*.tigo.com.py

- Telecel S.A -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:a4:18 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Telecel S.A

Company registration number: iaFVLmsElRksp/TC8XsSQIoBVU4EnGuZ
Organization: Telecel S.A
Organization unit: Consumer Deparment
State / Province: CENTRAL
Locality: FERNANDO DE LA MORA
Country: PY

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a4:18
Serial Number (int): 107544
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 3d:f7:03:9d:e0:61:5e:04:e2:a5:51:61:86:f1:d2:5a:89:95:76:27
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): a7:6a:46:89:db:82:3b:6f:99:17:60:c5:13:59:5a:0e:21:0a:7b:4e
Fingerprint (sha256): c6:19:dd:bf:4e:9d:95:f6:59:3b:13:c3:d8:5c:1d:fd:00:b4:f8:b9:70:33:b0:17:47:e4:4a:b8:0e:a6:a0:38

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate *.tigo.com.py

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tigo.com.py

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tigo.com.py
tigo.com.py

Other certificates including the domain name tigo.com.py

(limited to 100 certificates)
activate.tigo.com.py
ayuda.tigo.com.py
app.mitienda.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
smartapps.tigo.com.py
ayuda.tigo.com.py
knowledge.tigo.com
ayuda.tigo.com.py
music.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
miscontactos.tigo.com.py
ayuda.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
music.tigo.com.py
knowledge.tigo.com
ayuda.tigo.com.py
knowledge.tigo.com
*.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
music.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
miscontactos.tigo.com.py
soluciones.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
knowledge.tigo.com
knowledge.tigo.com
secure.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
soluciones.tigo.com.py

Certificate

The complete raw certificate details for *.tigo.com.py in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIDAaQYMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM
IENBMB4XDTEyMDgyODE2MTQzNFoXDTE1MDgzMTEzNDQ0N1owgbMxKTAnBgNVBAUT
IGlhRlZMbXNFbFJrc3AvVEM4WHNTUUlvQlZVNEVuR3VaMQswCQYDVQQGEwJQWTEQ
MA4GA1UECBMHQ0VOVFJBTDEcMBoGA1UEBxMTRkVSTkFORE8gREUgTEEgTU9SQTEU
MBIGA1UEChMLVGVsZWNlbCBTLkExGzAZBgNVBAsTEkNvbnN1bWVyIERlcGFybWVu
dDEWMBQGA1UEAwwNKi50aWdvLmNvbS5weTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANKQyQJRlTdJK7bpCRNx7CG3eJHGXE2onCQ+LvoGMdwvyM6D3lhL
yDdkEjGTTqVKP2ybGwfQpKLjGCbRX3uzaAx7136n1iKMdP2DIcw7WhsxyJZS00Pi
YRrlTThcplwSu4c7CRCWj+KMHrXpWxIyXfMt/vuLSd20njRtObAOBsNUXakx/m67
Gfj/ozgY24TWANzWx6olDCNp3+LADYFLt1YITKa4ZThecwjCIm2aTPIxq4pbFdPB
gGvcGDC17Yavhyc5GJdGgeyTkKISqsAr9J7BXSbxrhxunPaQsPx08sVo9Xrtn+A3
SZBxjAYNfy2HQ+sBbtVhZlBFbVPLOKsuIsECAwEAAaOCAaYwggGiMB8GA1UdIwQY
MBaAFEJ5VBthzVUrPmPVPEhX9Z/7Rc5KMA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwJQYDVR0RBB4wHIINKi50aWdvLmNvbS5w
eYILdGlnby5jb20ucHkwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2d0c3NsLWNy
bC5nZW90cnVzdC5jb20vY3Jscy9ndHNzbC5jcmwwHQYDVR0OBBYEFD33A53gYV4E
4qVRYYbx0lqJlXYnMAwGA1UdEwEB/wQCMAAwbwYIKwYBBQUHAQEEYzBhMCoGCCsG
AQUFBzABhh5odHRwOi8vZ3Rzc2wtb2NzcC5nZW90cnVzdC5jb20wMwYIKwYBBQUH
MAKGJ2h0dHA6Ly9ndHNzbC1haWEuZ2VvdHJ1c3QuY29tL2d0c3NsLmNydDBMBgNV
HSAERTBDMEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5n
ZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwczANBgkqhkiG9w0BAQUFAAOCAQEAaeDL
aT3IiUkQCNnzRxqbPFTFUFQJ6msyM1ofyIZSbcazHSbtw8fBnQWlGZ580U8bc1+K
2OCNm7wI4rjc5Fyin517uSHEpm0hzJqpq2SMH/ur1OCOwol8xv2obOwp+Uz4wtpt
VUmepQG3msnNuP833f+pDVeWyZ1M36fZ6LfKu71bRP6WQjaWhwqwjjVYXRc3aOcz
QKQnsRf+PcGyjvQ+zhvhMu9Ysd3AVOAG8qsC/cDPa76Q2g7WmDdB5tW0e0rBAxPO
CrMhkTYmJQpHdDsNK/J7zwoQmZnIx4hUSjPkuP+jNfouEMXW7HLIx+IgFcSzc1TW
yohMBvJYlJ1rN7V7ng==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pDJAlGVN0krtukJE3Hs
Ibd4kcZcTaicJD4u+gYx3C/IzoPeWEvIN2QSMZNOpUo/bJsbB9CkouMYJtFfe7No
DHvXfqfWIox0/YMhzDtaGzHIllLTQ+JhGuVNOFymXBK7hzsJEJaP4owetelbEjJd
8y3++4tJ3bSeNG05sA4Gw1RdqTH+brsZ+P+jOBjbhNYA3NbHqiUMI2nf4sANgUu3
VghMprhlOF5zCMIibZpM8jGrilsV08GAa9wYMLXthq+HJzkYl0aB7JOQohKqwCv0
nsFdJvGuHG6c9pCw/HTyxWj1eu2f4DdJkHGMBg1/LYdD6wFu1WFmUEVtU8s4qy4i
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-28 16:14:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-31 13:44:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iaFVLmsElRksp/TC8XsSQIoBVU4EnGuZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CENTRAL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FERNANDO DE LA MORA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telecel S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Consumer Deparment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tigo.com.py'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26581440281839477064214102029566026312434236902905792788409660312414538631317360575768534284992271265052508608584183484113721365661030914834219295973668897705434955906712753796780837805423741041106371684322373388582617649220080028398222054807214618180992998142375626133074259139513682576793568949660830107547661075103805684959929257996885068766187214153248843509534901931471370210808525312779229255690387574459641573805446536312638604670254369365849199047271326423272367152211078382305944914815220861761494404371919027307540990648415087558768887371333910037742883762466222409065103522176042740855611133355720197415617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigo.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigo.com.py'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3df7039de0615e04e2a5516186f1d25a89957627
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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