hitchinsit.co.uk

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 13:bb:37 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=p2fLuLorGbyll2P9K7lKoJmTmodIZqUp,CN=hitchinsit.co.uk,OU=GT40377909+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:bb:37
Serial Number (int): 1293111
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 1d:ad:c4:1c:48:86:00:5b:b9:42:1f:56:4c:84:b6:d4:43:9d:b2:6d
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 62:c0:24:f7:11:db:47:0f:23:f2:c0:c3:1c:46:6c:1a:f4:33:d4:cd
Fingerprint (sha256): bd:cd:9e:6a:21:84:d5:9e:80:d3:04:6b:84:7f:4d:f3:bd:55:2a:40:8e:8c:da:d8:8b:14:7f:58:fc:66:4f:93

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate hitchinsit.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hitchinsit.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hitchinsit.co.uk

Other certificates including the domain name hitchinsit.co.uk

(limited to 100 certificates)
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
hitchinsit.co.uk
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
hitchinsit.co.uk
ssl378276.cloudflaressl.com
ssl378275.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378275.cloudflaressl.com
ssl378276.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
sni.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378277.cloudflaressl.com
hitchinsit.co.uk
hitchinsit.co.uk
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com
sni37965.cloudflaressl.com
sni37965.cloudflaressl.com
ssl378276.cloudflaressl.com

Certificate

The complete raw certificate details for hitchinsit.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgIDE7s3MA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTQwNjMwMDA0NjAxWhcNMTYwNzAxMjEwMTI2WjCBvzEpMCcGA1UEBRMgcDJm
THVMb3JHYnlsbDJQOUs3bEtvSm1UbW9kSVpxVXAxEzARBgNVBAsTCkdUNDAzNzc5
MDkxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg
KGMpMTQxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk
U1NMKFIpMRkwFwYDVQQDExBoaXRjaGluc2l0LmNvLnVrMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAogSqstKTDPBRBQb+fBJPTnD2Ve0NS0sG2E9oTd5F
380IQgBgILXdaf9z8tX0SyXsyJD+/8G6SEhFXd23RsICQY4vgLEg+DuvDAA6L/f+
9ANF9Xg3iAiFJS4h7/GhK45I6iB+kUkAjmTxTB5eCI3zwuyRSLzTGy/dnuKs6Ev/
h7F1d64V6bVvKorxFnLYjIsnogWJrssoX3tYDcm7WndNI74MgRF/XCehXkIXLjRr
s45/nLoVIefxJIhV8vFVLXs7OTosKaXZ4XHrjkF8TrHtBTFEFERh8Xg1WuExWS0/
eKEJ+gnfNe4nMPfmolhrmKAL3y4EONmteEnp1Aoa+/63xSP5YaydjF/XAdm6rxEq
Q+cnzXVu5I09mk47Jk+d1/WCCi+h86oSFltw+vreYOZKUjgk1NZqian8xlUZAc0p
adZod9VZMKNG3H4fOoeFchEMLJAriklpUCs0+eo6qzt8rfqiP/h7ACSV1Bhl7Fmj
4+gI5T3g9RfB3z9qNjfkgdYXI2ADsyMEgP4MPb6U0r9a3si448iJTF/aoJB7Gzl5
S3aJmmxx/b3ioQiIH6oba+tBvfw8uik9buRKXH2h1D2fZkaDBXy+5q6TJhNVJTv2
L0CsAcfzH3J2hUTBOTFYuhm5uvHl8x5I1aqkhAFmpy5wgpqX/2TCdGsaeKXHFQ+N
XB8CAwEAAaOCAaswggGnMB8GA1UdIwQYMBaAFGtpPWoYQkrdjwJlOf01JIZ4kRYw
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
GwYDVR0RBBQwEoIQaGl0Y2hpbnNpdC5jby51azBDBgNVHR8EPDA6MDigNqA0hjJo
dHRwOi8vcmFwaWRzc2wtY3JsLmdlb3RydXN0LmNvbS9jcmxzL3JhcGlkc3NsLmNy
bDAdBgNVHQ4EFgQUHa3EHEiGAFu5Qh9WTIS21EOdsm0wDAYDVR0TAQH/BAIwADB4
BggrBgEFBQcBAQRsMGowLQYIKwYBBQUHMAGGIWh0dHA6Ly9yYXBpZHNzbC1vY3Nw
Lmdlb3RydXN0LmNvbTA5BggrBgEFBQcwAoYtaHR0cDovL3JhcGlkc3NsLWFpYS5n
ZW90cnVzdC5jb20vcmFwaWRzc2wuY3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEH
NjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJj
ZXMvY3BzMA0GCSqGSIb3DQEBBQUAA4IBAQC2Kb6LySi+Vkn62mfOOD681vDOqlir
TBQdph10dUzdsmKe1T8kM2qBvOx8DQoYaqHuRB66AlX51v1v8mRMZf0UBrOiAdf5
uLTJPVziB/W88w73Py2EXBpDA7wsw+NRCGfo6IikHIKc6Mv2w45suRL19eGUu2HX
lBVVFyvKQ8z+tMdpmTSYnaRWOqemMP5LXfd1Mu7ao+oAiYMdCABqPS/89tXHQIYW
uqsPXh77UxXeW4I9uegkIKgtievizoBp+aOuVyghDQzWyawafgCnSv8/uM1nToXu
akGpp45FY2GvgLuGIfPqufisiM/7smJfsTcFIcVxR/T9vXoUQq4NsVxC
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1293111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-30 00:46:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-01 21:01:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'p2fLuLorGbyll2P9K7lKoJmTmodIZqUp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT40377909'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hitchinsit.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 660976709514150091967799309136397884365294194427859867604394969611755587819251167564571692028972322350442441467516959535841431322429233301059798833044125550869946526232699346336954883599070742605633427905348526191964608096393911755266800489931404863880775453836322168617688612762578006227945218993410049059799722772953051446941234078229630835356692396515862019287127569952456833085704985217959860769939507823325419923742037958435628400612866080837813225715483546956637132414012285940340303501071526196722209605708581828345204596747007968676758057192119854944653244528430936187778102699004094660135094299210574438856331464562728551684844975388628630590071215370165809986768545807282789042535197706645832631707555636919306025230699917768803662592798889402172839840505628613151367028083262195063697187614122525920754870242916707925691474557281294049653548659591513190357200296129198213632437202115104846756314504677668740131669062733013815081614386809977027130931360581948591384307267906933959411818556206178121667552781652721658852887450888232706058012713750397327528426449305942019213548579407443674311321954987317338535819463480990645529129281692311242201366245428449690631569493887043343458512439281304016390163530450971016267914271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitchinsit.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1dadc41c4886005bb9421f564c84b6d4439db26d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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