san7.premiumtv.co.uk

- Perform Media Services Ltd. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:c1:87 was issued on by GeoTrust, Inc..

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Perform Media Services Ltd.

Company registration number: x5go4ieGjQwif0HHU6-tr8zB5d2dWqld
Organization: Perform Media Services Ltd.
Organization unit: Akamai SAN SSL OV
State / Province: Middlesex
Locality: Feltham
Country: GB

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c1:87
Serial Number (int): 180615
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 9c:5a:15:d2:43:58:a1:94:ca:62:96:7d:4f:14:1e:b7:41:13:cf:36
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 7a:42:d9:0c:e2:d7:d1:f3:c3:7b:a4:5a:db:ba:59:13:de:43:76:a1
Fingerprint (sha256): 4b:25:09:07:30:50:ed:79:27:88:0a:59:22:16:cf:8e:26:cf:24:e4:a8:d4:38:e0:63:2e:49:f3:0f:81:59:64

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate san7.premiumtv.co.uk

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san7.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.performgroup.com
cms1.performgroup.com
cms2.performgroup.com
portal.performgroup.com
portal1.performgroup.com
portal2.performgroup.com
secure.afrobasket.livebasketball.tv
secure.beta2.livesport.tv
secure.beta3.livesport.tv
secure.beta4.livesport.tv
secure.beta5.livesport.tv
secure.es.sonyopentennis.tennistv.com
secure.eurobasket.livebasketball.tv
secure.euroleaguewomen.livebasketball.tv
secure.facebookapp.goal.com
secure.fibaamericaschampionship.livebasketball.tv
secure.fibaamericaschampionshipwomen.livebasketball.tv
secure.fibaasiachampionship.livebasketball.tv
secure.fibaasiachampionshipwomen.livebasketball.tv
secure.goal.com
secure.jsportslive.jp
secure.leedsunited.com
secure.ligasudamericana.livebasketball.tv
secure.live.directvsports.net
secure.nasl.livesport.tv
secure.nbl.tv
secure.nycosmos.com
secure.player.afcwimbledon.co.uk
secure.player.fleetwoodtownfc.com
secure.player.lcfc.com
secure.player.portsmouthfc.co.uk
secure.player.theshots.co.uk
secure.player.yorkcityfootballclub.co.uk
secure.sportal.co.nz
secure.sportal.com.au
secure.totalcsports.com
secure.worldarchery.livesport.tv
san7.premiumtv.co.uk

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san7.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2flTqEa901xV4ln7D68q
VkF5nVgDvyeYDQO9h/t66579A2HFsHMmmrhkW8l9qHey/71zr/TEXnecxQeFE1Mn
AYrJ40WiK2gbr1gw4HlpbyaUWaoGMwT7iezHSFqSPHing/xNNgxxwLU2GJMkKGg+
fZcMILOzm34QfC8T3CvaXDmAk1iuTjzWxQblWozm7FyPWyuHq+3zseX0Vf9IFFZ2
4jgP/LBWRmioR1JsHj1mnvd3/ekhoBHAK4Bg8zPb6DfC/CntXezdtSY6PgJRAZ4r
2+qYQ29caFbZ1svb9h35QKMe7/m3E41vB5Hg3wG3X3K9WScrlGjO/P5Y3XMnY2aY
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 180615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-19 08:40:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-22 15:33:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'x5go4ieGjQwif0HHU6-tr8zB5d2dWqld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Perform Media Services Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san7.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27516659798350383206957371523161133377892726422075165445698816803804722140551189534789012212604458233108891331224960087351793114363977738399332570159081904199830837718954228296466248990911307321465458739168458758994796169013121861538260857278301876098319072368086192913433672296113464152212858607083801953344083135977196984513440052572676693744634081287449560420492983697536343725087533275749188735810424507097133475418725100558627557080842652388308671690536977455071483335592588406161137638658337414106768102954975365917429686550714492133795546923573172615348084271219924046611242662697860412349219820832056110651581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms1.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal1.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal2.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.afrobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.beta2.livesport.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.beta3.livesport.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.beta4.livesport.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.beta5.livesport.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.sonyopentennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.eurobasket.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.euroleaguewomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.facebookapp.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaamericaschampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiachampionshipwomen.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.jsportslive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.leedsunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ligasudamericana.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.live.directvsports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.nasl.livesport.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.nbl.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.nycosmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.player.afcwimbledon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.player.fleetwoodtownfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.player.lcfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.player.portsmouthfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.player.theshots.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.player.yorkcityfootballclub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sportal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.totalcsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.worldarchery.livesport.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san7.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c5a15d24358a194ca62967d4f141eb74113cf36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049d6f1ed479dda7f34deef6b4563fffad70b2ca262c16805a8a0cbbeae3b094d491189f18fc100e7334ff38599805e3c5276a755238dedb324cf88fdbca066f67d8f1fc7ecf2b283d05255cb22567e30f5511047f9fa2df8058a5c0be73b5c79d454be9fb0db10f80f52443c9b8d61643be8b000784b0ec379cef09c91f9c0d158d62412746d0c26c400a1f6ba1e5cd5a45fc033bd10aac0e233dc299d847882a862e467bfab69f73f8caa09f977ff1d05bc5d2ccbde362fcc1f1b5e9344c1a48a23a8bd04ac64250a99a7a189db5c6d09572656cfcc48189ff095a6b4b9db0413bc43f3cd63c022a95190d2f3a1c972e63daa4b20a5a2f3124e6892ce1575fd