The Good Group Inc

- The Good Group Inc -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 74:16:06:ee:3a:69:6d:c4:7f:8f:89:cc:e7:2e:ad:38 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

The Good Group Inc

Company registration number: 596235-96
Organization: The Good Group Inc
Address: 9450 SW Gemini Drive Suite 87141
State / Province: Oregon
Locality: Beaverton
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 74:16:06:ee:3a:69:6d:c4:7f:8f:89:cc:e7:2e:ad:38
Serial Number (int): 154304818610775893913001919024143969592
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 31:fd:04:b2:17:6d:c8:ea:9d:ac:b2:d4:05:7d:b6:99:8f:67:79:61
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): c2:8d:53:99:85:f0:85:ff:86:b2:99:1e:c2:56:07:dd:bd:cd:f0:c6
Fingerprint (sha256): d9:15:9e:90:39:ed:68:3e:ef:47:3d:a5:43:fd:f3:b5:c5:57:b0:23:44:3f:e4:6b:33:28:5d:14:e8:8e:0d:20

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate The Good Group Inc

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for The Good Group Inc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thegood.com

Certificate

The complete raw certificate details for The Good Group Inc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7tVxiDGtYvRvtV+Z2tm
sgZ2cd67sDJ6ZrzFEXq6hEwdOhho92RIfIY7iztjQ5mtXFgUXv2HhIMcsl4PnUBu
fYBtqkKVesjbQq7hOpGyKXmYkDYps0Ul3UcDDW0leWrPrrMKB7C22IEUDFsWWsEo
he91TRKqhUxWs2rYfUJsnyGMNG0xOghwzCOU+JB7iWO9bUB3Yaj6tS7BiOgMtYcU
WizAFKY1pjSHTbq7zT7uepwfK4eWNe/kH5SIR7zdU/ZZSs+801atA/GEmFlCKtgx
EJA7N2/+Cy+SR9HbhRdw8gyhRRcZHxgM9Q6xpE2xoPQ+fDntZxFtc+I5VkOBMTNk
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154304818610775893913001919024143969592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 00:18:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 00:18:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beaverton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9450 SW Gemini Drive Suite 87141'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Good Group Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '596235-96'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7420009'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Patent and Trademark Office (USPTO)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Good Group Inc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26223707486308961973236369411302132891521098183056875503103224972393932300004421532859236332137152649997029636551883954199909267703237627384457101568752375407912452634122017152217129219262007841346195398860695436390217656608816871617517453085093565339936670315645604379267775987235467933980639016883442760033489676578486317483871635964420189832137241135238171866876680611509623652889730417619602750978308319028175347410312340965726606828642197829328117497933339823348074482497182529186108318733127150691745877331211741999429554194030962506319851162005354091772267268506151673266752715762378952047106468642625883956477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31fd04b2176dc8ea9dacb2d4057db6998f677961
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															7e4b04ec0f2f1cfa2dbc830de9a33638b17cc3ffe1c6a6f2fc37948edca57bc0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,H4sIAAAAAAAA/3VVXW8bNxB8boH+B/b6VICk+M2jYTlohMYx0AABWuTVcM4XSYAqGdLZTvzrO7OnBE2BCtbtaUnuzszOnS9fff57p57G42l72C87b12nxv1wuN/u18vucfpk+u7V1U8/Xv5sjLoe9+PxbjocL9Rv94ePo7rZ7R5Pk6RU6K2zTqs/P1yr3z8/HI6Ter97XJubvbKS/DA3uVDFOqdeP25398r9qpQxrH96Wv8bRujUx7vT+P54+LTdjctu2u6/mIdTpwB3f1p2m2l6uFgsnp+f7XO0h+N6EZxzC1Tp1NN2fH59+LzsnHKqFfx16KDU5bSdduPVX5tRXR8O9+r6eHh8UDf74XIxrwDGWm3vl90fd1/G4224dfLpex9jajFmX1t2qfg4L8TkK/LNpxhKCSW4cstWP1wex2FSQL5bdr+8kU+nnrf302bZAY3ajNv1ZprvF2y7WP+3uT83bznGPvctZHSJLvmQJe9dq77k0rdYq4u15FbPzR/ups25+f6wHzuFou9Sb6MuxcYhWq+dzjYbj1Q16RRsNMVWzei9bYMzGbfO9qYhSjqcTLTNJIMDg5Ea2JQ0apiqk1JqFZvtdfI6Np0yr9mhHVtFjVoatdhCs8UqBdt0SZZ7bRBk+hvGl1mW/6FSnMbpfjABDLxJNiFWQOXvujE+D7jpdUSC/TJ4BPSoOOMAPNhC2JRAJ8lnwB9QEkteEwn5eYc13AyJ+LGrsR3TPfgn7G9SFssmy7W3aVV4NLF0YbEUSXMG/D0rYdJjX66WihKyqVKzggLD25QpdROps5DN2ABeA4YTOCAskaqzPJAHRma9aJIRCbqRngOHIFsrKEocMmsLUSqnfQSEDMbRFlKEQpg31GL0kA3GwBUdislnvHEQnwSBEMVEiZjZ0ptZ7nCOPVEPXuT0c2ten7C/vM09GhMsNsFnAgltcMhz1pww7IStZJhFEMQBxg0UQUaDAz7RhLZnf8FDF3AcdT6kPa3jtMiKb8XxIObsB6KB7Dg+fzmdQlSogeJZDB+EtufAiaqI1tD+bDfM0/pZ79lnc6ksxgLc81PmRNU633AAAknEYl4mVG09YQlu1L4yDHUWbRYHVKhTOYGCIGIEO3ZfVUIudH/1HGTjz69ue1HvkidvCujlCafTKe78tCAORA/fCgev6RRkT5QoS64B9sANydBSVQbFJNtnCiOPeGq8SzpBB9hcqgL1VzfPvcwZhOGoCp9rx7cJEEJ+Le+VEOTlckYNBlkol5luJs7aa+lb0RXqtUH4ODpEPNWztC2rCLTcH7FVmJNcdTSyl4nOPmvy9GBoG7F+ghpcopMqhy4Ox60T1xR5tTFiOqsikohYjSf4mvkG+OW7lz7/Z139A5A8FuOHBwAA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegood.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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