*.i-on.in
Issued by RapidSSL CA
About this certificate
This digital certificate with serial number 08:cf:2d was issued on by GeoTrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
SERIALNUMBER=2ZkXgH-X2DnvIUukYk3BtbpigqZj0kPe,CN=*.i-on.in,OU=GT95419915+OU=See www.rapidssl.com/resources/cps (c)12+OU=Domain Control Validated - RapidSSL(R)
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:cf:2dSerial Number (int): 577325
Serial Number lenght: 20 bits, 3 octets
SubjectKeyId: bc:b7:8b:5e:e1:36:da:3d:c7:b5:e2:86:ed:fe:b1:a6:71:8b:1c:64
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30
Fingerprint (sha1): b7:d4:75:14:71:98:0d:cc:e8:1e:5b:5b:e5:ef:f1:44:59:32:cf:9d
Fingerprint (sha256): 64:27:53:55:2c:9d:8e:94:41:dc:32:62:c4:11:8a:1c:e2:d1:98:56:6b:43:5d:e2:85:46:26:a8:a4:0b:d9:8a
Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt
Revocation information
OCSP Server: http://rapidssl-ocsp.geotrust.comCRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl
Check the revocation status for certificate *.i-on.in
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.i-on.in
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.i-on.in
i-on.in
i-on.in
Other certificates including the domain name i-on.in
(limited to 100 certificates)
i-on.in
*.i-on.in
resources.i-on.in
promotions.i-on.in
i-on.in
andhra-telangana.i-on.in
andhra-telangana.i-on.in
karnataka.i-on.in
resources.i-on.in
promotions.i-on.in
*.i-on.in
*.i-on.in
i-on.in
i-on.in
maharashtra.i-on.in
tempweb.i-on.in
maharashtra.i-on.in
promotions.i-on.in
*.sap.i-on.in
*.i-on.in
resources.i-on.in
andhra-telangana.i-on.in
*.sap.i-on.in
tempweb.i-on.in
i-on.in
i-on.in
maharashtra.i-on.in
karnataka.i-on.in
tempweb.i-on.in
i-on.in
tempweb.i-on.in
promotions.i-on.in
promotions.i-on.in
maharashtra.i-on.in
i-on.in
andhra-telengana.salespanda.com
promotions-ion.salespanda.com
promotions.i-on.in
i-on.in
*.i-on.in
*.wifi.i-on.in
*.i-on.in
resources.i-on.in
karnataka.i-on.in
*.i-on.in
karnataka.i-on.in
promotions-ion.salespanda.com
karnataka.i-on.in
i-on.in
andhra-telengana.salespanda.com
maharashtra.i-on.in
tempweb.i-on.in
*.customer.i-on.in
tempweb.i-on.in
*.customer.i-on.in
*.webticket.i-on.in
promotions.i-on.in
resources.i-on.in
andhra-telangana.i-on.in
promotions.i-on.in
*.webticket.i-on.in
promotions.i-on.in
*.i-on.in
i-onmain.salespanda.com
karnataka.i-on.in
andhra-telangana.i-on.in
maharashtra-ion.salespanda.com
promotions.i-on.in
*.mail.i-on.in
maharashtra.i-on.in
i-on.in
resources.i-on.in
*.smit.i-on.in
promotions.i-on.in
andhra-telangana.i-on.in
*.mail.i-on.in
*.mail.i-on.in
i-on.in
resources.i-on.in
promotions.i-on.in
*.i-on.in
resources.i-on.in
promotions.i-on.in
i-on.in
andhra-telangana.i-on.in
andhra-telangana.i-on.in
karnataka.i-on.in
resources.i-on.in
promotions.i-on.in
*.i-on.in
*.i-on.in
i-on.in
i-on.in
maharashtra.i-on.in
tempweb.i-on.in
maharashtra.i-on.in
promotions.i-on.in
*.sap.i-on.in
*.i-on.in
resources.i-on.in
andhra-telangana.i-on.in
*.sap.i-on.in
tempweb.i-on.in
i-on.in
i-on.in
maharashtra.i-on.in
karnataka.i-on.in
tempweb.i-on.in
i-on.in
tempweb.i-on.in
promotions.i-on.in
promotions.i-on.in
maharashtra.i-on.in
i-on.in
andhra-telengana.salespanda.com
promotions-ion.salespanda.com
promotions.i-on.in
i-on.in
*.i-on.in
*.wifi.i-on.in
*.i-on.in
resources.i-on.in
karnataka.i-on.in
*.i-on.in
karnataka.i-on.in
promotions-ion.salespanda.com
karnataka.i-on.in
i-on.in
andhra-telengana.salespanda.com
maharashtra.i-on.in
tempweb.i-on.in
*.customer.i-on.in
tempweb.i-on.in
*.customer.i-on.in
*.webticket.i-on.in
promotions.i-on.in
resources.i-on.in
andhra-telangana.i-on.in
promotions.i-on.in
*.webticket.i-on.in
promotions.i-on.in
*.i-on.in
i-onmain.salespanda.com
karnataka.i-on.in
andhra-telangana.i-on.in
maharashtra-ion.salespanda.com
promotions.i-on.in
*.mail.i-on.in
maharashtra.i-on.in
i-on.in
resources.i-on.in
*.smit.i-on.in
promotions.i-on.in
andhra-telangana.i-on.in
*.mail.i-on.in
*.mail.i-on.in
i-on.in
resources.i-on.in
promotions.i-on.in
Certificate
The complete raw certificate details for *.i-on.in in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIDCM8tMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew HhcNMTIxMDIwMDczMjU1WhcNMTQxMDIzMDcxOTM4WjCBuDEpMCcGA1UEBRMgMlpr WGdILVgyRG52SVV1a1lrM0J0YnBpZ3FaajBrUGUxEzARBgNVBAsTCkdUOTU0MTk5 MTUxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg KGMpMTIxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk U1NMKFIpMRIwEAYDVQQDDAkqLmktb24uaW4wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtTOT9ZaPjUV3K2Niie3B1V4F7BwQS3JauDv4y2lw3IG/fRp1Z XqOLsqDFhPAn4FYu9WnBH3EQpQtMZjuZ+E51c7X9snJ0gdTgFVdI8MZCREag7SHG 7H+NH/93wHh/ZUNQQxTOyI1vSdQK6GYVwqlWJk4VxYm5zuOvY5MdDAmiCVVngYzL sV9zmzrK2EA6Ng7O91FHi8wuRxfqbvjIOZT4nVw3E2k+re/wyFfobnEcwo/XolXa linX1G4YizfvWFxgMVKtA0CUGjPnRJHdVaT2Pdb7DpjaViCtJu9razvRneo6lm7f QsYkP/ZWmHNfGO2v5xgZOvv5VwEKg9Q3xOwRAgMBAAGjggGtMIIBqTAfBgNVHSME GDAWgBRraT1qGEJK3Y8CZTn9NSSGeJEWMDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdEQQWMBSCCSouaS1vbi5pboIH aS1vbi5pbjBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vcmFwaWRzc2wtY3JsLmdl b3RydXN0LmNvbS9jcmxzL3JhcGlkc3NsLmNybDAdBgNVHQ4EFgQUvLeLXuE22j3H teKG7f6xpnGLHGQwDAYDVR0TAQH/BAIwADB4BggrBgEFBQcBAQRsMGowLQYIKwYB BQUHMAGGIWh0dHA6Ly9yYXBpZHNzbC1vY3NwLmdlb3RydXN0LmNvbTA5BggrBgEF BQcwAoYtaHR0cDovL3JhcGlkc3NsLWFpYS5nZW90cnVzdC5jb20vcmFwaWRzc2wu Y3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVodHRw Oi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0GCSqGSIb3DQEBBQUA A4IBAQDFmodm1v+XQUtVDuelE+C0HWwVJARDgg3/nCjsAr4JgXuKPiVkcA3wtBwe pLrG5HOARQ3XVqXMJJJrF32LVv9p+dCMdG/KfknhVanb08+MBJB8QQVrM7/85qXt EHmpHN5uJ8jVbGjqzi4000H8gdM27z7Xssl0GadA39J4KWP5vM7w6ymK9lFta4bZ 70teo1SpwMoAa1OXwFKtzSBnDXDXclpB4oBHKQTTAtIJfyOjJadW8uD3BFRBAA2u Ue9UGvYbs8vUnlya5z/9VMMl1THYgQVnL+tRBJlHK3E4CrBC+KaQlbEk5i2wW8DQ hkC0w/pFAmA9/2i9VvQ+4ScG8co6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUzk/WWj41FdytjYontw dVeBewcEEtyWrg7+MtpcNyBv30adWV6ji7KgxYTwJ+BWLvVpwR9xEKULTGY7mfhO dXO1/bJydIHU4BVXSPDGQkRGoO0hxux/jR//d8B4f2VDUEMUzsiNb0nUCuhmFcKp ViZOFcWJuc7jr2OTHQwJoglVZ4GMy7Ffc5s6ythAOjYOzvdRR4vMLkcX6m74yDmU +J1cNxNpPq3v8MhX6G5xHMKP16JV2pYp19RuGIs371hcYDFSrQNAlBoz50SR3VWk 9j3W+w6Y2lYgrSbva2s70Z3qOpZu30LGJD/2VphzXxjtr+cYGTr7+VcBCoPUN8Ts EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 577325 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-20 07:32:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-23 07:19:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2ZkXgH-X2DnvIUukYk3BtbpigqZj0kPe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT95419915' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)12' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.i-on.in' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21877144846128957919111392899989059186622580735527498188401488553961635778574733655238381055222837526419919690572512486631957688127302539039233301334426804677041783495235144691327941992748225830316221806063365989005080195106789657440887972265203490548328258873444396635018250462301017563043418266203770531022854562995203726863747072429240865767332243274185351080865864848560207564893935129232582376798667945662533857334260295736824839140303790291745201781929122467201758606221190472506900369780246939204022316803316499988010321471961333966449804879460707153050049955507969289795297676428704251436984049082971283844113 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-on.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-on.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bcb78b5ee136da3dc7b5e286edfeb1a6718b1c64 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00c59a8766d6ff97414b550ee7a513e0b41d6c15240443820dff9c28ec02be09817b8a3e2564700df0b41c1ea4bac6e47380450dd756a5cc24926b177d8b56ff69f9d08c746fca7e49e155a9dbd3cf8c04907c41056b33bffce6a5ed1079a91cde6e27c8d56c68eace2e34d341fc81d336ef3ed7b2c97419a740dfd2782963f9bccef0eb298af6516d6b86d9ef4b5ea354a9c0ca006b5397c052adcd20670d70d7725a41e280472904d302d2097f23a325a756f2e0f7045441000dae51ef541af61bb3cbd49e5c9ae73ffd54c325d531d88105672feb510499472b71380ab042f8a69095b124e62db05bc0d08640b4c3fa4502603dff68bd56f43ee12706f1ca3a