Plazamail2016.geico.net

- GEICO -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:18:67:36:47:00:66:a3:b8:0e:e6:4e:0f:22:18:f3:c8:14:95 was issued on by Trustwave Holdings, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GEICO

Organization: GEICO
State / Province: Maryland
Locality: Chevy Chase
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:18:67:36:47:00:66:a3:b8:0e:e6:4e:0f:22:18:f3:c8:14:95
Serial Number (int): 158231032482842445854581395669832871243682965
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 75:73:2f:1c:74:f5:33:f9:5f:e3:a7:95:49:d0:bf:32:06:1d:21:5b
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): 31:7d:b0:7f:a6:bd:bd:45:64:03:ad:1a:76:4a:6c:93:89:77:15:85
Fingerprint (sha256): 8e:b7:10:7d:c5:c5:a3:38:9a:0b:85:e6:a3:47:6e:cf:21:9d:ba:24:55:3e:f0:92:13:f7:3c:11:e8:11:1a:04

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate Plazamail2016.geico.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Plazamail2016.geico.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Plazamail2016.geico.net
fredmail2016.geico.net
autodiscover.geico.com
mail.geico.com
mailint.geico.net

Other certificates including the domain name geico.net

(limited to 100 certificates)
Plazamail2016.geico.net
frws2682.geico.net
FRWS7845.geico.net
FredMail2016.geico.net
telpdchvg01.anc.geico.net
CHWS7104.geico.net
CHWS7103.geico.net
phrpd6slb11.geico.net
CHWS7102.geico.net
FredMail2016.geico.net
CHWS7102.geico.net
telpdchvg02.anc.geico.net
CHWS7102.geico.net
CHWS7104.geico.net
cavemail.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
FRWS4732.geico.net
Plazamail2016.geico.net
FRWS4731.geico.net
CHWS7103.geico.net
telexabvg01.anc.geico.com
FRUA9173.geico.net
gfs.private.geico.com
FRWS4732.geico.net
Plazamail2016.geico.net
CHWS3227.geico.net
Plazamail2016.geico.net
gfsnp.private.geico.com
FredMail2016.geico.net
FredMail2016.geico.net
FredMail2016.geico.net
FRWS7845.geico.net
CHWS3227.geico.net
rdspd1chweb01.geico.net
gfs.private.geico.com
FRWS7847.geico.net
FRWS4731.geico.net
mail.geico.com
CHWS7103.geico.net
telpddavg02.anc.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
telpdabvg01.anc.geico.net
FRUA9171.geico.net
FRWS4731.geico.net
FRWS7847.geico.net
FRWS7845.geico.net
FRWS7846.geico.net
packageregistry-np.geico.net
FredMail2016.geico.net
mail.geico.com
mail.geico.com
FRWS7845.geico.net
FRUA9171.geico.net
CHWS7102.geico.net
CHWS3230.geico.net
voltage-pp-0000.private2.geicoddc.net
gfsnp.private.geico.com
CHWS7103.geico.net
CHWS7103.geico.net
FRWS7847.geico.net
telpddavg01.anc.geico.net
PLUA9175.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
Plazamail2016.geico.net
logoncop.geico.net
FredMail2016.geico.net
PLUA9172.geico.net
telpdabvg02.anc.geico.net
*.ise.geico.net
CHWS7104.geico.net
gfs.private.geico.com
FRWS7846.geico.net
FredMail2016.geico.net
*.ise.geico.net
kashmail.geico.net
telexabvg01.anc.geico.com
gfs.private.geico.com
FRWS4733.geico.net
FRWS7846.geico.net
telexabvg01.anc.geico.com
telpddavg01.anc.geico.net
FRUA9171.geico.net
FRWS7845.geico.net
telexabvg02.anc.geico.com
PLUA9176.geico.net
*.ise.geico.net
telpddavg01.anc.geico.net
telpddavg02.anc.geico.net
FRWS7846.geico.net
Plazamail2016.geico.net
FRWS7845.geico.net
*.ise.geico.net
FRWS7847.geico.net
CHWS7104.geico.net
gfsnp.private.geico.com

Certificate

The complete raw certificate details for Plazamail2016.geico.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgITBxhnNkcAZqO4DuZODyIY88gUlTANBgkqhkiG9w0BAQsF
ADCBhjEvMC0GA1UEAxMmVHJ1c3R3YXZlIE9WIFNIQTI1NiBQcmUtQ2VydGlmaWNh
dGUgQ0ExITAfBgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjEQMA4GA1UE
BxMHQ2hpY2FnbzERMA8GA1UECBMISWxsaW5vaXMxCzAJBgNVBAYTAlVTMB4XDTIw
MDIyMTEyMzg0NFoXDTIyMDEyNzE4Mzg0NFowaDEgMB4GA1UEAxMXUGxhemFtYWls
MjAxNi5nZWljby5uZXQxDjAMBgNVBAoTBUdFSUNPMRQwEgYDVQQHEwtDaGV2eSBD
aGFzZTERMA8GA1UECBMITWFyeWxhbmQxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6W1gtMvHhboU+/pn2in/6Uuo5/xy6vXMJ2s
LPm342rYXphc49lN/DMhpHFlvV8LEF5lc1MtKFaJ28HYM+7gwztC+dCIUGs0EwiV
TQQtCS6qwJD+45j2XI8CHVQZsTR7ndjyFfyN9423T+mpS6RjoSQlcUy3RlmT132u
HKfFMsXOgevcyntTI8qcOdDP0pWQRD0VzJ9O2EbtRqDqqx/nT3PCYBBk9aS2RxZn
U266P2HwF0j3XxFX6pLkcuABtcEY8Gdme6fsEhm/Bhh6eRMrSEeCQDkY6I0fUNro
ZVaoydpzZBXBLOSohS2DZJTv5PgpVOoBaDbbeVMr+XWYi4mnUwIDAQABo4IB+TCC
AfUwDAYDVR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwIGCCsGAQUFBwMBMB0GA1UdDgQWBBR1cy8cdPUz+V/jp5VJ0L8yBh0hWzAf
BgNVHSMEGDAWgBTAzkywBkghC030paz3a/e63U4ETzA/BgNVHSAEODA2MDQGBmeB
DAECAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3NzbC50cnVzdHdhdmUuY29tL0NB
MHUGA1UdEQRuMGyCF1BsYXphbWFpbDIwMTYuZ2VpY28ubmV0ghZmcmVkbWFpbDIw
MTYuZ2VpY28ubmV0ghZhdXRvZGlzY292ZXIuZ2VpY28uY29tgg5tYWlsLmdlaWNv
LmNvbYIRbWFpbGludC5nZWljby5uZXQwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDov
L2NybC50cnVzdHdhdmUuY29tL09WQ0EyX0wxLmNybDBxBggrBgEFBQcBAQRlMGMw
JgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRydXN0d2F2ZS5jb20vMDkGCCsGAQUF
BzAChi1odHRwOi8vc3NsLnRydXN0d2F2ZS5jb20vaXNzdWVycy9PVkNBMl9MMS5j
cnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGN558FF
vCCwRNerPNvedrt0GodOm/cizm3MCxuNpg8fU4+2q79gI0endxN1kPtW6x7GMFZx
a33/TVLn8U/Xew8NOslGo7ZAFp8A1IQe1a/wHMZH/COzw/qgLqBZXoiawA9Ewtdz
vdWGCaXavUDQBtDKD3wAA1F5Sao5wWO2fljKsxpCpVPlIqByh0NGc/p5lHai+n7R
4kNpygyrErDhiRTwvqHOT0I/lnbu+lSmt5HjfZc/PtcA+TWcJlsGe4c3tgsVg3ds
CDBxqvPSXTLPriJfWnqp6gEwR8vB/DiwTbMh5lqyHsafZc4BMNwxWhsPeOyZuXYJ
LMaV8HBtHGzELYA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6W1gtMvHhboU+/pn2in
/6Uuo5/xy6vXMJ2sLPm342rYXphc49lN/DMhpHFlvV8LEF5lc1MtKFaJ28HYM+7g
wztC+dCIUGs0EwiVTQQtCS6qwJD+45j2XI8CHVQZsTR7ndjyFfyN9423T+mpS6Rj
oSQlcUy3RlmT132uHKfFMsXOgevcyntTI8qcOdDP0pWQRD0VzJ9O2EbtRqDqqx/n
T3PCYBBk9aS2RxZnU266P2HwF0j3XxFX6pLkcuABtcEY8Gdme6fsEhm/Bhh6eRMr
SEeCQDkY6I0fUNroZVaoydpzZBXBLOSohS2DZJTv5PgpVOoBaDbbeVMr+XWYi4mn
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158231032482842445854581395669832871243682965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 12:38:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-27 18:38:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plazamail2016.geico.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEICO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chevy Chase'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20658557876446717384089548915090608604126910871201172680617083244511339406665063382002869625403002377121600352606188444037297070531464199288215011407327594802731060918262194894521744175229874653724982163226463877107073243183866988989813403803957977472731966126047235189713724652084903550135216823939003095034820087949445095595179798202155606090406034568727992798521393066755514733680689717172469837758808240318221438018432424452210711546891747937834943150284978395947614847317533125079747956222709625898742692443049837096061409575377552236913026471837900296608371139929688507659751527987933561906333583732646580168531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75732f1c74f533f95fe3a79549d0bf32061d215b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Plazamail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredmail2016.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailint.geico.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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