ATMo8 N5rdO8MfUIDs8ZX2+qw2HfpW6jiCVDWXkvfIbvlB8a1jRtBl955kLGe8fN0Ey4su PGMh7cz/RboxL6S+cCHuKlweN89uAma6pKyJn7OBZWFHiTKzeVxXqkW0GwvS+G3c owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 230744 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-07 04:33:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 16:13:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT68051951' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aaps.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30918382999906598681135786610146123347581330949082109322181707448778601735000128736905969276876171272413326595560773573831314242293153464469577990413104383848264645259916513945165437147809303410393434798315774246042383793404916830638474557433641665510588758363277910121147577821635122517695421314963741465856163429015357907044626223910927320411329958659302342338812510729402583198869359212459486889033119460055596249181677927733930389431092565648833901408146041198454781852102738444560599351519760456485777156206847498127350830796641313557624765273308248693763092752160053202251463085759210616541859216547515254824099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaps.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaps.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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