vanity2.jiveon.com

- Jive Software -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 03:09:75 was issued on by GeoTrust, Inc..

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jive Software

Company registration number: 9IomkqpcTkSldwTqVcQidC9T7UdCPaoZ
Organization: Jive Software
Organization unit: Hosting
State / Province: California
Locality: Palo Alto
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:75
Serial Number (int): 199029
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 39:ac:3e:f7:e3:ea:bb:aa:3e:1b:a3:db:af:c4:47:5b:f6:be:c8:9f
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 6f:f6:c4:1c:84:ba:7e:51:02:7c:99:33:99:b1:49:87:b4:4b:88:7d
Fingerprint (sha256): 6e:4e:13:8f:20:7b:3c:c0:61:68:17:4f:a2:15:aa:39:49:00:da:4d:e4:60:d8:bd:a6:64:24:8a:07:22:99:b1

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate vanity2.jiveon.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vanity2.jiveon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app-community.rapid7.com
community.rapid7.com
app-community.mylyve.com
app-community.jivechime.com
community.jivechime.com
app-lookinside.pwc.com
lookinside.pwc.com
app-spark.mheducation.com
spark.mheducation.com
app-theblock.vce.com
theblock.vce.com
app-community.gns3.com
community.gns3.com
app-www.community.gns3.com
community.pharos.com
www.community.gns3.com
app-community.leeo.com
community.leeo.com
app-bookclubs.barnesandnoble.com
bookclubs.barnesandnoble.com
app-www.teachontario.ca
www.teachontario.ca
app-insighters.attivio.com
insighters.attivio.com
community.sungardps.com
community.igniterealtime.org
app-www.costarslive.com
www.costarslive.com
app-community.bit9.com
community.bit9.com
app-community.servicemax.com
community.servicemax.com
app-community.ring.to
community.ring.to
app-my.capital.org
my.capital.org
app-community.nexenta.com
community.nexenta.com
app-community.sungardps.com
app-community.pharos.com
community.mylyve.com
app-connect.limelight.com
connect.limelight.com
app-thebridge.adp.co.uk
thebridge.adp.co.uk
app-exchange.housingpartnership.net
exchange.housingpartnership.net
app-community.mellanox.com
community.mellanox.com
app-community.lifesize.com
community.lifesize.com
app-connect.windriver.com
connect.windriver.com
app-community.decimal.com
community.decimal.com
vanity2.jiveon.com

Other certificates including the domain name jiveon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.jiveon.com
vanity7.jiveon.com
vanity22.jiveon.com
vanity21.jiveon.com
*.jiveon.com
vanity6.jiveon.com
vanity21.jiveon.com
vanity3.jiveon.com
vanity6.jiveon.com
vanity4.jiveon.com
vanity.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
*.jiveon.com
vanity22.jiveon.com
vanity21.jiveon.com
vanity6.jiveon.com
vanity3.jiveon.com
vanity2.jiveon.com
vanity7.jiveon.com
vanity2.jiveon.com
vanity4.jiveon.com
vanity7.jiveon.com
*.dev.jiveon.com
vanity.jiveon.com
*.jiveon.com
vanity3.jiveon.com
vanity.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity22.jiveon.com
*.jiveon.com
vanity.jiveon.com
vanity6.jiveon.com
*.jiveon.com
vanity6.jiveon.com
vanity22.jiveon.com
vanity4.jiveon.com
vanity3.jiveon.com
vanity22.jiveon.com
vanity.jiveon.com
vanity6.jiveon.com
vanity7.jiveon.com
vanity7.jiveon.com
vanity3.jiveon.com
vanity7.jiveon.com
vanity7.jiveon.com
vanity2.jiveon.com
vanity1.jiveon.com
vanity3.jiveon.com
vanity.jiveon.com
*.jiveon.com
*.jiveon.com
vanity21.jiveon.com
www.jivesoftware.com
*.jiveon.com
vanity5.jiveon.com
vanity2.jiveon.com
vanity22.jiveon.com
vanity3.jiveon.com
vanity21.jiveon.com
*.jiveon.com
*.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
vanity3.jiveon.com
vanity22.jiveon.com
vanity6.jiveon.com
vanity7.jiveon.com
*.jiveon.com
*.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
vanity.jiveon.com
vanity21.jiveon.com
*.jiveon.com
*.jiveon.com
vanity5.jiveon.com
vanity2.jiveon.com
vanity22.jiveon.com
vanity21.jiveon.com
vanity22.jiveon.com
*.jiveon.com
vanity22.jiveon.com
vanity.jiveon.com
vanity4.jiveon.com
vanity21.jiveon.com
vanity4.jiveon.com
*.jiveon.com
vanity21.jiveon.com
vanity.jiveon.com
vanity.jiveon.com
*.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
*.jiveon.com
vanity22.jiveon.com
*.jiveon.com

Certificate

The complete raw certificate details for vanity2.jiveon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmgZwmPWKE2Fqak/DyVB
f/queLb3Ds1WQfzcU6/d9vCGqH5TFcTrsEMKCwJbkn2Q1G4P0aAGY7aTbGIrHhUw
FAPLkp0kM4lBUFg9bbnz4L0WPRJpxxy08bFq4tUGRMtKBUH8MwjpygiTCGElr1lN
Y39vp1KtJRTUr+Zr2dqDPbn8zJqiKPMFCz/FoZXVDG20PMwTgnTFg+TsKDUz25Ob
16CaeadJ9s1wm3P5uXjge/QVd08HPHancpy+qEpBrr8L6NYo3i6r4aURf4v3tKT7
brU8iHMs2kRnHK1ZpZkiySr2bmCMdgW9TydUXHpy7C7+4Mq7A+212diWytu4Xmwy
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-03 00:40:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-08 19:21:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9IomkqpcTkSldwTqVcQidC9T7UdCPaoZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jive Software'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vanity2.jiveon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24541565093565450620148487930510745402310327742989241235177479779512430131273922641897083326003002906089621224218664283344297880787258919488409583519085238714506536060171704762899110380702103634836128377331215816919183452010385139813431667416239191069314869870833024174438454424018326577610954990455298602391126901642310996442793845231303981006780945950082096208446897685952224461214292420366461375963685253832655238211413490105374298949078206313238694834329061088311751936530943538826657709858892150241808520050253316675339948540158588250782829881874019149563020962451863386543121588289783800276697733226812228252263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.rapid7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.rapid7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.mylyve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.jivechime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.jivechime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-lookinside.pwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookinside.pwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-spark.mheducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.mheducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-theblock.vce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theblock.vce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.gns3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.gns3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-www.community.gns3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.pharos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.gns3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.leeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.leeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-bookclubs.barnesandnoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookclubs.barnesandnoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-www.teachontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-insighters.attivio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insighters.attivio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.sungardps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.igniterealtime.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-www.costarslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costarslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.bit9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.bit9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.servicemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.servicemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.ring.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ring.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-my.capital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.capital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.nexenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.nexenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.sungardps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.pharos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mylyve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-connect.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-thebridge.adp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebridge.adp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-exchange.housingpartnership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.housingpartnership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.mellanox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mellanox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.lifesize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.lifesize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-connect.windriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.windriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.decimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.decimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanity2.jiveon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39ac3ef7e3eabbaa3e1ba3dbafc4475bf6bec89f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002bd025a20f80846cd5a9d2de144f2d6fdfc31af881df1a212d2291b2e7f0ebea853038f19d89130fd2e438df5082f24a19344f9711ae349b30f37cc9291b4c87f93ebdc1cd4ad2119bcbd38d5e9064d3735146928a71bee201dcb41075f760a68a5d4c2dd0c23038d4f1ef7e4f8df3ea3c84050814a46bd74f23ea3c1e6b6ceefdac6d85467ca124ce5d62a2620fd33c4bc9c9a6ae5cf9d9ea0365a1d9712733d3bac8f373ada31b485d5587e81abee9b5ad1eeaadf668c5071d5c1167ed0ddf81a396d623642503e3401ce81aa2a320875a43121c10ad6336ecdadb0cc3995b66f7205e0f99d548168965a10d6a845111166c17014e00e61d31f0727711f54f