*.zalora.com
Issued by RapidSSL SHA256 CA - G2
About this certificate
This digital certificate with serial number 51:73:5d:a8:22:ea:c0:76:6d:38:f3:5f:58:fd:9c:e2 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.zalora.com
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 51:73:5d:a8:22:ea:c0:76:6d:38:f3:5f:58:fd:9c:e2Serial Number (int): 108266481382540420738913896943123799266
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12
Fingerprint (sha1): 25:55:d3:2d:01:50:21:36:cf:ed:de:a0:c4:58:eb:6c:cb:f5:e5:f5
Fingerprint (sha256): 00:4e:0e:9d:fd:f5:b4:9b:ea:1c:07:ac:cf:cd:14:c9:ee:bf:d3:9a:04:34:08:b0:12:cf:37:bd:60:45:b0:af
Issuing Certificate URL: http://gs.symcb.com/gs.crt
Revocation information
OCSP Server: http://gs.symcd.comCRL Distribution Point: http://gs.symcb.com/gs.crl
Check the revocation status for certificate *.zalora.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.zalora.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.zalora.com
zalora.com
zalora.com
Other certificates including the domain name zalora.com
(limited to 100 certificates)
*.zalora.com
*.zalora.com
*.zalora.com
trender-tableau.zalora.com
images.partner.zalora.com
goto.zalora.com
affiliate.zalora.com
images.partner.zalora.com
ads.zalora.com
images.partner.zalora.com
ads.zalora.com
*.zalora.com
zalora.vn
*.zalora.com
images.partner.zalora.com
*.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
images.partner.zalora.com
trender.zalora.com
ads.zalora.com
worldwide.zalora.com
*.zalora.com
images.partner.zalora.com
images.partner.zalora.com
goto.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
www.zalora.com
images.partner.zalora.com
ads.zalora.com
zops.zalora.com
trender.zalora.com
email.zalora.com
*.zalora.com
styleguide.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
engineering.zalora.com
ads.zalora.com
goto.zalora.com
ads.zalora.com
trender-superset.zalora.com
ads.zalora.com
*.zalora.com
zalora.com
zops.zalora.com
zops-staging.zalora.com
ads.zalora.com
ads.zalora.com
goto.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
zheadcount-staging.zalora.com
*.zalora.com
*.zalora.com
trender.zalora.com
zalora.vn
ads.zalora.com
www.zalora.com
worldwide.zalora.com
ads.zalora.com
*.zalora.com
www.zalora.com
sellercenter.zalora.com
*.zalora.com
zalora.vn
zalora.com
ads.zalora.com
images.partner.zalora.com
*.zalora.com
zalora.vn
affiliate.zalora.com
ads.zalora.com
*.zalora.com
goto.zalora.com
sellercenter.zalora.com
corporate.zalora.com
www.zalora.com
z-pas.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
corporate.zalora.com
ads.zalora.com
ads.zalora.com
z-pas.zalora.com
*.zalora.com
zalora.com
trender-tableau.zalora.com
engineering.zalora.com
*.zalora.com
zalora.com
ads.zalora.com
zalora.com
*.zalora.com
*.zalora.com
trender-tableau.zalora.com
images.partner.zalora.com
goto.zalora.com
affiliate.zalora.com
images.partner.zalora.com
ads.zalora.com
images.partner.zalora.com
ads.zalora.com
*.zalora.com
zalora.vn
*.zalora.com
images.partner.zalora.com
*.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
images.partner.zalora.com
trender.zalora.com
ads.zalora.com
worldwide.zalora.com
*.zalora.com
images.partner.zalora.com
images.partner.zalora.com
goto.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
www.zalora.com
images.partner.zalora.com
ads.zalora.com
zops.zalora.com
trender.zalora.com
email.zalora.com
*.zalora.com
styleguide.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
engineering.zalora.com
ads.zalora.com
goto.zalora.com
ads.zalora.com
trender-superset.zalora.com
ads.zalora.com
*.zalora.com
zalora.com
zops.zalora.com
zops-staging.zalora.com
ads.zalora.com
ads.zalora.com
goto.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
zheadcount-staging.zalora.com
*.zalora.com
*.zalora.com
trender.zalora.com
zalora.vn
ads.zalora.com
www.zalora.com
worldwide.zalora.com
ads.zalora.com
*.zalora.com
www.zalora.com
sellercenter.zalora.com
*.zalora.com
zalora.vn
zalora.com
ads.zalora.com
images.partner.zalora.com
*.zalora.com
zalora.vn
affiliate.zalora.com
ads.zalora.com
*.zalora.com
goto.zalora.com
sellercenter.zalora.com
corporate.zalora.com
www.zalora.com
z-pas.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
corporate.zalora.com
ads.zalora.com
ads.zalora.com
z-pas.zalora.com
*.zalora.com
zalora.com
trender-tableau.zalora.com
engineering.zalora.com
*.zalora.com
zalora.com
ads.zalora.com
zalora.com
Certificate
The complete raw certificate details for *.zalora.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIQUXNdqCLqwHZtOPNfWP2c4jANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX UmFwaWRTU0wgU0hBMjU2IENBIC0gRzIwHhcNMTYwNzIxMDAwMDAwWhcNMTgwOTE5 MjM1OTU5WjAXMRUwEwYDVQQDDAwqLnphbG9yYS5jb20wggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCjb6Z6n81SXGPzWXvzGC1ixAgA+Ur1ZFFBEDjDkaO0 ub6fooc/BJLAk04f9SlYJgAWl+BbXuCSdi8+QWpTdhbblyI8rGqiqe7CBUkhLVAi XACihWptvV/BtZwYJqUPz3rguqIesYhfJg2S5jIK9y4QVawqOhziUvbzymKhT+q/ Jb6OJ6Ait4L+Pm/sKArpNtwyPFmmseOuhFOr36SuBu6040iBssMR4EmIoAQeJFq7 hNHS1lZ4DaZZOQOPXnXlZ59IHLpLkjJViRXiqyN4/QVyoHP0R56RLTniqhwaartd EWUKch+vVhKz2B0p168hyZRAiR1a+aGF2pPSRpQIdZeTZR0b5SZi9wAD4HsclUwC nIy5bVK9JXTPtvv0zfaLvzA/8cf6R9j18Epz1sDPIuW36FviDxHJhYLRcRYHcnNA m8UbWnT3swxigFuLvypnJ08W4E3L65Xipdcdx5jLBktG+zkWteMrDqXFlh5oABPT bkPi52GfwQE8pL4vzNb3FluaZieU7J0fpD8Sas2wMs1vuq0YvYvsivVLNGSkVfEO rWoxSp2beCFD76FLoVnYcouyYz3DLPeqykjyT6RFEcfEvDUukfiyTL2fYbSrwpf+ foAU2oXPkERlSVC9vxLrIuhY7CYr5GIvazMKynqbUkt2WiEMb+m1BRHypwf0vdxO ZQIDAQABo4IC/jCCAvowIwYDVR0RBBwwGoIMKi56YWxvcmEuY29tggp6YWxvcmEu Y29tMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dzLnN5bWNi LmNvbS9ncy5jcmwwbwYDVR0gBGgwZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYe aHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0 dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAfBgNVHSMEGDAWgBRM9L/oO77C JPMbRzu1bkiOFquvEjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDov L2dzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dzLnN5bWNiLmNvbS9n cy5jcnQwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AN3rHSt6DU+mIIuBrYFo cH4ujp0B1VyIjT0RxM227L7MAAABVg0zCQIAAAQDAEgwRgIhAOKhIlck1aCuRY25 5jSiK6qF1xhqcavfY3pbhAtSUN9lAiEAtsUZ9szZ+Ilm8TmDpF+b8pDCK5PUj1/G KptC66K7IxIAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVYN MwkbAAAEAwBGMEQCIAKd00hopjQPwhjc7FuugBtW8wHHIMSAnavMGwW/t0r4AiAn hRgJMIFjWjddPxwcSYdMzedek+n3+rzjgzTxVuIilAB3AGj2mPgfZIK+OozuuSgd TPxxUV1nk9RE0QpnrLtPT/vEAAABVg0zCSAAAAQDAEgwRgIhALFZpMzu1JADkifN zwPpSCZ0DZaCwd1IsE/ZoSv8Y4ldAiEA3NHE6eUGJ0AKoh/B7tnJHJyKIOPCZd6r wZ9DWckOAhUwDQYJKoZIhvcNAQELBQADggEBABBaex0mhxPeeHBLuwqdhw21Z620 g2mvutsCaxp3o/CytIRDtMZww3J0Q0emJ6+AkqFo/uGVjrnoCkV8fYDREqNfz/if +rjIf9IDkPa8GHeY/uAfutUFWBpyBOdVytJuPtWfoxahcnI7Z9Rw38Vv1fMojLaQ n5KY+JgFKXrrkBtwdbIbSVom6WP3nul3JnC1nyEb3N09tzFHE6KApyQMhxQhLi0G JwM7xIyEXPKugxWQWNVwQjX0xQrylqPp7RWIbqrSitVic856mlG/Ry+j6hD4WAvF OqfBY2X499t0xhEO500S0me7EbLMBspCoUNOaNW5d23MHiYVvQmeom4IFJ0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo2+mep/NUlxj81l78xgt YsQIAPlK9WRRQRA4w5GjtLm+n6KHPwSSwJNOH/UpWCYAFpfgW17gknYvPkFqU3YW 25ciPKxqoqnuwgVJIS1QIlwAooVqbb1fwbWcGCalD8964LqiHrGIXyYNkuYyCvcu EFWsKjoc4lL288pioU/qvyW+jiegIreC/j5v7CgK6TbcMjxZprHjroRTq9+krgbu tONIgbLDEeBJiKAEHiRau4TR0tZWeA2mWTkDj1515WefSBy6S5IyVYkV4qsjeP0F cqBz9EeekS054qocGmq7XRFlCnIfr1YSs9gdKdevIcmUQIkdWvmhhdqT0kaUCHWX k2UdG+UmYvcAA+B7HJVMApyMuW1SvSV0z7b79M32i78wP/HH+kfY9fBKc9bAzyLl t+hb4g8RyYWC0XEWB3JzQJvFG1p097MMYoBbi78qZydPFuBNy+uV4qXXHceYywZL Rvs5FrXjKw6lxZYeaAAT025D4udhn8EBPKS+L8zW9xZbmmYnlOydH6Q/EmrNsDLN b7qtGL2L7Ir1SzRkpFXxDq1qMUqdm3ghQ++hS6FZ2HKLsmM9wyz3qspI8k+kRRHH xLw1LpH4sky9n2G0q8KX/n6AFNqFz5BEZUlQvb8S6yLoWOwmK+RiL2szCsp6m1JL dlohDG/ptQUR8qcH9L3cTmUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 108266481382540420738913896943123799266 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zalora.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666761254646504219652680732365261481724768634138646335341858708847523205775362338196181796970745089877000054994659710576272383830278898514924060654898254348901959028702430198575105637321568290758547871973486839156268016558150779886318369386717897329624545922361015041190104724166275636556495298319231442874752380631405956851480560720801227410287085201650927519801873253293431349114189604841837785941067668093668671626896606271420271530717323812817384177494780639019800740331952766755044838845968804533673508553442369017207660856072348089051614990618011373198641091463891087506306207123526663095255589281744129533962380963450085156839225563469318836627795809628434661612290428695184319955454691867241554128532286407031616618533855251950496433962701795444447070496414955854539925291202659392032186195614369447378810252084732001193742970176491763050406141489165174421741262914367489660434763904760801934856564655892168752610598119932897941631292532475917943470715465431596211032735335143001659215542042711698552333551718196851981861380078355691333751339616945824102980477529516706829808088676746514327051740130632566094361863577548448058430987839512444058372775398334531159734765882052792535854223117111339595703125729238567953966583397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001560d3309020000040300483046022100e2a1225724d5a0ae458db9e634a22baa85d7186a71abdf637a5b840b5250df65022100b6c519f6ccd9f88966f13983a45f9bf290c22b93d48f5fc62a9b42eba2bb2312007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001560d33091b00000403004630440220029dd34868a6340fc218dcec5bae801b56f301c720c4809dabcc1b05bfb74af80220278518093081635a375d3f1c1c49874ccde75e93e9f7fabce38334f156e2229400770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001560d3309200000040300483046022100b159a4cceed490039227cdcf03e94826740d9682c1dd48b04fd9a12bfc63895d022100dcd1c4e9e50627400aa21fc1eed9c91c9c8a20e3c265deabc19f4359c90e0215 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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