stg-cloud.oracle.com

- Oracle Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 54:66:a3:c3:52:94:54:99:39:89:67:c0:b3:b3:10:1f was issued on by GeoTrust Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Oracle Corporation

Organization: Oracle Corporation
State / Province: California
Locality: Redwood City
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 54:66:a3:c3:52:94:54:99:39:89:67:c0:b3:b3:10:1f
Serial Number (int): 112188087433317662577790461922524729375
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 5b:29:75:f5:27:ba:35:d7:7f:65:be:c0:68:54:ee:2e:76:4c:52:fd
Fingerprint (sha256): 00:65:2c:0a:4c:2a:c5:11:5c:c1:cd:29:27:5a:89:cd:08:8d:a7:75:21:c3:13:d2:70:73:a2:2a:1f:e4:60:27

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate stg-cloud.oracle.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg-cloud.oracle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg-java.us1.oraclecloudapps.com
api-test-compute.us1.cloud.oracle.com
stg-myaccount.cloud.oracle.com
stg-javaservices.us1.cloud.oracle.com
stg-myservices.us1.cloud.oracle.com
crmas.oracle.com
bi-crmas.oracle.com
fin-crmas.oracle.com
prc-crmas.oracle.com
ic-crmas.oracle.com
scm-crmas.oracle.com
stg-myservices.us1.oraclecloud.com
crm-crmas.oracle.com
console-test-compute.us1.cloud.oracle.com
prj-crmas.oracle.com
stg-cldadmininternal.us1.cloud.oracle.com
stg-console.us1.cloud.oracle.com
stg-servicestatus.cloud.oracle.com
hcm-crmas.oracle.com
stg-developer.us1.oraclecloud.com
stg-messaging.us1.oraclecloud.com
stg-cloud.oracle.com

Other certificates including the domain name oracle.com

(limited to 100 certificates)
dockerhub-eloqua.us.oracle.com
uingv4001.us.oracle.com
wfivm01803.us.oracle.com
monacotest.us.oracle.com
cdpap.oracle.com
msp00adi.us.oracle.com
brmdc-ise-mg-3.aaa.oracle.com
aqaoraapp7.us.oracle.com
kkm00edj.in.oracle.com
den01xjs.us.oracle.com
www-stage.oracle.com
academy-stage.oraclecorp.com
hq-bps-staging-2.us.oracle.com
test.oracle.com
*.db.dc2.c9qaga.us.oracle.com
brmdc04-102-ja2500-1-vip.us.oracle.com
unifiermobile.in.oracle.com
wfdmzvm00629.us.oracle.com
opnec-vpn-us.oracle.com
slc17jyk.us.oracle.com
stg-cloud.oracle.com
championsnews.oracle.com
desktop-alt.osc.oracle.com
tyo-ips-2.jp.oracle.com
ilearningtest.oracle.com
adc-ips-11.us.oracle.com
appwfdmzvm00536.us.oracle.com
whq-ips-1.us.oracle.com
den02pil.us.oracle.com
lb-iad-peonetworking2-gxp-prod.oracle.com
llg00cej.uk.oracle.com
dev-project-log.us.oracle.com
leochat.us.oracle.com
download-secure.oracle.com
aqaoraapp16.us.oracle.com
gmp-dev.oraclecorp.com
pout.no.oracle.com
slc05cty.us.oracle.com
osnstaging-prod.oracle.com
msp52859.us.oracle.com
sgdsca.osc.oracle.com
den00sen.us.oracle.com
brmepoapp02.us.oracle.com
adcfodldap02.oracle.com
utiltw.tw.oracle.com
retailfortify.us.oracle.com
psfdr-prod11g.us.oracle.com
oecet.oracle.com
busgf1203.us.oracle.com
hidmp0761.us.oracle.com
ca-oltf-services-ps.us.oracle.com
den02mbg.us.oracle.com
gmp-dev.oraclecorp.com
utilhk.hk.oracle.com
llg-q2-ips-2.llg.oracle.com
auc02mgr.us.oracle.com
rodgwf02.oracle.com
ngcc-sit-integration.oracle.com
www-legacy-stage.oracle.com
aolesc34.us.oracle.com
odc-addthis-prod-01.oracle.com
jpidgv0001.jp.oracle.com
rws3270880.us.oracle.com
busgl0910.us.oracle.com
jiuhua.cn.oracle.com
*.us1.cloud.oracle.com
bma.us.oracle.com
den02azy.us.oracle.com
hdssimphony.uk.oracle.com
jpsh-expc-2b.jp.oracle.com
salescentral-dev.oraclecorp.com
slc01bgk.us.oracle.com
docs-uat2.us.oracle.com
den00lkj.us.oracle.com
msp00bcg.us.oracle.com
epdc01odgwe02.oracle.com
omm-stage.us.oracle.com
mandaprimavera.oraclecorp.com
dnovmlx44.us.oracle.com
pqa-stage.us.oracle.com
aserp2010.oracle.com
osnstaging.oracle.com
retriever.us.oracle.com
ospct.oracle.com
kkm00ckx.in.oracle.com
slc04yqt.us.oracle.com
mydesktop-mig.oraclecorp.com
championsnews.oracle.com
apex-ext-stg.appoci.oracle.com
rgbu-mfpeecs-qaedc01ab-ext.us.oracle.com
wfdmzvm00555.us.oracle.com
slc10akr.us.oracle.com
lb-drc-nonprod-int.oracle.com
utilus.us.oracle.com
den00gyi.us.oracle.com
userp2040c.us.oracle.com
slc040oodstor17.us.oracle.com
rws3270872.us.oracle.com
*.db.dc2.c9qaga.us.oracle.com
jdash.se.oracle.com

Certificate

The complete raw certificate details for stg-cloud.oracle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbDCCBlSgAwIBAgIQVGajw1KUVJk5iWfAs7MQHzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTUwNjI0MDAwMDAwWhcNMTYwODIyMjM1
OTU5WjB1MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEVMBMGA1UE
BxQMUmVkd29vZCBDaXR5MRswGQYDVQQKFBJPcmFjbGUgQ29ycG9yYXRpb24xHTAb
BgNVBAMUFHN0Zy1jbG91ZC5vcmFjbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4JNmSElNBxSjPsJGogdJPvm0X0+yvVsn1qMb9OvwjMtltmds
kNg12TwXSMRteRV5zKboY2sPdwHiaRhGgnwUJaIKtJu72g2l8KvEEY45ML0J//Nz
k7Bp/UvVBgcpDwpx0XCYd8hrCCWXlYBg9OWmgThD/QdSemg+3JKMsfpbnwmvDV/S
8VwvpOnLRyOtyHvtL22SDhiKEYs8ilXbfCw5F353M5prMxHthMMCYKUTrbLEAwlr
H+EfxGibO2xJNF0HLKopUhTnu3SLPsBrVKSOwkTZ7zOobFvcvSkLO4Y+LJZ+fcaS
9q7IbPnyzttBghq4+i6hFHiNwUn9njXFS50lIQIDAQABo4IEJzCCBCMwggKeBgNV
HREEggKVMIICkYIgc3RnLWphdmEudXMxLm9yYWNsZWNsb3VkYXBwcy5jb22CJWFw
aS10ZXN0LWNvbXB1dGUudXMxLmNsb3VkLm9yYWNsZS5jb22CHnN0Zy1teWFjY291
bnQuY2xvdWQub3JhY2xlLmNvbYIlc3RnLWphdmFzZXJ2aWNlcy51czEuY2xvdWQu
b3JhY2xlLmNvbYIjc3RnLW15c2VydmljZXMudXMxLmNsb3VkLm9yYWNsZS5jb22C
EGNybWFzLm9yYWNsZS5jb22CE2JpLWNybWFzLm9yYWNsZS5jb22CFGZpbi1jcm1h
cy5vcmFjbGUuY29tghRwcmMtY3JtYXMub3JhY2xlLmNvbYITaWMtY3JtYXMub3Jh
Y2xlLmNvbYIUc2NtLWNybWFzLm9yYWNsZS5jb22CInN0Zy1teXNlcnZpY2VzLnVz
MS5vcmFjbGVjbG91ZC5jb22CFGNybS1jcm1hcy5vcmFjbGUuY29tgiljb25zb2xl
LXRlc3QtY29tcHV0ZS51czEuY2xvdWQub3JhY2xlLmNvbYIUcHJqLWNybWFzLm9y
YWNsZS5jb22CKXN0Zy1jbGRhZG1pbmludGVybmFsLnVzMS5jbG91ZC5vcmFjbGUu
Y29tgiBzdGctY29uc29sZS51czEuY2xvdWQub3JhY2xlLmNvbYIic3RnLXNlcnZp
Y2VzdGF0dXMuY2xvdWQub3JhY2xlLmNvbYIUaGNtLWNybWFzLm9yYWNsZS5jb22C
IXN0Zy1kZXZlbG9wZXIudXMxLm9yYWNsZWNsb3VkLmNvbYIhc3RnLW1lc3NhZ2lu
Zy51czEub3JhY2xlY2xvdWQuY29tghRzdGctY2xvdWQub3JhY2xlLmNvbTAJBgNV
HRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8v
Z24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQw
PwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMv
cmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90
cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9I9qFeJuj
fFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2duLnN5bWNk
LmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcnQwDQYJ
KoZIhvcNAQELBQADggEBAEnrGk6iMTlGuECIg7aZ+OkfD7x05BO1W7GtblfRGe0W
zlPLZi6eSHA8HRXnyx+ZpFTvyDvf/EIR74kOAGPHkEvCDBcLGzUXyffkG2RcBLJZ
XYUvpBminCXBVa10PZDEBr/yZf7aymqET6J/5cYd6H9+CkSsWrYlzhe7PLoWUmOb
h9lOcLclKHolgdvhI47EvDqABERmDr0Nbz/MpJM0K+nTJNtkgDBSvzvo70Ec5bl9
mVJsgCE6wQ9CXqdnE3mwYO30awQGFh/tKPygIYm4W+YGSSDs8CjzBMXNLZTVYLkc
j93VQbnt6WxQG+CX51mOkUp/bTUhRIn8JGbNzuLaT0k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JNmSElNBxSjPsJGogdJ
Pvm0X0+yvVsn1qMb9OvwjMtltmdskNg12TwXSMRteRV5zKboY2sPdwHiaRhGgnwU
JaIKtJu72g2l8KvEEY45ML0J//Nzk7Bp/UvVBgcpDwpx0XCYd8hrCCWXlYBg9OWm
gThD/QdSemg+3JKMsfpbnwmvDV/S8VwvpOnLRyOtyHvtL22SDhiKEYs8ilXbfCw5
F353M5prMxHthMMCYKUTrbLEAwlrH+EfxGibO2xJNF0HLKopUhTnu3SLPsBrVKSO
wkTZ7zOobFvcvSkLO4Y+LJZ+fcaS9q7IbPnyzttBghq4+i6hFHiNwUn9njXFS50l
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112188087433317662577790461922524729375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'stg-cloud.oracle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28350065734841404788185456377786732687275447169436183079865309068803332708854372356384558442882341583098665557126583643262292884796819049170947727691326823624185498886143248094898262988716138801097683755075925176793950689815473492032513962606050959401930478583932399328314731984408563943144975466733796113166660387879765682977647229815348879699750692835338058039773335373795495427650009855764917104075313779606903466509703167861763490851239338918074182149783735283050693534389968219583063936461732794575813611429420152922460230160879276675799708822847459564415708807712779439135399676957581981773429307881804984558881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (661 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-java.us1.oraclecloudapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-test-compute.us1.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-myaccount.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-javaservices.us1.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-myservices.us1.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fin-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prc-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-myservices.us1.oraclecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console-test-compute.us1.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prj-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cldadmininternal.us1.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-console.us1.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-servicestatus.cloud.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcm-crmas.oracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-developer.us1.oraclecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-messaging.us1.oraclecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cloud.oracle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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