*.itstream.tv

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 13:eb:89 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=KdekvgEM/ie82wgEDXK8SWFp0sMbmAf1,CN=*.itstream.tv,OU=GT14562936+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:eb:89
Serial Number (int): 1305481
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: bd:d8:92:03:38:94:5b:f3:44:d1:68:99:ad:56:c4:32:d6:cb:9d:01
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 52:74:2c:25:6f:1c:c3:25:12:67:ff:33:8a:0e:a6:ab:7f:8e:52:10
Fingerprint (sha256): d8:33:4c:56:6f:40:69:f6:35:54:21:67:42:4d:0c:d8:77:b3:12:c5:79:9d:12:c3:71:62:f9:ba:9b:67:06:5a

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.itstream.tv

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.itstream.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.itstream.tv
itstream.tv

Other certificates including the domain name itstream.tv

(limited to 100 certificates)
ssl275525.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl372694.cloudflaressl.com
ssl275525.cloudflaressl.com
ksddvd.shop
itstream.tv
itstream.tv
ssl6617.cloudflare.com
ssl275525.cloudflaressl.com
ssl6617.cloudflare.com
ssl275525.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl372695.cloudflaressl.com
coins2018.com
ssl275525.cloudflaressl.com
ssl6617.cloudflare.com
ssl275525.cloudflaressl.com
ssl275525.cloudflaressl.com
itstream.tv
ssl6617.cloudflare.com
ssl275524.cloudflaressl.com
ssl275523.cloudflaressl.com
cilihou.xyz
ssl275523.cloudflaressl.com
coins2018.com
coins2018.com
*.itstream.tv
ssl372694.cloudflaressl.com
ssl275523.cloudflaressl.com
ssl6617.cloudflare.com
*.itstream.tv
ssl275525.cloudflaressl.com
ssl275524.cloudflaressl.com
ssl372695.cloudflaressl.com
skymetrix.xyz
ssl372695.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl275523.cloudflaressl.com
itstream.tv
*.itstream.tv
ssl372695.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl275523.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl372695.cloudflaressl.com
ssl372694.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl372695.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl6617.cloudflare.com
ssl6617.cloudflare.com
itstream.tv
ssl275525.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl372695.cloudflaressl.com
ssl372694.cloudflaressl.com
ssl275525.cloudflaressl.com
itstream.tv
ssl6617.cloudflare.com
*.itstream.tv
ssl6617.cloudflare.com
ssl6617.cloudflare.com
ssl275524.cloudflaressl.com
ssl275523.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl6617.cloudflare.com
ssl6617.cloudflare.com
ssl275525.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl372696.cloudflaressl.com
ssl275525.cloudflaressl.com
ssl372694.cloudflaressl.com
ssl6617.cloudflare.com
ssl275525.cloudflaressl.com

Certificate

The complete raw certificate details for *.itstream.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIDE+uJMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTQwNzA4MjMxMDIxWhcNMTUwODExMDIyOTU2WjCBvDEpMCcGA1UEBRMgS2Rl
a3ZnRU0vaWU4MndnRURYSzhTV0ZwMHNNYm1BZjExEzARBgNVBAsTCkdUMTQ1NjI5
MzYxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg
KGMpMTQxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk
U1NMKFIpMRYwFAYDVQQDDA0qLml0c3RyZWFtLnR2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvHSxW+d0/oW1cpgDMf8z69roKK45Ousc6sWVfMaepKs2
fcfKRXuTI7ei5GcZ3fMWoFZAMajhcLKFChHHkupkNQN0KR8Pyh3dQ00wFHyari1C
cl2CD5SFecWja2w1UVvrY6Sn5YOUX4YXVKFxOLAqRtcWsRqJFYUOZtGH7SkdUa3l
EiwM2dsEvEIYP0WQ5z6vxiQws3bcfc2uR6TaYIt01SAQasdgDdxkzldkqvQH+cTI
dHhD8kECZX/IxGZeLbJ0WW6Z/GCzkHuPqWs0vIs72cxNrJOjjfTC92cUUJGEzTA0
QoB5hctjMYbB69+Jqb3bAvy3O9nbD5WpNT9v9ETiewIDAQABo4IBtTCCAbEwHwYD
VR0jBBgwFoAUa2k9ahhCSt2PAmU5/TUkhniRFjAwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAlBgNVHREEHjAcgg0qLml0c3Ry
ZWFtLnR2ggtpdHN0cmVhbS50djBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vcmFw
aWRzc2wtY3JsLmdlb3RydXN0LmNvbS9jcmxzL3JhcGlkc3NsLmNybDAdBgNVHQ4E
FgQUvdiSAziUW/NE0WiZrVbEMtbLnQEwDAYDVR0TAQH/BAIwADB4BggrBgEFBQcB
AQRsMGowLQYIKwYBBQUHMAGGIWh0dHA6Ly9yYXBpZHNzbC1vY3NwLmdlb3RydXN0
LmNvbTA5BggrBgEFBQcwAoYtaHR0cDovL3JhcGlkc3NsLWFpYS5nZW90cnVzdC5j
b20vcmFwaWRzc2wuY3J0MEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsG
AQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMA0G
CSqGSIb3DQEBBQUAA4IBAQBQ3fgGPohC8SeO48TC0UuW7yfU1u81COy83cDTT3D3
Wo8RQ5GTRg0YKxxnwIJYghWea6eCeV0tYn+qe7ajAt0hcheqbIdC4exUNeyLadIX
vY6f1sOUC0xNC77dFsh8TjmGLCSFb0NyfVbDhIuxINpaPnuYOOmbnpjT8ajVwYNq
TahP3hKdShbH3m9vlglAd7pjpQ9nzgXZf7m9GmYS817XtdkmXK8kHNxR49BLsr0Z
7nFkmHGsymP5rW2a8QHIpTd32HCDMtE0U3YWFLi8OZ5l1G3sI2y2tSb4ekHkpnvh
4W03pAHQl9QQGvgR1Xg6VAhscOifBjgAlIp6YJgcuIS3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHSxW+d0/oW1cpgDMf8z
69roKK45Ousc6sWVfMaepKs2fcfKRXuTI7ei5GcZ3fMWoFZAMajhcLKFChHHkupk
NQN0KR8Pyh3dQ00wFHyari1Ccl2CD5SFecWja2w1UVvrY6Sn5YOUX4YXVKFxOLAq
RtcWsRqJFYUOZtGH7SkdUa3lEiwM2dsEvEIYP0WQ5z6vxiQws3bcfc2uR6TaYIt0
1SAQasdgDdxkzldkqvQH+cTIdHhD8kECZX/IxGZeLbJ0WW6Z/GCzkHuPqWs0vIs7
2cxNrJOjjfTC92cUUJGEzTA0QoB5hctjMYbB69+Jqb3bAvy3O9nbD5WpNT9v9ETi
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1305481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-08 23:10:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-11 02:29:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KdekvgEM/ie82wgEDXK8SWFp0sMbmAf1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT14562936'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.itstream.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23790344702208286959994928582402024444204881711399137775470441439441276596133628441961732066937293607056045477231698416997375453698026756581334091004074322627818360397681457994337398298000213860960471733285058586520921872634755092462404387689353959070811063412619730881180307082075850397072482487789218128497822201929099672731346797017506459198664217970712185755247956490620324003188805567933532680437692408259825708605295383684466848594381030204816599377984371022012674866205972128208373511777083530520352773579871313960346012673510716590704745371306437277544628207168955923038526964303941674263566747842350151950971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itstream.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itstream.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdd8920338945bf344d16899ad56c432d6cb9d01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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