www.citynet.net

- Citynet Holdings LLC -

Issued by GeoTrust Extended Validation SSL CA

About this certificate

This digital certificate with serial number 77:38 was issued on by GeoTrust Inc.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citynet Holdings LLC

Company registration number: 3596983
Organization: Citynet Holdings LLC
Organization unit: Internet
State / Province: West Virginia
Locality: Bridgeport
Country: US

GeoTrust Inc

Organization: GeoTrust Inc
Organization unit: See www.geotrust.com/resources/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:38
Serial Number (int): 30520
Serial Number lenght: 15 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 28:c4:eb:8f:f1:5f:79:90:a3:2b:55:c3:56:4e:7d:6b:53:72:2c:18

Fingerprint (sha1): c2:f5:89:8c:81:b0:5e:3e:e0:fb:57:ad:31:28:bf:f4:60:9a:0f:99
Fingerprint (sha256): 65:e1:d9:c2:9d:67:b5:56:0c:a2:ba:60:05:d6:b0:a5:bf:fd:d7:6a:a2:58:4e:a0:5c:e3:51:36:16:da:eb:00

Issuing Certificate URL: http://EVSSL-aia.geotrust.com/evca.crt

Revocation information

OCSP Server: http://EVSSL-ocsp.geotrust.com
CRL Distribution Point: http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl

Check the revocation status for certificate www.citynet.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.citynet.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts.citynet.net
itraxx.citynet.net
livegrades.citynet.net
intranet.citynet.net
webtools.citynet.net
ce.citynet.net
cms.citynet.net
netpulse.citynet.net
secure.citynet.net
securehosting.citynet.net
myaccount.citynet.net
voipadmin.citynet.net
ftp.citynet.net
mail.citynet.net
sslvpn.citynet.net
webservice.citynet.net
smtp.citynet.net
phoneadmin.citynet.net
securesip.citynet.net
securetrunking.citynet.net
cloud.citynet.net
www.citynet.net
citynet.net

Other certificates including the domain name citynet.net

(limited to 100 certificates)
excas.citynet.net
webtools.citynet.net
www.citynet.net
securehosting.citynet.net
www.citynet.net
secure.citynet.net
www.citynet.net
stream.citynet.net
retailstatus.sts.pl
www.citynet.net
status.sirocco.global
cucm-pub01-ms.admin.citynet.net
www.citynet.net
excas.citynet.net
www.citynet.net
sni.cloudflaressl.com
www.citynet.net
*.citynet.net
itraxx.citynet.net
www.citynet.net
cms.citynet.net
cms.citynet.net
status.meshcaid.com
excas.citynet.net
sni.cloudflaressl.com
*.citynet.net
status.sirocco.global
intranet.citynet.net
www.citynet.net
status.sirocco.global
status.sirocco.global
ce.citynet.net
webtools.citynet.net
www.citynet.net
tlspeering.citynet.net
www.citynet.net
status.meshcaid.com
www.citynet.net
vcloud.citynet.net
*.citynet.net
www.citynet.net
livegrades.citynet.net
secure.citynet.net
www.citynet.net
securehosting.citynet.net
excas.citynet.net
excas.citynet.net
www.citynet.net
livegrades.citynet.net
www.citynet.net
secure.citynet.net
securehosting.citynet.net
netpulse.citynet.net
www.citynet.net
www.citynet.net
status.sirocco.global
www.citynet.net
livegrades.citynet.net
excas.citynet.net
www.citynet.net
gateway.citynet.net
accounts.citynet.net
status.citynet.net
sni.cloudflaressl.com
retailstatus.sts.pl
secure.citynet.net
*.citynet.net
*.citynet.net
stream.citynet.net
www.citynet.net
securehosting.citynet.net
status.sirocco.global
statuspage.onmex.mx
excas.citynet.net
ce.citynet.net
itraxx.citynet.net
status.sirocco.global
excas.citynet.net
excas.citynet.net
www.citynet.net
status.sirocco.global
*.citynet.net
status.meshcaid.com
*.citynet.net
sni.cloudflaressl.com
status.sirocco.global
excas.citynet.net
www.citynet.net
*.citynet.net
www.citynet.net
excas.citynet.net
status.meshcaid.com
statuspage.onmex.mx
*.citynet.net
www.citynet.net
www.citynet.net
excas.citynet.net
www.citynet.net
status.citynet.net
status.sirocco.global

Certificate

The complete raw certificate details for www.citynet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcEa69kq5LjYHMZtvtkd
cO+2QW2uYk8zr/WaIMiKR3F8h9KZ6t/btOFhHZnGuIJ+gw2qtXT8GeCrLQAXQ2h8
z0AfcV6Tkmrbmrc0K1Biq9+1m9T9ecVbWYzCSi+BGVattvz02/YkihJbCiXsw+18
jpO/E6agpn6B9ueOD4wsz2iAq3rjVpdI1vJ/keroGvkoku6UzSMUQ7v+Ie0bV0MZ
ydMuJRKfa8lwpj2QmQD9pzMow/qfqj5d8S025qDeg08Bi30A6YUPG4U67jmjDD91
nhOT4+VZS5TbI6Dnigk6vr8oyeHLtXMWqlv7mm9A7gmZrZuGBHT7kcUBWDEDnM9r
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-04 07:13:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-16 02:09:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3596983'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bridgeport'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Citynet Holdings LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.citynet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23954263342638253078054796968158454315897826692990312706088919021281719167679191657238813540806737215872473032194969315135749924364455540393097476400426096200942169981748214009212907589422042768766705611385798559603479449058161809566214596182069417116943368533368423973380071463547794584334713467914964088235011117140099420783739846146222731796915126333174177342620967216268122932632673045006572027750859550162683103428268121113831328350053595458048360481733700784162328902905056085476349639558368730310963382539883543796775196114574194214542850190210331447624913127542751570048506322055125075631871923048988674059141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28c4eb8ff15f7990a32b55c3564e7d6b53722c18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-aia.geotrust.com/evca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itraxx.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livegrades.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtools.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ce.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpulse.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securehosting.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voipadmin.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslvpn.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneadmin.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesip.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securetrunking.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citynet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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