aaf.gecompany.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:e6:18:a5:8c:00:36:d8:d6:ee:a8:b2:87:21:e0:9c was issued on by Amazon.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aaf.gecompany.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:e6:18:a5:8c:00:36:d8:d6:ee:a8:b2:87:21:e0:9c
Serial Number (int): 3853184162838304976838112101936521372
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 20:0e:9d:c4:a1:5d:2b:65:3a:5d:af:02:cb:8d:42:f3:fd:ff:28:3f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8a:3e:be:1d:02:44:7e:28:b4:83:0e:5c:cd:bf:57:42:48:f1:db:5e
Fingerprint (sha256): 6a:ab:ed:7f:1a:85:77:d3:a1:2a:5d:03:d7:eb:ab:6f:a9:bd:42:38:c8:b8:dd:e0:66:34:d5:63:d8:9b:d3:56

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate aaf.gecompany.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaf.gecompany.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaf.gecompany.com
www.ge-americas.com
www.gecompany.com.mx
www.geimaginationatwork.net
www.geconnections.com
japan.geblogs.com
www.ge.co.nz
www.bitstew.com
ge-digital.co
brasil.txchnologist.com
www.1-800-ge.com
www.ask-ge.net
predixui.com
www.geamericas.com
brazil.geblogs.com
www.gecitizenship.com
www.geafrica.com
www.gecompany.org
www.bringgoodthingstolife.com
www.geblogs.com
predix.co.il
ge-digital.net
www.gehealthyshare.com
www.gecentennialflight.com
content.ge.com
www.gejapanholdings.co.jp
www.gejapanholdings.com
healthchoice.ge-healthahead.com
predixui.net
www.gemindsandmachines.com
www.gejapanholdings.jp
www.proficy.com
www.ge-america.com
www.gebrand.com
www.gejapan.com
www.ge.co.uk
www.e-ge.com
www.ask-ge.org
dev.geholidaycard.com
www.e-ge.net
gopredix.com
geforcee.geblogs.com
predixo.com
predix.ae
www.ge-co.org
stage-solr-dsg.gebrilliantyou.com
www.ge-company.org
www.geenergyfinancialservices.com
www.ge.co.th
www.ge.com.tr
proficy.com
www.geforyou.com
www.ge-africa.com
www.general-electric.com
www.geamerica.com
photoproject.ecomagination.com
predixui.org
www.developinghealthglobally.com
www.ge-company.com
seed.ecomagination.com
generalelectric.tj
www.ge-cdn.com
gedigital.co
geoterra.ecomagination.com
www.ge.com.sg
www.ge-co.net
www.ecomagination.com
gedigital.dev
challenge.ecomagination.com
www.ge.com.br
www.800thinkge.com
www.gedestinationafrica.com
eddie.ge.com
www.ge-australia.com
www.ge-company.net
www.geglobalresearch.com
www.1-800-ge.org
www.ge-co.com
www.ask-ge.com
www.geholidaycard.com
www.ge.com.au
visualization.geblogs.com
www.ge-cities.com
www.geaustralia.com
ww2.geglobalresearch.com
flexibility.ecomagination.com
www.gefinland.com
www.gecompany.com
www.ge-europe.com
www.gefoundation.com
www.gecareers.com
kids.ecomagination.com
ge.ecomagination.com
gepredix.com
ge.digital
www.ge.com.pk
ge-digital.org

Other certificates including the domain name gecompany.com

(limited to 100 certificates)
*.ecomex.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com

Certificate

The complete raw certificate details for aaf.gecompany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI8BJTBY9xEO0/t7MYJE
Wn5EERymHTjy3tPjJ6JQ7xr5w8sFicFLPSLQRJD03NPYulVd7lye1XSJrV2X2uW1
/GbYHxe4oylYCTiVFEbXj55QUWqlN+gbKQesWg2rg9tIFOCKW9GwTiNcdd7p+8bt
bNQk1CEBlbYApXq5PNpr/E61OWiY5brJO30GS9UYOtYxb05NjkVLFT7z9bqX5WmL
uasMcWFtI3Vl1f4jriJVH+QPOdiPDPFRAutGfXI+8OsAr7xiRyuADCihe199jhJS
aoO/5fXwcwixz8xTvB3lPOYLn7L1YI9wU1Y6ijvtPiuf2pJtGPuNa2m+vE6AR3Nr
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3853184162838304976838112101936521372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaf.gecompany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21783506588393826786689296876164815597446274609182045376141412239262816486418983658046180788855438840730238498577826216116108445693545630166293484273966902308038359012657012324521873156980279195830469714291543422032071100275727600785476242582739667343610559041587365113675577287308542802886265530813746309517561847288865229190980385047017657054849757452230567512612523379528534923004892467091429066688528959517274432164889998260930169380145805134877648743715045990426680053948254157777609780964201298032397070378186934433245789794431089385879466655757437504436252536985026006755338461456593437417963451672525054110559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							200e9dc4a15d2b653a5daf02cb8d42f3fdff283f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1951 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaf.gecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-americas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecompany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geimaginationatwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japan.geblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitstew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-digital.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasil.txchnologist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1-800-ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ask-ge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil.geblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecitizenship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecompany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bringgoodthingstolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predix.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-digital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gehealthyshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecentennialflight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapanholdings.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapanholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthchoice.ge-healthahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixui.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemindsandmachines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapanholdings.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proficy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gebrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gejapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ask-ge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.geholidaycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-ge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopredix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geforcee.geblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predix.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-co.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-solr-dsg.gebrilliantyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-company.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geenergyfinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proficy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-africa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.general-electric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoproject.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predixui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developinghealthglobally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-company.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalelectric.tj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedigital.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoterra.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-co.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedigital.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenge.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.800thinkge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gedestinationafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddie.ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-australia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-company.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geglobalresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1-800-ge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ask-ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geholidaycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualization.geblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-cities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.geglobalresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexibility.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gefinland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gefoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.ecomagination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepredix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.com.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-digital.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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