mail.anoka.k12.mn.us

- ANOKA-HENNEPIN PUBLIC SCHOOL DIST. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 53:56 was issued on by GeoTrust, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

ANOKA-HENNEPIN PUBLIC SCHOOL DIST.

Company registration number: y0i1Tv3UUjUpFYXZgMUNkDSw7vF2pOmY
Organization: ANOKA-HENNEPIN PUBLIC SCHOOL DIST.
State / Province: Minnesota
Locality: Coon Rapids
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:56
Serial Number (int): 21334
Serial Number lenght: 15 bits, 2 octets

SubjectKeyId: 21:7f:6d:ea:6a:29:72:07:8f:31:2e:eb:a9:c4:8e:8d:5b:63:d3:7a
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): a9:cd:02:7c:c3:bb:4f:b7:92:69:78:07:68:ea:35:97:88:52:94:70
Fingerprint (sha256): 60:99:8d:f6:c3:e0:1d:4a:5c:d2:3d:d2:ac:9d:83:c2:b9:d4:e1:8f:62:02:1f:58:dc:b3:11:26:7c:d9:1a:86

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate mail.anoka.k12.mn.us

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.anoka.k12.mn.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.anoka.k12.mn.us
autodiscover.ah.isd11
exchange01.ah.isd11
exchange02.ah.isd11
legacy.anoka.k12.mn.us
exowa01.ah.isd11
mail.anoka.k12.mn.us

Other certificates including the domain name anoka.k12.mn.us

(limited to 100 certificates)
*.anoka.k12.mn.us
infofinderle.anoka.k12.mn.us
*.anoka.k12.mn.us
genesis.anoka.k12.mn.us
genesis.anoka.k12.mn.us
moodle.anoka.k12.mn.us
eepr.anoka.k12.mn.us
libguides.anoka.k12.mn.us
moodle.anoka.k12.mn.us
www.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
infofinderle.anoka.k12.mn.us
viewpoint.anoka.k12.mn.us
*.anoka.k12.mn.us
genesis.anoka.k12.mn.us
genesis.anoka.k12.mn.us
eepr.anoka.k12.mn.us
genesis.anoka.k12.mn.us
remote.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
*.anoka.k12.mn.us
libguides.anoka.k12.mn.us
dprs.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
ahzis.anoka.k12.mn.us
*.anoka.k12.mn.us
*.anoka.k12.mn.us
mealapplication.anoka.k12.mn.us
libguides.anoka.k12.mn.us
destiny.anoka.k12.mn.us
eepr.anoka.k12.mn.us
vpn.anoka.k12.mn.us
jss.anoka.k12.mn.us
genesis.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
jss.anoka.k12.mn.us
eepr.anoka.k12.mn.us
dprs.anoka.k12.mn.us
libguides.anoka.k12.mn.us
www.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
libguides.anoka.k12.mn.us
moodle.anoka.k12.mn.us
dprs.anoka.k12.mn.us
destiny.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
remote.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
helpdesk.anoka.k12.mn.us
dprs.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
eepr.anoka.k12.mn.us
mealapplication.anoka.k12.mn.us
videocall.ahschools.us
genesisportal.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
tpvcse.anoka.k12.mn.us
remote.anoka.k12.mn.us
libguides.anoka.k12.mn.us
mail.anoka.k12.mn.us
remote.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
libguides.anoka.k12.mn.us
helpdesk.anoka.k12.mn.us
moodle.anoka.k12.mn.us
remote.anoka.k12.mn.us
guest.anoka.k12.mn.us
genesis.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
moodle.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
remote.anoka.k12.mn.us
dprs.anoka.k12.mn.us
remote.anoka.k12.mn.us
genesis.anoka.k12.mn.us
ahzis.anoka.k12.mn.us
ahemployment.anoka.k12.mn.us
genesis.anoka.k12.mn.us
moodle.anoka.k12.mn.us
dprs.anoka.k12.mn.us
helpdesk.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
ahemployment.anoka.k12.mn.us
destiny.anoka.k12.mn.us
moodle.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
remote.anoka.k12.mn.us
ahemployment.anoka.k12.mn.us
dprs.anoka.k12.mn.us
libguides.anoka.k12.mn.us
genesis.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
genesis.anoka.k12.mn.us
jss.anoka.k12.mn.us

Certificate

The complete raw certificate details for mail.anoka.k12.mn.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgICU1YwDQYJKoZIhvcNAQEFBQAwQDELMAkGA1UEBhMCVVMx
FzAVBgNVBAoTDkdlb1RydXN0LCBJbmMuMRgwFgYDVQQDEw9HZW9UcnVzdCBTU0wg
Q0EwHhcNMTEwMTA1MDgzMzAxWhcNMTMwMTA3MDIwODE3WjCBrjEpMCcGA1UEBRMg
eTBpMVR2M1VValVwRllYWmdNVU5rRFN3N3ZGMnBPbVkxCzAJBgNVBAYTAlVTMRIw
EAYDVQQIEwlNaW5uZXNvdGExFDASBgNVBAcTC0Nvb24gUmFwaWRzMSswKQYDVQQK
EyJBTk9LQS1IRU5ORVBJTiBQVUJMSUMgU0NIT09MIERJU1QuMR0wGwYDVQQDExRt
YWlsLmFub2thLmsxMi5tbi51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKvnQjVQQ5wyhZFNLZWtUcBcaDvWX68VLjUeR3kwlew/oXqyPH5WtTVeKCnj
3Am9BlJS197cGYDj6mx4PnwCgNTjYeSHTuxKN1WQo5BOrQJu05B8Nf3RJsCojUPM
URUJ48gBlxo75m1mqfVQnB+vXfeJdGFUDWsqYkS+tnt6ZiHoFPwh2eyiu8ptoV+H
IfQqhgn54vvgbAPKZzIzjVipMMb0Xcrt73jkuzEFtL4AGiZe74w/hxvLQDehqh6r
u9hVojNOSM4azCO+RWPsSRDRm4FPzLEPyRaCWNlZIOw6G+VcFxOpQfAbPyDad46k
63/WPg4iiMeytU1MJ3z4L1PK1oUCAwEAAaOCAbIwggGuMB8GA1UdIwQYMBaAFEJ5
VBthzVUrPmPVPEhX9Z/7Rc5KMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwgaoGA1UdEQSBojCBn4IcYXV0b2Rpc2NvdmVyLmFu
b2thLmsxMi5tbi51c4IVYXV0b2Rpc2NvdmVyLmFoLmlzZDExghNleGNoYW5nZTAx
LmFoLmlzZDExghNleGNoYW5nZTAyLmFoLmlzZDExghZsZWdhY3kuYW5va2EuazEy
Lm1uLnVzghBleG93YTAxLmFoLmlzZDExghRtYWlsLmFub2thLmsxMi5tbi51czA9
BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vZ3Rzc2wtY3JsLmdlb3RydXN0LmNvbS9j
cmxzL2d0c3NsLmNybDAdBgNVHQ4EFgQUIX9t6mopcgePMS7rqcSOjVtj03owDAYD
VR0TAQH/BAIwADBDBggrBgEFBQcBAQQ3MDUwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9n
dHNzbC1haWEuZ2VvdHJ1c3QuY29tL2d0c3NsLmNydDANBgkqhkiG9w0BAQUFAAOC
AQEARqqGnPKfEukZ2S/0qPt4GjnSMBUk/sHLpu4D3pSzDb+uNvJVIzkLfMtaei4J
L6qE2qiP1Jz+LDNhgO3MWMXFcEnIYTdjqbeORK/fWJzbl9SCXJ8lnHyTRN8DL5Do
+kkks2wvKZsyWGvBEsxlr9L/tPBCZpE1of597AP0ZAr7JQInPfMYuVU5bDQfMCBO
EyVZ/EpbTvFcL5/sXBJ6rc4qkmDV/Bpdf4yWvYAHo8jWA4Ef56EEJdxWpAjr1qpv
wIQ7ltbFQO/G7bKvImMG6xTErz63QZCnM8qck1FmGY+HPj/SCOmfvKgVXd2y3QWv
J2N9Gm6TMZCudkmhw0OlJUOFnw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+dCNVBDnDKFkU0tla1R
wFxoO9ZfrxUuNR5HeTCV7D+herI8fla1NV4oKePcCb0GUlLX3twZgOPqbHg+fAKA
1ONh5IdO7Eo3VZCjkE6tAm7TkHw1/dEmwKiNQ8xRFQnjyAGXGjvmbWap9VCcH69d
94l0YVQNaypiRL62e3pmIegU/CHZ7KK7ym2hX4ch9CqGCfni++BsA8pnMjONWKkw
xvRdyu3veOS7MQW0vgAaJl7vjD+HG8tAN6GqHqu72FWiM05IzhrMI75FY+xJENGb
gU/MsQ/JFoJY2Vkg7Dob5VwXE6lB8Bs/INp3jqTrf9Y+DiKIx7K1TUwnfPgvU8rW
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-01-05 08:33:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-07 02:08:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'y0i1Tv3UUjUpFYXZgMUNkDSw7vF2pOmY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coon Rapids'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANOKA-HENNEPIN PUBLIC SCHOOL DIST.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.anoka.k12.mn.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21700788027926537347149210776159210507495495460160967012719464354366193834355562260760499258694638440415776477689578030243758898697821631036540073674103908954800489758269884406480442025707145993512790978461235680078487802892770067973329229786244058558733997276008122611246665710367092255099160502290968105121459457208585085865477391453501555597382549306146956955374646710881293790063036529901583774078482013793790388254810758664660520938300768784000904594946780413608531156985128956879658265103568532233555535737598028039297813218911955914993384512459491715952783709893585426526318918819458103532558001347641490462341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.anoka.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ah.isd11'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange01.ah.isd11'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange02.ah.isd11'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.anoka.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exowa01.ah.isd11'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.anoka.k12.mn.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							217f6dea6a2972078f312eeba9c48e8d5b63d37a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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