content.aimatch.com
- SAS Institute Inc -
Issued by GeoTrust SSL CA - G4
About this certificate
This digital certificate with serial number 06:ce was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
SAS Institute Inc
Organization:
SAS Institute Inc
Organization unit: Akamai SAN SSL OV
Organization unit: Akamai SAN SSL OV
State / Province:
North Carolina
Locality: Cary
Country: US
Locality: Cary
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:ceSerial Number (int): 1742
Serial Number lenght: 11 bits, 2 octets
SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3
Fingerprint (sha1): af:f8:cc:5c:46:8d:80:05:0b:77:32:4a:ed:17:b0:88:14:f2:a3:3a
Fingerprint (sha256): 67:27:44:cb:74:f2:5d:1f:76:40:ad:d2:26:0c:08:de:71:d8:89:59:44:9f:8b:b2:ef:02:7d:21:c4:5e:a1:08
Issuing Certificate URL: http://gw.symcb.com/gw.crt
Revocation information
OCSP Server: http://gw.symcd.comCRL Distribution Point: http://gw.symcb.com/gw.crl
Check the revocation status for certificate content.aimatch.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for content.aimatch.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
content.aimatch.com
Other certificates including the domain name aimatch.com
(limited to 100 certificates)
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
Certificate
The complete raw certificate details for content.aimatch.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEsjCCA5qgAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRDELMAkGA1UEBhMCVVMx FjAUBgNVBAoTDUdlb1RydXN0IEluYy4xHTAbBgNVBAMTFEdlb1RydXN0IFNTTCBD QSAtIEc0MB4XDTE1MDMyNTEwMDYxN1oXDTE2MDUyNjEyMTU1M1owgYsxCzAJBgNV BAYTAlVTMRcwFQYDVQQIEw5Ob3J0aCBDYXJvbGluYTENMAsGA1UEBxMEQ2FyeTEa MBgGA1UEChMRU0FTIEluc3RpdHV0ZSBJbmMxGjAYBgNVBAsTEUFrYW1haSBTQU4g U1NMIE9WMRwwGgYDVQQDExNjb250ZW50LmFpbWF0Y2guY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU5jabm3xdA+6eGkNN592bky2b+zcV2uNPBR +rh9rN6r8jrbtZPw0t46dffe7eq001jzWkdPgPLT3vxLqg3E7vqVEOfsT3XVIWtM 08AiSJrlB8DA5cnQavvLwCFIgINK6mJPuSvfNexx1eGwVsRvNNmZYWo/dZ7oX20k NIf7tNP9m3XeR4ODyM7ugXyGQLPRiaGSe2FkRkW+uxVbGWHS/0OynTcLb7OxkgBY I9WWgkfm3ICOXOj0i8b0XROQf23bkoy+TSqakVUz6NQrUPumSuXd8xr/ofAxSTe3 Ohe1//yVAi52pb84T7IeAkdafZ3rLj0gaJn8+2LZM2FEQ9GkvQIDAQABo4IBZDCC AWAwHwYDVR0jBBgwFoAUrDLtWsng3jCckFhVJmP2cqZUX+MwVwYIKwYBBQUHAQEE SzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3cuc3ltY2QuY29tMCYGCCsGAQUFBzAC hhpodHRwOi8vZ3cuc3ltY2IuY29tL2d3LmNydDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB4GA1UdEQQXMBWCE2NvbnRlbnQu YWltYXRjaC5jb20wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2d3LnN5bWNiLmNv bS9ndy5jcmwwDAYDVR0TAQH/BAIwADBaBgNVHSAEUzBRME8GCmCGSAGG+EUBBzYw QTA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl cy9yZXBvc2l0b3J5L2xlZ2FsMA0GCSqGSIb3DQEBCwUAA4IBAQBvTirUk1bxwmTU OxAHikU819Fd4mPwhpa+ZL614QH0otb6YF++c/YrszmXShMUAXiP0gLDQVswbekN d8OA+P1R82XERRjdzm0z5lwh+JyC6d9nebgDbUaQdHwpwS3FewC4dC2Ua1g7Qe7x pKpplFQqhorLSOuX1kGzSjUTtZ1Cq6h2rkYe3TndWbEzMEYGvjncrfv3nwUCMlu6 u49LNQQgmx33FJW8G9kvDPxksMJXu6/psclf8KaUm4upwiXGk5q+fBVDBHTjGcQb +e6Sdsik0F2HB1a9L5TA0jqOmgeoaxoG4tFMp8V874Z9tE/FcKQtv1PmYkO1WFer XF43Q9XH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU5jabm3xdA+6eGkNN59 2bky2b+zcV2uNPBR+rh9rN6r8jrbtZPw0t46dffe7eq001jzWkdPgPLT3vxLqg3E 7vqVEOfsT3XVIWtM08AiSJrlB8DA5cnQavvLwCFIgINK6mJPuSvfNexx1eGwVsRv NNmZYWo/dZ7oX20kNIf7tNP9m3XeR4ODyM7ugXyGQLPRiaGSe2FkRkW+uxVbGWHS /0OynTcLb7OxkgBYI9WWgkfm3ICOXOj0i8b0XROQf23bkoy+TSqakVUz6NQrUPum SuXd8xr/ofAxSTe3Ohe1//yVAi52pb84T7IeAkdafZ3rLj0gaJn8+2LZM2FEQ9Gk vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1742 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-25 10:06:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-26 12:15:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cary' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAS Institute Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.aimatch.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24907600805500461511486841448773328335824124662598992952743266446128578079157978050954063691344889102715630125110035384992397269627272935611379186058678868658681867508651467512631483530816147405854369005432987505789838363747432053929569011363652708901699860007583157684623082402678427023698020772562313199933560416675735065148046301366360324943118398541278531792923231835633001071113128293690480391423683264337863827386641478566957181961848157305211386528833404743786127150550110901299390265449311246624743738930501478633137010291727358606715590117831200765192852081977147128326298843814572186258355671598838844597437 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aimatch.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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