www.gartenmode.de

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 02:39:3b was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.gartenmode.de,OU=GT52477838+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:39:3b
Serial Number (int): 145723
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): 8f:4a:b0:3c:ce:09:fa:1c:dc:1c:1a:62:91:b3:5e:3d:d8:79:6d:28
Fingerprint (sha256): 6a:81:dd:79:48:fc:8a:9e:ec:43:f4:32:c8:c4:ef:35:1b:ef:89:d5:50:2b:01:80:ea:57:bd:1e:30:a4:d9:3b

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate www.gartenmode.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gartenmode.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gartenmode.de
gartenmode.de

Other certificates including the domain name gartenmode.de

(limited to 100 certificates)
kiosque.flp.ch
chiosco.flp.ch
*.gartenmode.de
test.phcsystem.com
magazin.nivea.de
kiosk.astrosofa.com
kiosk.citytipp.org
travelshop.accessconsciousness.com
magazin.ferienmagazin-deutschland.de
kiosque.flp.ch
chiosco.flp.ch
vitadoor.mediaflip.de
webkiosk.die-bank.de
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
test.phcsystem.com
epapers.juenglingverlag.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
kiosk.astrosofa.com
fall-magazine.robinsonlightingandbath.com
test.phcsystem.com
test.phcsystem.com
test.phcsystem.com
gartenmode.de
magazin.ferienmagazin-deutschland.de
kiosk.flp.de
blaetterkatalog.andrees-angelreisen.de
webkiosk.die-bank.de
kiosk.flp.ch
webkiosk.die-bank.de
fall-magazine.robinsonlightingandbath.com
www.sblaettle.at
katalog.lemo-schuh.ch
kiosque.flp.ch
test.phcsystem.com
katalog.lemo-schuh.ch
kataloge.basoeinkaufsverbund.de
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
kiosk.flp.ch
kiosk.flp.at
kiosk.astrosofa.com
www.sblaettle.at
chiosco.flp.ch
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
gartenmode.de
katalog.lemo-schuh.ch
kiosk.velototal.de
kiosk.flp.de
kiosk.velototal.de
moebel-brameyer.mediaflip.de
kiosk.velototal.de
kiosk.velototal.de
kiosk.flp.de
magazin.plusperfekt.de
brochures.hilliard.com
epaper.immobilienboerse-ag.ch
katalog.lemo-schuh.ch
kiosk.velototal.de
katalog.lemo-schuh.ch
test.phcsystem.com
katalog.gartenmode.de
webkiosk.die-bank.de
kiosk.flp.at
kiosk.flp.de
www.gartenmode.de
test.phcsystem.com
kiosk.astrosofa.com
kiosque.flp.ch
test.phcsystem.com
kiosk.velototal.de
kiosk.flp.de
trop.mediaflip.de
kiosk.velototal.de
idee.elite-consulting.eu
kiosk.velototal.de
kiosk.flp.at
kiosk.velototal.de
test.phcsystem.com
magazines.esteticanetwork.com
chiosco.flp.ch
vitadoor.mediaflip.de
*.gartenmode.de
kiosk.velototal.de
kiosque.flp.ch
kiosk.flp.ch
idee.elite-consulting.eu
katalog.lemo-schuh.ch
catalogue.designmiami.com
www.gartenmode.de
test.phcsystem.com
fall-magazine.robinsonlightingandbath.com
magazin.ferienmagazin-deutschland.de
berliner-kurier1.kiosk.plus
kiosque.flp.ch

Certificate

The complete raw certificate details for www.gartenmode.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAjk7MA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdSYXBpZFNTTCBTSEEy
NTYgQ0EgLSBHMzAeFw0xNTAyMDgxNjM1NThaFw0xOTAzMTIxMzEyMTVaMIGVMRMw
EQYDVQQLEwpHVDUyNDc3ODM4MTEwLwYDVQQLEyhTZWUgd3d3LnJhcGlkc3NsLmNv
bS9yZXNvdXJjZXMvY3BzIChjKTE1MS8wLQYDVQQLEyZEb21haW4gQ29udHJvbCBW
YWxpZGF0ZWQgLSBSYXBpZFNTTChSKTEaMBgGA1UEAxMRd3d3LmdhcnRlbm1vZGUu
ZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC9jJCAUcpmedTdSFb8
c/NGbGH2hGuIhlF6A191Q9OKhIDAs+ENXAR4Y6WDoohWWdPGUuHpG/LQ409tUNOb
2DcyArm7d9xiwGZMZEkGPMwJI+e85c3YgD1k2UEn073Pq0QIJILfhjZHigXgtImZ
VROjwJ/YGhvSHY8HqNp6RlCUgScNW8/7zb/Yjkb/ckRGedBy3x/KHGBte0kDX8PP
a+kyHj1PVajI5v9hGSl3DJPkaoIq3sRKy6zK58HvYmhF5eDjktmM1Hhu66mj3MaJ
kfN0K2R9kOpqqqug9L0849Jo4fTUFNPVdb6HIstgoLEOmryv55M1DIHBSLGmoEKu
QW97a9ILerU8aVDveQLteiU3chEsjzT87ySMWoh6Dks9WhK16zqVK/O1RsMzZKWl
513jkQ067ov0K52L3gYkI97daHd5ihHXiDpwSQXpwTdG6t5376JUIa2JxmJ/1o7d
/Pd7je1/0cByIFNVGTiluvm4aGrBRAPIuViWPvPcycAn5Hf+lHLE3Anem1U0BpX+
nNmsHsWlYgpdbm5blE7acMrGog5gAKC01jAF9TJhWxL88NzsVK0zPmBfew8hQIIe
Hkw7u0DhmGSpLcd6LgLSshz7rUqqf9wROuXE+fBJK83th7qdJj+6jJhUErR/Hgfn
bLOcEfcGTVxJi9ZFtAmLdJRqIQIDAQABo4IBXDCCAVgwHwYDVR0jBBgwFoAUw5zz
/NNGCDS7zkZ/oHxb8+IIy1kwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNo
dHRwOi8vZ3Yuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Yuc3ltY2Iu
Y29tL2d2LmNydDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMCsGA1UdEQQkMCKCEXd3dy5nYXJ0ZW5tb2RlLmRlgg1nYXJ0ZW5t
b2RlLmRlMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ndi5zeW1jYi5jb20vZ3Yu
Y3JsMAwGA1UdEwEB/wQCMAAwRQYDVR0gBD4wPDA6BgpghkgBhvhFAQc2MCwwKgYI
KwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDANBgkqhkiG
9w0BAQsFAAOCAQEALjEZVEpY3QmD5gVygC81ysPfrB9e8IM27R205pE81UzfMuQP
VwDQToBKa+2nK+1NL2qW86aBZlNR3pX6O7W91n6Eoq61sJz1XB0HVWaXSgtt1i1l
YbYvens1ATAmOvnvKZRntl4qTdrOWMSHHQf2pxqtH5hs1B491P8tB21ISgiE8Cv1
Bh0mnEMFDT9Lp7ENDWvOiEWbCqBViQ51nDyUAxZLB583780V52Y0NT45OiqOBZcE
gyj9Ttamlvn55dgn0TC+rpiLFeXTbD9Jrp8MvajQcZnUZjkZ0GX2SdHKuoi/m/z0
IaTHnA9jhE74c26VP4ipOeL2t7BTmYjMm1koNg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvYyQgFHKZnnU3UhW/HPz
Rmxh9oRriIZRegNfdUPTioSAwLPhDVwEeGOlg6KIVlnTxlLh6Rvy0ONPbVDTm9g3
MgK5u3fcYsBmTGRJBjzMCSPnvOXN2IA9ZNlBJ9O9z6tECCSC34Y2R4oF4LSJmVUT
o8Cf2Bob0h2PB6jaekZQlIEnDVvP+82/2I5G/3JERnnQct8fyhxgbXtJA1/Dz2vp
Mh49T1WoyOb/YRkpdwyT5GqCKt7ESsusyufB72JoReXg45LZjNR4buupo9zGiZHz
dCtkfZDqaqqroPS9POPSaOH01BTT1XW+hyLLYKCxDpq8r+eTNQyBwUixpqBCrkFv
e2vSC3q1PGlQ73kC7XolN3IRLI80/O8kjFqIeg5LPVoStes6lSvztUbDM2Slpedd
45ENOu6L9Cudi94GJCPe3Wh3eYoR14g6cEkF6cE3Rured++iVCGticZif9aO3fz3
e43tf9HAciBTVRk4pbr5uGhqwUQDyLlYlj7z3MnAJ+R3/pRyxNwJ3ptVNAaV/pzZ
rB7FpWIKXW5uW5RO2nDKxqIOYACgtNYwBfUyYVsS/PDc7FStMz5gX3sPIUCCHh5M
O7tA4ZhkqS3Hei4C0rIc+61Kqn/cETrlxPnwSSvN7Ye6nSY/uoyYVBK0fx4H52yz
nBH3Bk1cSYvWRbQJi3SUaiECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-08 16:35:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 13:12:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT52477838'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gartenmode.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773292779470079691330321607015659480069287692124930090965816671717886287302962028963017893429092750961202731026325169384789198021332852912471965467184851888548328542044934175356354647304451910011260722549283650699679250720789653798009510737902783984253251934935811876548520166805348001043081098403434138282969824570771813189585337905236736867221948548097996296748347194680294238069940906045877361418756816314817616916337500849637213816262701484155807556863595328822732706258338440185019093871405643693035364759144347564971515800961567581240199423847306279196198706951304536123273330114960745740409649476752961761751527265914320276167287975839627782420253775252837195620747774242855889649260151022926742856637696423451355701537544097969107600063193566832878477419873850409715594473411991326766408724071167473600032914196705904612654622450492927042274609675909012608699237253621740903830872250054061385449817150101847545921211676726769883294999013693567735547559476405800325275531783654883212927519941767709717572571213892354751613221971782314523373741973311837111963770206580430824093224458306572866404289939896963336430615354362033315131681061219551291328549669484331622575375561720607428510544234665151021732746924284847468336933409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gartenmode.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gartenmode.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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