www.theformationscompany.com

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 94:a8 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.theformationscompany.com,OU=GT31652968+OU=www.geotrust.com/resources/cps+OU=Domain Control Validated - GeoTrust(R) SSL Trial

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 94:a8
Serial Number (int): 38056
Serial Number lenght: 16 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 4a:62:a8:2b:a6:07:5f:b3:34:01:d1:97:ff:d3:82:9f:b2:72:2a:a4
Fingerprint (sha256): 89:11:85:75:74:73:e9:37:77:68:4b:ff:22:55:2c:9a:6e:40:82:77:26:a0:8a:e5:65:3b:fa:b1:89:01:a2:6f

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate www.theformationscompany.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.theformationscompany.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.theformationscompany.com
theformationscompany.com

Other certificates including the domain name theformationscompany.com

(limited to 100 certificates)
landing.theformationscompany.com
www.theformationscompany.com
wpstage.theformationscompany.com
tfc-stage-aws.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
landing.theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
stage.api.nbis.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
new.theformationscompany.com
landing.theformationscompany.com
wpdev.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
beta.theformationscompany.com
v3.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
cms.theformationscompany.com
www.theformationscompany.com
beta.theformationscompany.com
wpstage.theformationscompany.com
tfc-stage-aws.theformationscompany.com
wpdev.theformationscompany.com
tfc-stage-aws.theformationscompany.com
landing.theformationscompany.com
landing.theformationscompany.com
tfc-stage-aws.theformationscompany.com
*.theformationscompany.com
beta.theformationscompany.com
cms.theformationscompany.com
new.theformationscompany.com
tfc-stage-aws.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
tfc-prod-aws.theformationscompany.com
lzf-stage-aws.legalzoom.co.uk
new.theformationscompany.com
tfc-stage-aws.theformationscompany.com
wpdev.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
stage.api.nbis.theformationscompany.com
prod-test.theformationscompany.com
theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
wpdev.theformationscompany.com
www.theformationscompany.com
new.theformationscompany.com
tfc-stage-aws.theformationscompany.com
stage.api.nbis.theformationscompany.com
www.theformationscompany.com
www.theformationscompany.com
cms.theformationscompany.com
theformationscompany.com
cms.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
new.theformationscompany.com
wpdev.theformationscompany.com
cms.theformationscompany.com
landing.theformationscompany.com
wpdev.theformationscompany.com
cms.theformationscompany.com
www.theformationscompany.com
landing.theformationscompany.com
landing.theformationscompany.com
www.theformationscompany.com
wpdev.theformationscompany.com
landing.theformationscompany.com
tfc-stage-aws.theformationscompany.com
www.theformationscompany.com
wpdev.theformationscompany.com
wpdev.theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
wpstage.theformationscompany.com
stage.api.nbis.theformationscompany.com
theformationscompany.com
beta.theformationscompany.com
theformationscompany.com
wpstage.theformationscompany.com
www.theformationscompany.com
cms.theformationscompany.com
theformationscompany.com
www.theformationscompany.com
email.theformationscompany.com
www.theformationscompany.com
email.theformationscompany.com
landing.theformationscompany.com
new.theformationscompany.com
www.theformationscompany.com

Certificate

The complete raw certificate details for www.theformationscompany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIDAJSoMA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh
dGVkIFNTTDEgMB4GA1UEAxMXR2VvVHJ1c3QgRFYgU1NMIENBIC0gRzQwHhcNMTUw
MTI4MjI0OTE0WhcNMTUwMzAxMjE0NzM0WjCBoDETMBEGA1UECxMKR1QzMTY1Mjk2
ODEnMCUGA1UECxMed3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMTkwNwYD
VQQLEzBEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQgLSBHZW9UcnVzdChSKSBTU0wg
VHJpYWwxJTAjBgNVBAMTHHd3dy50aGVmb3JtYXRpb25zY29tcGFueS5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrsgMZDP5HQSdOJaaBUbPUIzBr
CwuLDzCwgueqo6qFcsPxdw7dJCtrAJkvcHtaDJJ9pYyeKqKeGPqAqhELXkYmUu5S
moBQVlUDUBs8IzpRbxZLn0Vmq7+Nv7JdevvCDfWo5mOEB465R69mNJ6v0G1pbgmF
xE0b/2SA3Uv76QRikTJVM9Iox3VorEwMVtPyDNU8vi0n5o4J3QrkZjRRa3pW+EJY
CoZ1D9jZ/z9H34gezxefT3Lzeadr4LaDNLdYnyp1M03WkLGG8CP94vQOFiUXC+Ss
V7US9G+iYJC3PHLmUgr4vF+s7nHryogxvAov14MIqjgvPN/YI1WE++eAlFspAgMB
AAGjggGHMIIBgzAfBgNVHSMEGDAWgBQLUOx37yqb/+wDoQr/rcbkKhjHPjBXBggr
BgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9ndS5zeW1jZC5jb20wJgYI
KwYBBQUHMAKGGmh0dHA6Ly9ndS5zeW1jYi5jb20vZ3UuY3J0MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwQQYDVR0RBDowOIIc
d3d3LnRoZWZvcm1hdGlvbnNjb21wYW55LmNvbYIYdGhlZm9ybWF0aW9uc2NvbXBh
bnkuY29tMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ndS5zeW1jYi5jb20vZ3Uu
Y3JsMAwGA1UdEwEB/wQCMAAwWgYDVR0gBFMwUTBPBgpghkgBhvhFAQc2MEEwPwYI
KwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVw
b3NpdG9yeS9sZWdhbDANBgkqhkiG9w0BAQsFAAOCAQEAfzDSERKnc6scmbTfY3Tp
hyjFIhRZeL4yHLJQV3ko4qfd03vYhowflxrvjXx4pXdMav5MlVnILdFIC4mgTBFs
MdOnmlVrs+B+xRU0oGCIkq0bR2yll/Q788wHwaKE4GHaun18ZG9/jCvdmmRwag+A
h3TzMDiGCuGtNSs0Gmw4MkgeNVEGl7wl5TelPZzp6GQee8ZwuA6VJjW3y8VP1Fnt
41WZRWj5gIE3QLiLTu9TfJx8m3uHKWGaeCeY7chKgf5/Z2FUKO0a9TAmtwQF2uO/
d54EpRzaAtzgCGll0TaoN0gKB5+SnorxcMF853HvsXI007TQd+hwuiYIB49SAAV2
fw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7IDGQz+R0EnTiWmgVGz
1CMwawsLiw8wsILnqqOqhXLD8XcO3SQrawCZL3B7WgySfaWMniqinhj6gKoRC15G
JlLuUpqAUFZVA1AbPCM6UW8WS59FZqu/jb+yXXr7wg31qOZjhAeOuUevZjSer9Bt
aW4JhcRNG/9kgN1L++kEYpEyVTPSKMd1aKxMDFbT8gzVPL4tJ+aOCd0K5GY0UWt6
VvhCWAqGdQ/Y2f8/R9+IHs8Xn09y83mna+C2gzS3WJ8qdTNN1pCxhvAj/eL0DhYl
FwvkrFe1EvRvomCQtzxy5lIK+LxfrO5x68qIMbwKL9eDCKo4Lzzf2CNVhPvngJRb
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-28 22:49:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-01 21:47:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT31652968'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.geotrust.com/resources/cps'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - GeoTrust(R) SSL Trial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theformationscompany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21674531187840371637411974927797162800389789106793416141134558905497311769014379640327123552975149401317558860411684462372214020165300335241220467998408300388929817828089051801625964895526764535733005976282443990683055240448410334990199513744173134744496658079324617775414542524733304812609337699082393273709291337262781668973905004597583780848675440327833207401811270464748458800295664977507486887115404272398217992159938676373829700483659853921366195939310208997483590878054179524913033909880232455820741321231759501443851781341168124300859146016693824577544137330893931383506686025960614625368234358608723744938793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theformationscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theformationscompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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