peoplesoft-pr.safeway.com

- Safeway Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5f:c7:70:8f:8b:b2:3f:78:8c:b1:0c:25:91:20:6b:94 was issued on by GeoTrust Inc..

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Safeway Inc.

Organization: Safeway Inc.
Organization unit: TEM
State / Province: California
Locality: Pleasanton
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:c7:70:8f:8b:b2:3f:78:8c:b1:0c:25:91:20:6b:94
Serial Number (int): 127312209677152192044720973235389229972
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): ac:58:01:df:1f:c1:4e:fa:7e:50:59:39:dc:28:8a:8e:d1:fd:43:b7
Fingerprint (sha256): 00:06:f9:1a:c5:b8:fe:c4:00:56:4f:2f:51:d3:aa:22:5b:4d:64:7a:83:1f:f2:66:aa:c1:30:4b:4f:6b:56:c4

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate peoplesoft-pr.safeway.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for peoplesoft-pr.safeway.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobile-qi.vons.com
private-nimbus-qa1.safeway.com
private-nimbus-beta.safeway.com
nimbus-qa.safeway.com
mobile-qa2.pavilions.com
private-nimbus-qac.safeway.com
mobile-prf.carrsqc.com
mobile-qa1.safeway.com
mobile-qa2.tomthumb.com
mobile-qi.pavilions.com
nimbus-qa1.safeway.com
direct2hrqa.safeway.com
mobile-qac.carrsqc.com
private-nimbus-prf.safeway.com
nimbus-prf.safeway.com
mobile-prf.randalls.com
mobile-qa1.carrsqc.com
partner-nimbus-qa1.safeway.com
mobile-qi.randalls.com
mobile-qi.safeway.com
partner-nimbus-qa.safeway.com
mobile-qac.pavilions.com
mobile-prf.pavilions.com
mobile-qa1.randalls.com
mobile-prf.vons.com
partner-nimbus-beta.safeway.com
nimbus-qi.safeway.com
mobile-qa2.carrsqc.com
partner-nimbus-qi.safeway.com
mobile-qa1.pavilions.com
easqa.safeway.com
mobile-qa1.vons.com
mobile-qac.randalls.com
partner-nimbus-qac.safeway.com
mobile-qi.carrsqc.com
mobile-prf.safeway.com
mobile-qa2.vons.com
mobile-qac.tomthumb.com
easbi-qa.safeway.com
nimbus-qac.safeway.com
mobile-qa2.safeway.com
private-nimbus-qi.safeway.com
mobile-qac.safeway.com
nimbus-beta.safeway.com
mobile-qi.tomthumb.com
mobile-qac.vons.com
mobile-qa1.tomthumb.com
mobile-qa2.randalls.com
mobile-prf.tomthumb.com
private-nimbus-qa.safeway.com
partner-nimbus-prf.safeway.com
peoplesoft-pr.safeway.com

Other certificates including the domain name safeway.com

(limited to 100 certificates)
peoplesoft-pr.safeway.com
qnv011d50.safeway.com
slvnqa8a.safeway.com
qgv013514.safeway.com
qgv012b98.safeway.com
slvgpr16.safeway.com
phvgqz5i.safeway.com
incapsula.com
shop-qa3.safeway.com
qgv01233f.safeway.com
dgv011deb.safeway.com
shop-dev1-origin.safeway.com
qnv0126ec.safeway01.ad.safeway.com
qgv012520.safeway.com
qnv01253d.safeway01.ad.safeway.com
qav0108d9.safeway.com
qgv011491.safeway.com
www-qa1.albertsons.com
dgv0146e0.safeway.com
vocollect.safeway.com
stats.safeway.com
ecom-sci-nsxperf.safeway.com
www-qa2.albertsons.com
pgv0125c9.safeway.com
pgv013240.safeway.com
phvgqz5x.safeway.com
qnv011e30.addmz.safeway.com
qgv013048.safeway.com
pgv01304d.safeway.com
client-nimbus-qa1.safeway.com
ffen-dev-b2c.safeway.com
qnv0123cc.safeway01.ad.safeway.com
pgv011b41.safeway.com
pnv0129e3.safeway01.ad.safeway.com
pnv010f0f.safeway.com
dgv011d5a.safeway.com
rewardsb2b-sprf.safeway.com
qgv012170.safeway.com
reach.safeway.com
qgv013496.safeway.com
pgv012457.safeway.com
qnv013101.safeway01.ad.safeway.com
pnv011ef4.addmz.safeway.com
qgv011e60.safeway.com
ecom-mif-nsxdev.safeway.com
qgv012027.safeway.com
dgv013002.safeway.com
qgv012d14.safeway.com
ecom-sif-nsxqa.safeway.com
pgv012522.safeway.com
qgv012a32.safeway.com
qnv0126ff.safeway01.ad.safeway.com
qgv012f25.safeway.com
qgv012593.safeway.com
suppliers.safeway.com
pgv0124b5.safeway.com
qgv01233f.safeway.com
qgv01350a.safeway.com
sdaub-qa.safeway.com
dafi-atlas.safeway.com
pgv012ece.safeway.com
pgv011d7e.safeway.com
www.safeway.com
sdau-perf.safeway.com
events.biggestfantour.com
api-prod-origin.safeway.com
imperva.com
dgv0127fa.safeway.com
pgv0130c5.safeway.com
pgv01304f.safeway.com
*.safeway.com
qgv013037.safeway.com
dgv01233b.safeway.com
incapsula.com
pnv011e2e.safeway01.ad.safeway.com
logixdev-beta.safeway.com
pnv0128df.safeway01.ad.safeway.com
qnv014139.safeway.com
logixpa-beta.safeway.com
pgv011c66.safeway.com
ngcp-qi.tomthumb.com
imperva.com
dgv014861.safeway.com
delivery.safeway.com
fastforward.safeway.com
sdauc-perf.safeway.com
pgv0130d5.safeway.com
ppapo.safeway.com
sp2k-atlasdev.safeway.com
qnv013107.safeway01.ad.safeway.com
dgv011d56.safeway.com
pgv0126ad.safeway.com
eb2b.safeway.com
qgv012d26.safeway.com
qgv013271.safeway.com
qnv012700.safeway01.ad.safeway.com
qgv01274e.safeway.com
pgv011ee8.safeway.com
shop-qa3-origin.safeway.com
qacollab2016.safeway.com

Certificate

The complete raw certificate details for peoplesoft-pr.safeway.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdwqa43Ej+g//6+kzaia
qSMxgN04fHaDxOsS8+IZkpbWLaaYTVmu+eZsGujE00lyjZGjhdA5ymke3QwFf6c7
b2EVF5d9xrZBKgmkVjYtA5VfTNs+zRwSQQp1CfkeqEq75q/AmlU+Ri05ryq4Rxji
hEmRNsklyz5vWAXaJXLkazNhUdHks8NkpiUKjgb+PHnggCI9Zrix5vAw+VNkvMlZ
tjGyz08RtInEePegAGqLgxa/Akg+pnP5oZM21ZSEZuQnRcQ3DF1tw6hJjvAFCf95
PjL3h6kUcpgqyk5KauXklrZbYx9v391KFi8vRw2Pa1H8yqfyRKcQjNdlJVpSJxCb
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127312209677152192044720973235389229972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Safeway Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'peoplesoft-pr.safeway.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22452747733833118511494889750697656292475362083996241574408998224453766582403981775245433216665810842786552394150547275492860276119759385741074190832115148301106853773759354474314915163693282491697965883213680261939702603372466557398141813944217943818197523114176707707658075449125950535289467253220892814599363257610150594099000771682157598256463483603338675399797402420299478962614897546165065524063208405485591461074807696968808935824775956954182215652948890618076859324948284586480279361475366903896724723136394185722064183887149260370914609337978972402908164682740606921011856008421928312556272443182077317258023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1341 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qi.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-beta.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-prf.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa2.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qi.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct2hrqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qac.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-prf.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa1.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qi.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qi.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qac.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-prf.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa1.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-prf.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-beta.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qi.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa2.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qi.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa1.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa1.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qac.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qi.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qac.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easbi-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qi.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbus-beta.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qi.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qac.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa1.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-qa2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-prf.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-nimbus-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-nimbus-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-pr.safeway.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001586900b2bf0000040300463044022039de9a5ab51e3d50388fe8a231ccb18aaacb611c29c5e9e917c70ca5b30990170220456cfeec9634b409ab37064375bfdda74d608a36b51dc33ed884a440275f759600760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001586900b2df0000040300473045022100dc931bb6d96413a14831d89f23f1b681531a866682978e50341353e364efa34d02200204db8059c6f329a7d95886eefaa91628ff9615d05781f35e6bcd284fbd8a4d007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001586900b308000004030047304502210082e7fc05356dfa851675cb7bc65a7b5fc6da9241129ceb1950681f4d03016bc502205a76daf1daf96fceb5810a492f59e4ef1611f837228c70578df903970163ec97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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