legalhold.gecompany.com
- General Electric Company -
Issued by Trusted Secure Certificate Authority
About this certificate
This digital certificate with serial number 12:24:ba:60:64:f7:48:0f:06:19:85:66:64:a8:8c:28 was issued on by Trusted Secure Certificate Authority.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
General Electric Company
Organization:
General Electric Company
Organization unit: Provided by General Electric Company
Organization unit: Enterprise SSL
Organization unit: Provided by General Electric Company
Organization unit: Enterprise SSL
Address:
3135 Easton Turnpike
Postal code: 06828
State / Province: Connecticut
Locality: Fairfield
Country: US
Postal code: 06828
State / Province: Connecticut
Locality: Fairfield
Country: US
Trusted Secure Certificate Authority
Organization:
Trusted Secure Certificate Authority
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 12:24:ba:60:64:f7:48:0f:06:19:85:66:64:a8:8c:28Serial Number (int): 24116806776373066034077665234053008424
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: e8:93:88:00:1a:4a:e4:1f:44:d0:2e:f6:d0:5a:f8:e2:36:9e:14:3f
AuthorityKeyId: cc:03:5b:96:5a:9e:16:cc:26:1e:bd:a3:70:fb:e3:cb:79:19:fc:4d
Fingerprint (sha1): 9e:fb:00:b3:f9:8b:4a:e4:c6:66:56:31:8d:db:9f:5f:18:58:1b:48
Fingerprint (sha256): 93:9a:d3:45:64:59:0e:03:a1:09:bd:9d:3b:75:f1:fb:05:ad:57:b1:0a:c7:b7:35:10:0f:04:00:87:08:72:79
Issuing Certificate URL: http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt
Revocation information
OCSP Server: http://ocsp.csctrustedsecure.comCRL Distribution Point: http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl
Check the revocation status for certificate legalhold.gecompany.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for legalhold.gecompany.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
legalhold.gecompany.com
www.legalhold.gecompany.com
www.legalhold.gecompany.com
Other certificates including the domain name gecompany.com
(limited to 100 certificates)
*.ecomex.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com
fss.gecompany.com
svn.gecompany.com
federation.gecompany.com
federation.gecompany.com
pledge.gecompany.com
live.gallery.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
fss.gecompany.com
affiliateservices.gecompany.com
*.gecompany.com
*.mobilere.gecompany.com
apm-rm-mt.apps.ge.com
federation.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.prb.gecompany.com
aaf.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
affiliateservices.stage.gecompany.com
stage.kenexa-b2b.gecompany.com
affiliateservices.stage.gecompany.com
fss.stage.gecompany.com
fss.gecompany.com
pwb2b.gecompany.com
affiliateservices.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
*.gallery.gecompany.com
affiliateservices.stage.gecompany.com
kenexa-b2b.gecompany.com
affiliateservices.gecompany.com
aaf.gecompany.com
stage.mobilere.gecompany.com
fss.gecompany.com
lease.gecompany.com
affiliateservices.gecompany.com
federation.gecompany.com
gensuite.gecompany.com
prod.fosmobile.gecompany.com
stage.gets.gecompany.com
imperva.com
affiliateservices.gecompany.com
*.prb.gecompany.com
fosmobile.gecompany.com
pwb2bdev.gecompany.com
authentication.gecompany.com
*.gets.gecompany.com
kenexa-b2b.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
*.smallworldwide.com
*.smallworldwide.com
aaf.gecompany.com
fss.stage.gecompany.com
affiliateservices.stage.gecompany.com
fosmobile.gecompany.com
fosmobile.gecompany.com
pledge.gecompany.com
gensuite.gecompany.com
*.pledge.gecompany.com
affiliateservices.gecompany.com
stage.prb.gecompany.com
affiliateservices.gecompany.com
federation.dev.gecompany.com
stage.kenexa-b2b.gecompany.com
kenexa-b2b.gecompany.com
fss.stage.gecompany.com
*.pledge.gecompany.com
svn.gecompany.com
stage.cremobile.gecompany.com
unicom.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
stage.prb.gecompany.com
fosmobile.gecompany.com
vise.gecompany.com
imperva.com
prb.gecompany.com
affiliateservices.stage.gecompany.com
volunteers.gecompany.com
lease.gecompany.com
mobilere.gecompany.com
stage.pledge.gecompany.com
affiliateservices.gecompany.com
legalhold.gecompany.com
vise.gecompany.com
stage.gets.gecompany.com
pledge.gecompany.com
svn.gecompany.com
prb.gecompany.com
stage.fosmobile.gecompany.com
fss.gecompany.com
stage.prb.gecompany.com
cremobile.gecompany.com
files.gecompany.com
stage.prb.gecompany.com
hlvdi.gecompany.com
Certificate
The complete raw certificate details for legalhold.gecompany.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIQEiS6YGT3SA8GGYVmZKiMKDANBgkqhkiG9w0BAQUFADBr MQswCQYDVQQGEwJVUzEtMCsGA1UEChMkVHJ1c3RlZCBTZWN1cmUgQ2VydGlmaWNh dGUgQXV0aG9yaXR5MS0wKwYDVQQDEyRUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0 ZSBBdXRob3JpdHkwHhcNMTEwNDE5MDAwMDAwWhcNMTMwNTE4MjM1OTU5WjCB8zEL MAkGA1UEBhMCVVMxDjAMBgNVBBETBTA2ODI4MRQwEgYDVQQIEwtDb25uZWN0aWN1 dDESMBAGA1UEBxMJRmFpcmZpZWxkMR0wGwYDVQQJExQzMTM1IEVhc3RvbiBUdXJu cGlrZTEhMB8GA1UEChMYR2VuZXJhbCBFbGVjdHJpYyBDb21wYW55MS0wKwYDVQQL EyRQcm92aWRlZCBieSBHZW5lcmFsIEVsZWN0cmljIENvbXBhbnkxFzAVBgNVBAsT DkVudGVycHJpc2UgU1NMMSAwHgYDVQQDExdsZWdhbGhvbGQuZ2Vjb21wYW55LmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJJn0mHOy+E4QzmLWTRa 9rSebd7nkLuUI+583fN71Ggjbn/acSNI0eZVo0AtfZUvGpMS7WlSifRE3vCxe6oz 0BcvXEH5iz7wdJuYZUCjQgNaUdG+rfPsz17yzolSxCOH8RnuRGDTI9/Ehy4pe0BK dy4fioY9EDIZcuz5OXXajPOKedl1XEV4o/0/YY6OlpHpjJrY0JBGL+EMBRfx0Qra xQhL5pQ8jxsCvLdvLlBCG6zKdQHn21CsA0N/lj5Y6JwpTuWHZZtR6Kck5cdOUPpE CfS7kHY3ZmRwJzvrB70bfVl61dBgwCMtZdQ/hqSeuT8aQnJJYMzEruRL2dkhW7E8 1FcCAwEAAaOCAgkwggIFMB8GA1UdIwQYMBaAFMwDW5ZanhbMJh69o3D748t5GfxN MB0GA1UdDgQWBBTok4gAGkrkH0TQLvbQWvjiNp4UPzAOBgNVHQ8BAf8EBAMCBaAw DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVQYD VR0gBE4wTDBABgsrBgEEAbIxAQICCDAxMC8GCCsGAQUFBwIBFiNodHRwOi8vd3d3 LmNzY3RydXN0ZWRzZWN1cmUuY29tL2NwczAIBgZngQwBAgIwWAYDVR0fBFEwTzBN oEugSYZHaHR0cDovL2NybC5jc2N0cnVzdGVkc2VjdXJlLmNvbS9UcnVzdGVkU2Vj dXJlQ2VydGlmaWNhdGVBdXRob3JpdHlfMy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGD MFMGCCsGAQUFBzAChkdodHRwOi8vY3J0LmNzY3RydXN0ZWRzZWN1cmUuY29tL1Ry dXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1dGhvcml0eV8zLmNydDAsBggrBgEFBQcw AYYgaHR0cDovL29jc3AuY3NjdHJ1c3RlZHNlY3VyZS5jb20wPwYDVR0RBDgwNoIX bGVnYWxob2xkLmdlY29tcGFueS5jb22CG3d3dy5sZWdhbGhvbGQuZ2Vjb21wYW55 LmNvbTANBgkqhkiG9w0BAQUFAAOCAQEALruqHAtisJIRoIeDpG01zdFtUtt0NW8N VPQYcxuxyJvgcrZ36ABjRuodCqByspUGcSTANB7NFK9LcLIWkyOzbEb1H6zypnJt CVd+Vy079772fKjZuISfmsRmDAAPiAA+q7xfabDrERZ1PdI/4bqMmAtdLkNnh3xm TiFWwx9MsXE7mOavTvyTG6tXtjz3NcOtg+sJff6XwOndyeSXn3/wdEQqG/JF2kD3 k/RH85R42EdxMAZCflXQpAUy6pHnR1iooLpSrXxMIgoiltIXUoZPGv91VPTKATeo 3VbS9vTC0WpF2GlK0S1DupwUzjxoRewexJmDnVjFCPxV11Lk94ogrQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmfSYc7L4ThDOYtZNFr2 tJ5t3ueQu5Qj7nzd83vUaCNuf9pxI0jR5lWjQC19lS8akxLtaVKJ9ETe8LF7qjPQ Fy9cQfmLPvB0m5hlQKNCA1pR0b6t8+zPXvLOiVLEI4fxGe5EYNMj38SHLil7QEp3 Lh+Khj0QMhly7Pk5ddqM84p52XVcRXij/T9hjo6WkemMmtjQkEYv4QwFF/HRCtrF CEvmlDyPGwK8t28uUEIbrMp1AefbUKwDQ3+WPljonClO5Ydlm1HopyTlx05Q+kQJ 9LuQdjdmZHAnO+sHvRt9WXrV0GDAIy1l1D+GpJ65PxpCcklgzMSu5EvZ2SFbsTzU VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24116806776373066034077665234053008424 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06828' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fairfield' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3135 Easton Turnpike' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Electric Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by General Electric Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legalhold.gecompany.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18481988965172288850778557874854323680461887717103160000450203971318188554876499019616607324711947208049745668275126502006069954000193355017064824863162744528068710437825720071727332137790932470603364263001673373985760238565008190655337755762177444611330393506775811020721164311189241084624400949898660294387523111742235577175288479308531302742219305183910935603005972441346386940412780692270514199953383155015842360381281047840197407786190080235887779307503280618350570645504592949568146489130840094818584150859968032417818342695689143254698502454771388998710110045305141350738852759077687988794711621395362019595351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cc035b965a9e16cc261ebda370fbe3cb7919fc4d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e89388001a4ae41f44d02ef6d05af8e2369e143f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.csctrustedsecure.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.csctrustedsecure.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhold.gecompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalhold.gecompany.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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