mail.wesleyseminary.edu

- Wesley Theological Seminary of The United Methodist Church -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 33:0b:17:2a:eb:be:58:f2:02:43:a0:37:cb:b3:51:c1 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Wesley Theological Seminary of The United Methodist Church

Company registration number: D00242487
Organization: Wesley Theological Seminary of The United Methodist Church
Organization unit: Institutional Technology
State / Province: District of Columbia
Locality: washington
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:0b:17:2a:eb:be:58:f2:02:43:a0:37:cb:b3:51:c1
Serial Number (int): 67848212946437395455798504482569146817
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): 75:8f:6c:2c:88:7b:c6:16:d0:ff:eb:68:83:4e:1c:39:35:ac:8e:4a
Fingerprint (sha256): e3:cc:28:ed:15:c5:d0:ed:88:9f:1b:91:9e:95:d2:91:e5:75:9a:34:95:b0:12:97:13:c6:b0:93:8a:cb:78:a6

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for certificate mail.wesleyseminary.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.wesleyseminary.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.wesleyseminary.edu

Other certificates including the domain name wesleyseminary.edu

(limited to 100 certificates)
selfservice.wesleyseminary.edu
blackboard.wesleyseminary.edu
students.wesleyseminary.edu
finances.wesleyseminary.edu
blackboard.wesleyseminary.edu
sslvpn.wesleyseminary.edu
blackboard.wesleyseminary.edu
us-east-1-san4.blackboard.com
students.wesleyseminary.edu
mail.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
sso.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
datatel5.wesleyseminary.edu
www.wesleyseminary.edu
wesleyseminary.edu
students.wesleyseminary.edu
us-east-1-san4.blackboard.com
datatel5.wesleyseminary.edu
sslvpn.wesleyseminary.edu
sts.wesleyseminary.edu
www.wesleyseminary.edu
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
selfservice.wesleyseminary.edu
www.wesleyseminary.edu
give.wesleyseminary.edu
blackboard.wesleyseminary.edu
students.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
wesleyseminary.edu
mail.wesleyseminary.edu
us-east-1-san4.blackboard.com
finances.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
www.wesleyseminary.edu
us-east-1-san4.blackboard.com
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
finances.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
wesleyseminary.edu
sts.students.wesleyseminary.edu
us-east-1-san4.blackboard.com
selfservice.wesleyseminary.edu
www.wesleyseminary.edu
webapi.wesleyseminary.edu
students.wesleyseminary.edu
sts.students.wesleyseminary.edu
www.wesleyseminary.edu
sts.wesleyseminary.edu
sts.wesleyseminary.edu
students.wesleyseminary.edu
us-east-1-san4.blackboard.com
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
us-east-1-san4.blackboard.com
blackboard.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
blackboard.wesleyseminary.edu
us-east-1-san4.blackboard.com
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
give.wesleyseminary.edu
blackboard.wesleyseminary.edu
us-east-1-san4.blackboard.com
mail.wesleyseminary.edu
webapi.wesleyseminary.edu
finances.wesleyseminary.edu
selfservice.wesleyseminary.edu
blackboard.wesleyseminary.edu
sslvpn.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu

Certificate

The complete raw certificate details for mail.wesleyseminary.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgIQMwsXKuu+WPICQ6A3y7NRwTANBgkqhkiG9w0BAQUFADBY
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMo
R2VvVHJ1c3QgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTU0wgQ0EgLSBHMjAeFw0xMzEy
MTcwMDAwMDBaFw0xNDEyMjMyMzU5NTlaMIIBLjETMBEGCysGAQQBgjc8AgEDEwJV
UzEZMBcGCysGAQQBgjc8AgECFAhNYXJ5bGFuZDEdMBsGA1UEDxMUUHJpdmF0ZSBP
cmdhbml6YXRpb24xEjAQBgNVBAUTCUQwMDI0MjQ4NzELMAkGA1UEBhMCVVMxHTAb
BgNVBAgUFERpc3RyaWN0IG9mIENvbHVtYmlhMRMwEQYDVQQHFAp3YXNoaW5ndG9u
MUMwQQYDVQQKFDpXZXNsZXkgVGhlb2xvZ2ljYWwgU2VtaW5hcnkgb2YgVGhlIFVu
aXRlZCBNZXRob2Rpc3QgQ2h1cmNoMSEwHwYDVQQLFBhJbnN0aXR1dGlvbmFsIFRl
Y2hub2xvZ3kxIDAeBgNVBAMUF21haWwud2VzbGV5c2VtaW5hcnkuZWR1MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6E0eSODt/K0mGK6GYReC/2+ZydPO
kXTNHrdEBtzF7Oi4zVVBRupgIXVTsyvSVf6GvmCcu/OfAsBzSqsBH/hL8aC3W/Ov
TjFRMu2QttyP3bZ2bAabS9AIt72Nx+E+9cXwN3qvYG1QezUXf2zrAvOT+lAmusgf
t6pmphB5kfQWseP2iLiaOGIuGAUEoxYYE7nAMs6OFUoZvp5h4yMmwHeipb5oU5q+
KWbc+SKN6XK/nU5pbDxQeBfIBGn7syRvFnzaM64StkFLU5RGfKT3pwS5ROpM0q70
JQBd9NTW6/LCWCJoF/nTY7O45V1Vmw6c9Z77I5Dk85RwzBnxCTJxr02ocbgK85Om
gMWLmcNxg1b09wJFQlMlPFDgO+xqsvkoOHUQiV/lEGhb0IarGx+xOemUZyCGmfnP
GRF31KWMh5Osv8tF3UJjy0i5pmJ80FeMzQTftGgEM0ahS4kp5DA3YZT0M9jkVHXT
7QTILeZdbAMhh2SGfYY6GVo3/uyzN7gS3oI9CdOOF0kQfe+FUM+yP/D3pQOMTDdk
0I70uj3Gccw2TqVG+7ect1hx45TAE9SXYq/sYo46nWzhPasRgRApcukaR3QxaY25
wL1PZgVspNxKz9AgmZZzxULAEHqIsK2wbCk5dBRgFORtqYCfecdgQUZzPb/7xaQn
rdZVPK2e+nGY2PsCAwEAAaOCAY8wggGLMCIGA1UdEQQbMBmCF21haWwud2VzbGV5
c2VtaW5hcnkuZWR1MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMEAGA1UdHwQ5
MDcwNaAzoDGGL2h0dHA6Ly9ndGV4dHZhbDItY3JsLmdlb3RydXN0LmNvbS9ndGV4
dHZhbDIuY3JsMEsGA1UdIAREMEIwQAYJKwYBBAHwIgEGMDMwMQYIKwYBBQUHAgEW
JWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFG8mVtlc5/fJBCD4Hrp8
kScvjPoHMHsGCCsGAQUFBwEBBG8wbTAuBggrBgEFBQcwAYYiaHR0cDovL2d0ZXh0
dmFsMi1vY3NwLmdlb3RydXN0LmNvbTA7BggrBgEFBQcwAoYvaHR0cDovL2d0ZXh0
dmFsMi1haWEuZ2VvdHJ1c3QuY29tL2d0ZXh0dmFsMi5jZXIwDQYJKoZIhvcNAQEF
BQADggEBADzv1oUB2QZPj4WNrLL0gwTLuWvFC2psgIECe23MfWLy9cRBmMGLfi9n
pxBgoCY4r6i8cZxfXBrHYcRd07oRVYjHYQin/P4VlFLYBav4RIhtQIS24NqG9qhf
eiWL60hTmyTB9KXZqI+stEnplqi1kRFATAHIU+YJlBLrPzIudVPQITB1/jCgNUU8
NRKLm57tdulqzu4c+dTyQHusiBlYysbQTamtPFrGMQ7+Ih1NK6pudXTxsH0HF55B
vwtBTxc1cZn8EqycDBkMUOMCmEP3Jcit3LFuTbwgQob2nQDbjRtCcuuZE+rj2yFu
1OD/L/8A6TtVCTiR36g2rFcXCsgaR50=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 67848212946437395455798504482569146817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D00242487'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Wesley Theological Seminary of The United Methodist Church'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Institutional Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mail.wesleyseminary.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947706389457438161904482471300329947422639629474890891830462635389446546475265999210615465920644460777233494725670947458636664436081487620313128728093641994916949916126394760271527543137139834586448746700130283593053740799466093311200790496594976073606157272153467288878046138771739657957172751142350092726107472137357605125703221535428483144361894069945756982796871295509343444959855182285061010051645106956750850563089913365570259382849061441163156992642732262963736263582548042158646123622115184643894287841696065955795292181119279394496482677825516700609173169462885886172644062134467529787008760736632688253692572327644492389142751218812690256076770080681241457199732033134187352551874642668547086972952238798128651663952773935246099269831478896438784899910078586563336640297422947514783222014608128302515633747094693103278125110267818901156351754725638691164742828519117744959570936563217903911822095622879204950338168790911758660034756323279924138416172998377326889060555851016787593984643203956874091053829586628297440764637813837408544391630811092306204052259590089571236861825073008484323000654503798168603010554173257620535786973581766922573740859805172345667947809676192610423655495804475053556429870115932621738866170107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wesleyseminary.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003cefd68501d9064f8f858dacb2f48304cbb96bc50b6a6c8081027b6dcc7d62f2f5c44198c18b7e2f67a71060a02638afa8bc719c5f5c1ac761c45dd3ba115588c76108a7fcfe159452d805abf844886d4084b6e0da86f6a85f7a258beb48539b24c1f4a5d9a88facb449e996a8b59111404c01c853e6099412eb3f322e7553d0213075fe30a035453c35128b9b9eed76e96aceee1cf9d4f2407bac881958cac6d04da9ad3c5ac6310efe221d4d2baa6e7574f1b07d07179e41bf0b414f17357199fc12ac9c0c190c50e3029843f725c8addcb16e4dbc204286f69d00db8d1b4272eb9913eae3db216ed4e0ff2fff00e93b55093891dfa836ac57170ac81a479d