*.cok.dk

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0e:21:3b was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=2SlCoxg7faUONnTW-9YrF6I8UpmHFBXP,CN=*.cok.dk,OU=GT55523725+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:21:3b
Serial Number (int): 926011
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 98:20:7a:1c:35:19:80:61:9a:cc:65:30:90:db:c7:71:56:23:d7:63
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 8b:ce:7a:ab:49:09:a9:30:f4:94:e5:2a:a4:3d:b5:06:fe:89:19:53
Fingerprint (sha256): 90:3e:ef:ce:b3:5e:16:84:c9:a4:96:53:b9:c0:91:72:01:23:0a:df:4e:f0:44:4a:65:ee:04:c4:07:3a:bc:23

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.cok.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cok.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cok.dk
cok.dk

Other certificates including the domain name cok.dk

(limited to 100 certificates)
sipdir02.lync.oncirque.net
cok.eu
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cas.frontdata.dk
arena.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
sipdir02.lync.oncirque.net
*.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
arena.cok.dk
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
uddannelse.cok.dk
sipdir02.lync.oncirque.net
cas.frontdata.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
uddannelse.cok.dk
cok.dk
cas.frontdata.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cok.eu
*.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
arena.cok.dk
cok.eu
cok.eu
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cas.frontdata.dk
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
event.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
komponent.dk
sipdir02.lync.oncirque.net
auth.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
*.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
arena.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net

Certificate

The complete raw certificate details for *.cok.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIDDiE7MA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTMwOTIyMDkxOTMzWhcNMTcwOTIzMTUyMzA1WjCBtzEpMCcGA1UEBRMgMlNs
Q294ZzdmYVVPTm5UVy05WXJGNkk4VXBtSEZCWFAxEzARBgNVBAsTCkdUNTU1MjM3
MjUxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg
KGMpMTMxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk
U1NMKFIpMREwDwYDVQQDDAgqLmNvay5kazCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKsE2PzrVOIsiQxRs+wiXlMUOMAFCrqhKDXIKUfBD8zAbyWJep0R
a0D3dxNyZqyU/WHWxPlLeC2CmBX1bRhUSjRE6GCV3XT2wVWjN7Vm2sfxNgZwM5M4
EkyRL86r76xdaBnw84FVmELm8podht6UQfj9uvp5lZMnyR559ZXgVDuWMXxhp8Ky
5IJgADKuiMacwJipLVXsgo20dgyTR3FtRqKSK2zQnosjJca2qwgFhgBvaX3UnZUM
LAUptvIPuEJps1UGijWlJ0Pn0CvejjBUecCJZNrwJTgt9ff8Mh5wFhcjY0SQaTiO
OWBeZBLamGap9/lB9b7sXn5UdZdqHI0EBVkCAwEAAaOCAaswggGnMB8GA1UdIwQY
MBaAFGtpPWoYQkrdjwJlOf01JIZ4kRYwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0RBBQwEoIIKi5jb2suZGuCBmNv
ay5kazBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vcmFwaWRzc2wtY3JsLmdlb3Ry
dXN0LmNvbS9jcmxzL3JhcGlkc3NsLmNybDAdBgNVHQ4EFgQUmCB6HDUZgGGazGUw
kNvHcVYj12MwDAYDVR0TAQH/BAIwADB4BggrBgEFBQcBAQRsMGowLQYIKwYBBQUH
MAGGIWh0dHA6Ly9yYXBpZHNzbC1vY3NwLmdlb3RydXN0LmNvbTA5BggrBgEFBQcw
AoYtaHR0cDovL3JhcGlkc3NsLWFpYS5nZW90cnVzdC5jb20vcmFwaWRzc2wuY3J0
MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVodHRwOi8v
d3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0GCSqGSIb3DQEBBQUAA4IB
AQCAkvfevevfE+qOuLGdKpDA1J0tE8x/mPBg6ywahAk4teEues7xpMLarAODnX+c
A8d9fsvVwOaBbJlTeGuQgepwkMJTGNU5vgAEPlrHF/7c/owK10sTHCVn5yCqrrBk
LdAhlu23l76Q4x/r//tBSnUrmrxF1dyXtoRSYkEWAugm+DdQ9CC0ujYZOsXk+I3v
9r/S8H+OxmQf4TYvlx6LQbcl8TFnvV0qK/662jevB8VPUtNc+ghd9ovrtxAHH9qp
nkcgQypC9FCGIMSq8NHq3k+IIKjP/thbCCTyC8H6NZzFPU2MBp7FIfR9mGkdL8Bb
XF+hBMIVrAQSnS00VUhTqnks
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwTY/OtU4iyJDFGz7CJe
UxQ4wAUKuqEoNcgpR8EPzMBvJYl6nRFrQPd3E3JmrJT9YdbE+Ut4LYKYFfVtGFRK
NEToYJXddPbBVaM3tWbax/E2BnAzkzgSTJEvzqvvrF1oGfDzgVWYQubymh2G3pRB
+P26+nmVkyfJHnn1leBUO5YxfGGnwrLkgmAAMq6IxpzAmKktVeyCjbR2DJNHcW1G
opIrbNCeiyMlxrarCAWGAG9pfdSdlQwsBSm28g+4QmmzVQaKNaUnQ+fQK96OMFR5
wIlk2vAlOC319/wyHnAWFyNjRJBpOI45YF5kEtqYZqn3+UH1vuxeflR1l2ocjQQF
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 926011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-22 09:19:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-23 15:23:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2SlCoxg7faUONnTW-9YrF6I8UpmHFBXP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT55523725'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cok.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21589140594406219138458328800438432424173895092835202750377638577345796223383159220554685126103991422195572885469776049844959020437724993436459149688553824116262556362486611433229827623754689618295167061347176909634546472192089431169904571887005401261766966549348601029914889801398077935924513723796617445857245716634524557459723498593912476281318283314020291690776293754586184446164887421313299614216076831442317237343875428711788102002522834792717467822615575694250151431652172792913205627110141916415394184754325620092764431351085631715589775357537047564913494244255281727342127396682578467877953684089745392797017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cok.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cok.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98207a1c351980619acc653090dbc7715623d763
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008092f7debdebdf13ea8eb8b19d2a90c0d49d2d13cc7f98f060eb2c1a840938b5e12e7acef1a4c2daac03839d7f9c03c77d7ecbd5c0e6816c9953786b9081ea7090c25318d539be00043e5ac717fedcfe8c0ad74b131c2567e720aaaeb0642dd02196edb797be90e31febfffb414a752b9abc45d5dc97b6845262411602e826f83750f420b4ba36193ac5e4f88deff6bfd2f07f8ec6641fe1362f971e8b41b725f13167bd5d2a2bfebada37af07c54f52d35cfa085df68bebb710071fdaa99e4720432a42f4508620c4aaf0d1eade4f8820a8cffed85b0824f20bc1fa359cc53d4d8c069ec521f47d98691d2fc05b5c5fa104c215ac04129d2d34554853aa792c