www.payumoney.com

- PayU Payments Pvt. Ltd. -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 39:8e:b7:67:85:cc:1d:b4:a9:a8:04:c8:26:d0:bd:b6 was issued on by GeoTrust Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PayU Payments Pvt. Ltd.

Company registration number: 218612
Organization: PayU Payments Pvt. Ltd.
Organization unit: IT
State / Province: Haryana
Locality: Gurgaon
Country: IN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:8e:b7:67:85:cc:1d:b4:a9:a8:04:c8:26:d0:bd:b6
Serial Number (int): 76507021796518624958389928822395944374
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): bb:c1:64:a6:b2:da:13:17:aa:b2:7b:f0:d1:be:4e:0b:f4:e8:13:67
Fingerprint (sha256): 99:61:1b:27:48:11:fc:e8:07:5f:e2:0b:f1:85:40:ab:a9:f3:a0:82:84:eb:c7:0b:b7:ae:fb:62:ff:96:bc:1d

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for certificate www.payumoney.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.payumoney.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

file.payumoney.com
media.payumoney.com
ux.payumoney.com
test.payumoney.com
uxtest.payumoney.com
mediatest.payumoney.com
www.payumoney.com
payumoney.com

Other certificates including the domain name payumoney.com

(limited to 100 certificates)
www.payumoney.com
www.payumoney.com
secure.payu.in
*.payumoney.com
www.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
www.payumoney.com
secure.payu.in
secure.payu.in
*.payumoney.com
secure.payu.in
*.payumoney.com
testfile.payumoney.com
secure.payu.in
secure.payu.in
secure.payu.in
www.payumoney.com
secure.payu.in
testpay.payumoney.com
secure.payu.in
secure.payu.in
testfile.payumoney.com
secure.payu.in
www.payumoney.com
register.payumoney.com
*.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
www.payumoney.com
www.payumoney.com
www.payumoney.com
secure.payu.in
www.payumoney.com
register.payumoney.com
testfile.payumoney.com
*.payumoney.com
register.payumoney.com
secure.payu.in
www.payumoney.com
secure.payu.in
www.payumoney.com
secure.payu.in
secure.payu.in
asi.payumoney.com
www.payumoney.com
secure.payu.in
secure.payu.in
secure.payu.in
www.payumoney.com
mobiletest.payumoney.com
register.payumoney.com
www.payumoney.com
secure.payu.in
www.payumoney.com
secure.payu.in
secure.payu.in
testpay.payumoney.com
secure.payu.in
register.payumoney.com
www.payumoney.com
secure.payu.in
*.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
www.payumoney.com
www.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
secure.payu.in
www.payumoney.com
asi.payumoney.com

Certificate

The complete raw certificate details for www.payumoney.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIQOY63Z4XMHbSpqATIJtC9tjANBgkqhkiG9w0BAQUFADBY
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMo
R2VvVHJ1c3QgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTU0wgQ0EgLSBHMjAeFw0xNDA0
MjUwMDAwMDBaFw0xNjA0MjAyMzU5NTlaMIHBMRMwEQYLKwYBBAGCNzwCAQMTAklO
MR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjEPMA0GA1UEBRMGMjE4NjEy
MQswCQYDVQQGEwJJTjEQMA4GA1UECBQHSGFyeWFuYTEQMA4GA1UEBxQHR3VyZ2Fv
bjEgMB4GA1UEChQXUGF5VSBQYXltZW50cyBQdnQuIEx0ZC4xCzAJBgNVBAsUAklU
MRowGAYDVQQDFBF3d3cucGF5dW1vbmV5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQ4cZzAmIesLSyVMQ6KdBCDPXEd85Q0K4konBOHXfq77Uwq
i7uC/+1+WsF0/61xszZGkdf1HeNFA43Ut+87ibi+JWu73nNGlzNUSd6FWSerhcQ4
ezqypE05DxXW2wMjps9BW6hVsfxCy1hZ9dHg+w0lSM0wuFUgvEBsgPwb7ASgrahv
7YCgxzTAIcaHwcD0pLPGQiTH3WHej0APXomzQtMCv2oRljSAuRQVbaRS6nglAU0I
NHpGM+FU4EEB0UGoU3APTzKEPFNlUJKwsRWHAa2ZrQCd4iRg028uoqTKt8SepwMn
IRNAPoDVf3QRCPa2pdvcKRsyCIOVo8sGuwY5vGECAwEAAaOCAhkwggIVMIGrBgNV
HREEgaMwgaCCEmZpbGUucGF5dW1vbmV5LmNvbYITbWVkaWEucGF5dW1vbmV5LmNv
bYIQdXgucGF5dW1vbmV5LmNvbYISdGVzdC5wYXl1bW9uZXkuY29tghR1eHRlc3Qu
cGF5dW1vbmV5LmNvbYIXbWVkaWF0ZXN0LnBheXVtb25leS5jb22CEXd3dy5wYXl1
bW9uZXkuY29tgg1wYXl1bW9uZXkuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQD
AgWgMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9ndGV4dHZhbDItY3JsLmdlb3Ry
dXN0LmNvbS9ndGV4dHZhbDIuY3JsMEsGA1UdIAREMEIwQAYJKwYBBAHwIgEGMDMw
MQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9j
cHMwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFG8m
Vtlc5/fJBCD4Hrp8kScvjPoHMHsGCCsGAQUFBwEBBG8wbTAuBggrBgEFBQcwAYYi
aHR0cDovL2d0ZXh0dmFsMi1vY3NwLmdlb3RydXN0LmNvbTA7BggrBgEFBQcwAoYv
aHR0cDovL2d0ZXh0dmFsMi1haWEuZ2VvdHJ1c3QuY29tL2d0ZXh0dmFsMi5jZXIw
DQYJKoZIhvcNAQEFBQADggEBAAOHstn7uTaCq5JKy7HS+tqeu8kzSecDcGcB6baD
sE2swN4MBZrvU0yam/vz/FEQBB3O8KpMQKS/EHmGjSVMgbLB6gyCzSJPWJu9Ksyl
Sdz5VZ8lZDJ/nxfW01KHbHD0SZdR5c++n3WWTC44yek7ZnCOP6Kna2WCpg41lrgf
d8YjyRVyHKttCghej20RW8mtRDgu99q7XD6V2LxCVBfOFIitnjrvsjslcrHHbjYj
MAY+jqtBp6W0xPOY+9RN4ACLcd3IiAEo0cS3Sh4tYXZHAwAixHvfGwjPcRwWmMIF
/zcWECrmHZ7tH/VUXW5OXgv3dtT4FmwY7fRilxTLgnmlM6o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDhxnMCYh6wtLJUxDop0
EIM9cR3zlDQriSicE4dd+rvtTCqLu4L/7X5awXT/rXGzNkaR1/Ud40UDjdS37zuJ
uL4la7vec0aXM1RJ3oVZJ6uFxDh7OrKkTTkPFdbbAyOmz0FbqFWx/ELLWFn10eD7
DSVIzTC4VSC8QGyA/BvsBKCtqG/tgKDHNMAhxofBwPSks8ZCJMfdYd6PQA9eibNC
0wK/ahGWNIC5FBVtpFLqeCUBTQg0ekYz4VTgQQHRQahTcA9PMoQ8U2VQkrCxFYcB
rZmtAJ3iJGDTby6ipMq3xJ6nAychE0A+gNV/dBEI9ral29wpGzIIg5Wjywa7Bjm8
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76507021796518624958389928822395944374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '218612'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Gurgaon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PayU Payments Pvt. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.payumoney.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22750728368101796952933397141576485212711865326055568437253849381776012252061422910221433676861252173158270572825971718484313524966754220323190269748055874716461693366146682853180820096184953196979198376154393245461784783327496174089558715667466423375759731675000596889431396806825404089006616687618595608307726987205364775944598318201469951304441808960845423621434465321414560375775712329197827046451309094639983120888530650397357179709688256187271018521608708667635939678578028491929924069893435379813757065048896867293811511470747052282058619419009877042105579050496065186578587351839697086046319487314041503333473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'file.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ux.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxtest.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediatest.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payumoney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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