*.indecomm.net
- Indecomm Global Services -
Issued by GeoTrust SSL CA
About this certificate
This digital certificate with serial number fa:e1 was issued on by GeoTrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
Indecomm Global Services
Company registration number:
hceOMrqhCvt0gzHJYpSWY8YfODT6sV82
Organization: Indecomm Global Services
Organization unit: IT
Organization: Indecomm Global Services
Organization unit: IT
State / Province:
Minnesota
Locality: Saint Paul
Country: US
Locality: Saint Paul
Country: US
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): fa:e1Serial Number (int): 64225
Serial Number lenght: 16 bits, 2 octets
SubjectKeyId: d5:ff:8e:98:55:95:e8:ce:48:e4:6f:6c:d9:1c:2f:40:c3:f5:b2:05
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a
Fingerprint (sha1): d2:3e:ab:86:2c:bf:80:15:63:f5:fe:03:7f:05:80:b2:b2:71:f7:2c
Fingerprint (sha256): 8e:58:e3:10:7b:fe:6f:19:9e:ed:a6:7a:35:fd:7d:69:74:bb:31:b4:ba:09:81:40:82:f0:44:15:66:fa:bd:8d
Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt
Revocation information
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crlCheck the revocation status for certificate *.indecomm.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.indecomm.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.indecomm.net
indecomm.net
indecomm.net
Other certificates including the domain name indecomm.net
(limited to 100 certificates)
im.indecomm.net
mortgage.indecomm.net
sni.cloudflaressl.com
mortgage.indecomm.net
*.indecomm.net
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
ssl419618.cloudflaressl.com
webmail.indecomm.net
www.indecomm.net
mortgage.indecomm.net
mortgage.indecomm.net
webmail.indecomm.net
mortgage.indecomm.net
*.indecomm.net
*.indecomm.net
sni.cloudflaressl.com
indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
indecomm.net
webmail.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
indecomm.net
*.indecomm.net
ssl419616.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mortgage.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
sni.cloudflaressl.com
*.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
webmail.indecomm.net
mortgage.indecomm.net
ssl419616.cloudflaressl.com
ssl419616.cloudflaressl.com
ssl419618.cloudflaressl.com
ssl419616.cloudflaressl.com
*.indecomm.net
ssl419618.cloudflaressl.com
indecomm.net
sni.cloudflaressl.com
ssl419618.cloudflaressl.com
mortgage.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419616.cloudflaressl.com
im.indecomm.net
*.indecomm.net
apps.indecomm.net
ssl419617.cloudflaressl.com
bgmonitor.indecomm.net
ssl419616.cloudflaressl.com
sni.cloudflaressl.com
sts.indecomm.net
ssl419618.cloudflaressl.com
apps.indecomm.net
*.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
*.indecomm.net
indecomm.net
webmail.indecomm.net
*.indecomm.net
ssl419618.cloudflaressl.com
im.indecomm.net
webmail.indecomm.net
indecomm.net
mortgage.indecomm.net
sni.cloudflaressl.com
im.indecomm.net
mortgage.indecomm.net
mortgage.indecomm.net
indecomm.net
ssl419617.cloudflaressl.com
mortgage.indecomm.net
bgmonitor.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
im.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
ssl419617.cloudflaressl.com
mortgage.indecomm.net
sni.cloudflaressl.com
mortgage.indecomm.net
*.indecomm.net
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
ssl419618.cloudflaressl.com
webmail.indecomm.net
www.indecomm.net
mortgage.indecomm.net
mortgage.indecomm.net
webmail.indecomm.net
mortgage.indecomm.net
*.indecomm.net
*.indecomm.net
sni.cloudflaressl.com
indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
indecomm.net
webmail.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
indecomm.net
*.indecomm.net
ssl419616.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mortgage.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
sni.cloudflaressl.com
*.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
webmail.indecomm.net
mortgage.indecomm.net
ssl419616.cloudflaressl.com
ssl419616.cloudflaressl.com
ssl419618.cloudflaressl.com
ssl419616.cloudflaressl.com
*.indecomm.net
ssl419618.cloudflaressl.com
indecomm.net
sni.cloudflaressl.com
ssl419618.cloudflaressl.com
mortgage.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419616.cloudflaressl.com
im.indecomm.net
*.indecomm.net
apps.indecomm.net
ssl419617.cloudflaressl.com
bgmonitor.indecomm.net
ssl419616.cloudflaressl.com
sni.cloudflaressl.com
sts.indecomm.net
ssl419618.cloudflaressl.com
apps.indecomm.net
*.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
*.indecomm.net
indecomm.net
webmail.indecomm.net
*.indecomm.net
ssl419618.cloudflaressl.com
im.indecomm.net
webmail.indecomm.net
indecomm.net
mortgage.indecomm.net
sni.cloudflaressl.com
im.indecomm.net
mortgage.indecomm.net
mortgage.indecomm.net
indecomm.net
ssl419617.cloudflaressl.com
mortgage.indecomm.net
bgmonitor.indecomm.net
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419617.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.indecomm.net
im.indecomm.net
sni.cloudflaressl.com
webmail.indecomm.net
ssl419617.cloudflaressl.com
Certificate
The complete raw certificate details for *.indecomm.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmDCCA4CgAwIBAgIDAPrhMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTExMTAyOTExMjYxN1oXDTEyMTAzMDIzMTI1NFowgaoxKTAnBgNVBAUT IGhjZU9NcnFoQ3Z0MGd6SEpZcFNXWThZZk9EVDZzVjgyMQswCQYDVQQGEwJVUzES MBAGA1UECBMJTWlubmVzb3RhMRMwEQYDVQQHEwpTYWludCBQYXVsMSEwHwYDVQQK ExhJbmRlY29tbSBHbG9iYWwgU2VydmljZXMxCzAJBgNVBAsTAklUMRcwFQYDVQQD DA4qLmluZGVjb21tLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM7o0IL8CZriu+0d0Ea9f4COhiGoTrch2zjJFXwZbYpenIM4xeb0VcfF8GgqtuNv g4L0xfUZrm/rNCPq1/251C7fDrpvXjtFlMfcyLl6B/A3kY5PnkyeiCPAtt7JAOQM w7Vyf890r4mPkr5qeLKfpPnc+JYH96SMmSIOR5RGJH1jr/fP1GZf0fo/yYktNwbg 5QPDXkXI8ASS+zPUQs62pS3TSTLlYuI8CxsbfwDTmMK3vxRuXGoUAXbH3WItYDdM /vKu5BmGb+BETxy49S4oeujBU+MHAlGWaih7K3HCE/jz37wxswz4/yi21vxf28M0 XB57YY3SzNIx1lZpL6p7ZIcCAwEAAaOCAS4wggEqMB8GA1UdIwQYMBaAFEJ5VBth zVUrPmPVPEhX9Z/7Rc5KMA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwJwYDVR0RBCAwHoIOKi5pbmRlY29tbS5uZXSCDGluZGVj b21tLm5ldDA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vZ3Rzc2wtY3JsLmdlb3Ry dXN0LmNvbS9jcmxzL2d0c3NsLmNybDAdBgNVHQ4EFgQU1f+OmFWV6M5I5G9s2Rwv QMP1sgUwDAYDVR0TAQH/BAIwADBDBggrBgEFBQcBAQQ3MDUwMwYIKwYBBQUHMAKG J2h0dHA6Ly9ndHNzbC1haWEuZ2VvdHJ1c3QuY29tL2d0c3NsLmNydDANBgkqhkiG 9w0BAQUFAAOCAQEAKwkL4dPrx+DdT6x/G1IQsaiuUXKARRztQP793nQn24/typWO I901tPf9LnsQUbx53y5hXtH0gg3EZIQd2iAR4bSroPCwqPP3SITXXF4gMubjLZWZ sCLGA0GroeuQKe1rhjtgJ8ZeeSKGjQ4H/ARC3C4CgmeDeXYsOsZaeZp1w5WUJA0b YaYMHZ7a1XGAFhSrq2IL3qOO82y//rVcWPs/AXyblYIyyZWNwmQzGqlJrkRNJBg/ DdVmN3CPiFD3Wm3qHEa2P0yEoIVQULe8unn/JyDba+EI6Ar8z2N48ME0PSrBLHsx ebKbBzl/e9suC6w4GjcynfXAtGTISseDRl0kFg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzujQgvwJmuK77R3QRr1/ gI6GIahOtyHbOMkVfBltil6cgzjF5vRVx8XwaCq242+DgvTF9Rmub+s0I+rX/bnU Lt8Oum9eO0WUx9zIuXoH8DeRjk+eTJ6II8C23skA5AzDtXJ/z3SviY+Svmp4sp+k +dz4lgf3pIyZIg5HlEYkfWOv98/UZl/R+j/JiS03BuDlA8NeRcjwBJL7M9RCzral LdNJMuVi4jwLGxt/ANOYwre/FG5cahQBdsfdYi1gN0z+8q7kGYZv4ERPHLj1Lih6 6MFT4wcCUZZqKHsrccIT+PPfvDGzDPj/KLbW/F/bwzRcHnthjdLM0jHWVmkvqntk hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 64225 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-29 11:26:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-30 23:12:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hceOMrqhCvt0gzHJYpSWY8YfODT6sV82' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Paul' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indecomm Global Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.indecomm.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26119895931144856132600097145880218672745746849404469321320780775211175446757881725017360535437134041581533800305483201725463689992088505100429512073738484342999823048406162944747578598290262916069260919248839006314029134279045471077406213373643602020905594093118857358745081273200642312394981906829949380274431963752808448164582566828359655494317367083871664995196408664429969016839530857487827681294822878370148294799924029126231787528411854296615865080979201232974889537664032382885098934732227857046630022729064036237038251383398752071591181057272126473809826943328436497635168961428654280318296826115853045687431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indecomm.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indecomm.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d5ff8e985595e8ce48e46f6cd91c2f40c3f5b205 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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