*.acs-rx.com
Issued by RapidSSL CA
About this certificate
This digital certificate with serial number 08:d2:3a was issued on by GeoTrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
SERIALNUMBER=FLoB6Kp/RV05P4MqFube1rwMKq56-wIr,CN=*.acs-rx.com,OU=GT50613467+OU=See www.rapidssl.com/resources/cps (c)12+OU=Domain Control Validated - RapidSSL(R)
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:d2:3aSerial Number (int): 578106
Serial Number lenght: 20 bits, 3 octets
SubjectKeyId: eb:70:8f:80:11:e5:70:8e:79:13:1b:37:7c:7e:f1:d1:62:18:92:88
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30
Fingerprint (sha1): 26:67:d1:0f:ee:b9:c8:fe:99:8a:e4:ec:95:be:69:d4:f9:79:df:72
Fingerprint (sha256): 70:01:d2:84:93:99:fd:7f:c2:33:ed:69:e5:d7:8c:8a:b8:d6:8f:4f:d8:32:a6:ff:97:da:f9:6d:ba:ff:d2:23
Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt
Revocation information
OCSP Server: http://rapidssl-ocsp.geotrust.comCRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl
Check the revocation status for certificate *.acs-rx.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.acs-rx.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.acs-rx.com
acs-rx.com
acs-rx.com
Other certificates including the domain name acs-rx.com
(limited to 100 certificates)
webportaluat.acs-rx.com
ws.acs-rx.com
webmail.cvscaremark.com
www.omnicare.com
vip2fssp.acs-rx.com
www.OmnicareSCG.com
OmnicareMgtPrd.corp.cvscaremark.com
www.omnicare.com
*.acs-rx.com
wsuat.acs-rx.com
www.omnicare.com
webportal.acs-rx.com
www.omnicare.com
www.omnicare.com
wsuat.acs-rx.com
www.acs-rx.com
OmnicareMgtPrd.corp.cvscaremark.com
*.acs-rx.com
webportal.acs-rx.com
www.omnicare.com
webportal.acs-rx.com
www.omnicare.com
www.omnicare.com
ws.acs-rx.com
SYM2FVIPGW.acs-rx.com
portal.acs-rx.com
www.omnicare.com
webmail.cvscaremark.com
OmnicareMgtPrd.corp.cvscaremark.com
www.omnicare.com
OmnicareScg.omnicare.com
webportaldev.acs-rx.com
anyconnect.acs-rx.com
webportaltrn.acs-rx.com
wsdev.acs-rx.com
ws.acs-rx.com
SYM2FVIPGW.acs-rx.com
wsdev.acs-rx.com
webportaltrn.acs-rx.com
www.omnicare.com
portal.acs-rx.com
ws.acs-rx.com
webmail.cvscaremark.com
www.omnicare.com
vip2fssp.acs-rx.com
www.OmnicareSCG.com
OmnicareMgtPrd.corp.cvscaremark.com
www.omnicare.com
*.acs-rx.com
wsuat.acs-rx.com
www.omnicare.com
webportal.acs-rx.com
www.omnicare.com
www.omnicare.com
wsuat.acs-rx.com
www.acs-rx.com
OmnicareMgtPrd.corp.cvscaremark.com
*.acs-rx.com
webportal.acs-rx.com
www.omnicare.com
webportal.acs-rx.com
www.omnicare.com
www.omnicare.com
ws.acs-rx.com
SYM2FVIPGW.acs-rx.com
portal.acs-rx.com
www.omnicare.com
webmail.cvscaremark.com
OmnicareMgtPrd.corp.cvscaremark.com
www.omnicare.com
OmnicareScg.omnicare.com
webportaldev.acs-rx.com
anyconnect.acs-rx.com
webportaltrn.acs-rx.com
wsdev.acs-rx.com
ws.acs-rx.com
SYM2FVIPGW.acs-rx.com
wsdev.acs-rx.com
webportaltrn.acs-rx.com
www.omnicare.com
portal.acs-rx.com
Certificate
The complete raw certificate details for *.acs-rx.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIDCNI6MA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew HhcNMTIxMDIxMDY1MTAxWhcNMTQxMDI0MTQyMTIwWjCBuzEpMCcGA1UEBRMgRkxv QjZLcC9SVjA1UDRNcUZ1YmUxcndNS3E1Ni13SXIxEzARBgNVBAsTCkdUNTA2MTM0 NjcxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg KGMpMTIxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk U1NMKFIpMRUwEwYDVQQDDAwqLmFjcy1yeC5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUwyhllWVWkq+jVvPOMVshtxES360+0sGvrnfoaX/nJ83a rrGBQBmwjpnKr+T8GFIrr0ORTwmpK+qbOJ/QDHmzSVGBSZBBeBeMeD8+jRY19mHG hEAttLIakoIJe01FO1B0Ke61hdw4z5/A84W8LR9cyMxcHyy9/g9jN6rqX+R6flBt 5sIrxQBKCz/eGje6upF4ih++j+cPB+qjYOuw/eIVYQ7r3vQQUIa7TnjdduHBFrx+ mEBuPIVK+8i39dOhZsmqXv9saio5ZwhF2CkcjWaWlgjO7nfuqNS+TBpYipr8jSq4 atYbgPDgcAdfqSBKzcJ89GvN0oGNdpQJc69Gg9tLAgMBAAGjggGzMIIBrzAfBgNV HSMEGDAWgBRraT1qGEJK3Y8CZTn9NSSGeJEWMDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCMGA1UdEQQcMBqCDCouYWNzLXJ4 LmNvbYIKYWNzLXJ4LmNvbTBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vcmFwaWRz c2wtY3JsLmdlb3RydXN0LmNvbS9jcmxzL3JhcGlkc3NsLmNybDAdBgNVHQ4EFgQU 63CPgBHlcI55Exs3fH7x0WIYkogwDAYDVR0TAQH/BAIwADB4BggrBgEFBQcBAQRs MGowLQYIKwYBBQUHMAGGIWh0dHA6Ly9yYXBpZHNzbC1vY3NwLmdlb3RydXN0LmNv bTA5BggrBgEFBQcwAoYtaHR0cDovL3JhcGlkc3NsLWFpYS5nZW90cnVzdC5jb20v cmFwaWRzc2wuY3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUF BwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0GCSqG SIb3DQEBBQUAA4IBAQC++fOee4+ffLtBGUEihOtPuuP44vDFrXQXEnV12I0+G29s lhUtrsVoL53rsDrAgmArzOVzxjFIjz54iY0wf2Nm1AvXM0pHXN+bG1sWG8h7gPPn Je9WIv8XUnhlzUZDS9ycPvXi1WjP0GdKdMq95hxrTaRvrRFwGUkwS24QNvXPKVWW pB5WOCtyRoCT+uLyAzFemYiYRZqdpaCNaiYfaBofbiN2oDbYTHOopNxWMJU5C5rT vYzU6Z37aCmAsi/BwbxLVrZqGrAYb9cfWeMHRLsUmE4KnZ6dCCt8dwZ00yL9LH5Z AzzScJPK6FAnOabLZny2C6xKPCAjEf3yf9ukj8xx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMMoZZVlVpKvo1bzzjFb IbcREt+tPtLBr6536Gl/5yfN2q6xgUAZsI6Zyq/k/BhSK69DkU8JqSvqmzif0Ax5 s0lRgUmQQXgXjHg/Po0WNfZhxoRALbSyGpKCCXtNRTtQdCnutYXcOM+fwPOFvC0f XMjMXB8svf4PYzeq6l/ken5QbebCK8UASgs/3ho3urqReIofvo/nDwfqo2DrsP3i FWEO6970EFCGu0543XbhwRa8fphAbjyFSvvIt/XToWbJql7/bGoqOWcIRdgpHI1m lpYIzu537qjUvkwaWIqa/I0quGrWG4Dw4HAHX6kgSs3CfPRrzdKBjXaUCXOvRoPb SwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 578106 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-21 06:51:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-24 14:21:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FLoB6Kp/RV05P4MqFube1rwMKq56-wIr' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT50613467' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)12' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.acs-rx.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18779505032938610897853695420554207735263562813180214892092601495901488290987895950640522897121121171534917095940916447071230694999899661447206088813830850371867021459072410688905747814872306264170962907475139871102738597725599009884222660221740644479447671389961682070755838851206864456367463135583684953585824542791548073068068256253414934370423110379757706089530350032379738000850338234682067356050990399677436942587490555493308060368920645683012021262146389216812578084062360021859354765743222440354052607463296450461199206118949452601948923753533363297871746640473195544828613434298080689401384833803343517440843 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acs-rx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acs-rx.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eb708f8011e5708e79131b377c7ef1d162189288 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00bef9f39e7b8f9f7cbb4119412284eb4fbae3f8e2f0c5ad7417127575d88d3e1b6f6c96152daec5682f9debb03ac082602bcce573c631488f3e78898d307f6366d40bd7334a475cdf9b1b5b161bc87b80f3e725ef5622ff17527865cd46434bdc9c3ef5e2d568cfd0674a74cabde61c6b4da46fad11701949304b6e1036f5cf295596a41e56382b72468093fae2f203315e998898459a9da5a08d6a261f681a1f6e2376a036d84c73a8a4dc563095390b9ad3bd8cd4e99dfb682980b22fc1c1bc4b56b66a1ab0186fd71f59e30744bb14984e0a9d9e9d082b7c770674d322fd2c7e59033cd27093cae8502739a6cb667cb60bac4a3c202311fdf27fdba48fcc71