www.townebankmortgage.com
- TowneBank -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 21:c8:ad:fb:dc:93:54:fe:7d:a8:a7:e9:49:4a:01:d2 was issued on by GeoTrust Inc..
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
TowneBank
Organization:
TowneBank
Organization unit: IT
Organization unit: IT
State / Province:
Virginia
Locality: Suffolk
Country: US
Locality: Suffolk
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 21:c8:ad:fb:dc:93:54:fe:7d:a8:a7:e9:49:4a:01:d2Serial Number (int): 44906512044004227780355304160884294098
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): e1:da:f8:8c:32:66:fa:36:76:5a:c0:78:ae:c7:94:32:dd:5d:c6:90
Fingerprint (sha256): 01:a1:92:f2:34:e8:49:da:de:e6:ef:53:f8:68:70:18:a9:36:39:7a:4f:02:46:4f:28:0f:c6:c0:1e:d7:cc:14
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate www.townebankmortgage.com
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.townebankmortgage.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
applynow.franklinfederalmortgage.com
franklinfederalmortgage.com
www.franklinfederalmortgage.com
www.townecarolinas.com
townecarolinas.com
applynow.townecarolinas.com
simontownemortgage.com
www.simontownemortgage.com
applynow.simontownemortgage.com
www.newtownemortgage.com
applynow.newtownemortgage.com
newtownemortgage.com
www.homesalemortgage.com
applynow.homesalemortgage.com
homesalemortgage.com
townemortgage.us
applynow.townemortgage.us
www.townemortgage.us
applynow.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
franklinfederalmortgage.com
www.franklinfederalmortgage.com
www.townecarolinas.com
townecarolinas.com
applynow.townecarolinas.com
simontownemortgage.com
www.simontownemortgage.com
applynow.simontownemortgage.com
www.newtownemortgage.com
applynow.newtownemortgage.com
newtownemortgage.com
www.homesalemortgage.com
applynow.homesalemortgage.com
homesalemortgage.com
townemortgage.us
applynow.townemortgage.us
www.townemortgage.us
applynow.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
Other certificates including the domain name townebankmortgage.com
(limited to 100 certificates)
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
apply.townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
a.townebank.net
townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
apply.townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
a.townebank.net
townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
Certificate
The complete raw certificate details for www.townebankmortgage.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIlDCCB3ygAwIBAgIQIcit+9yTVP59qKfpSUoB0jANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwODI2MDAwMDAwWhcNMTgwOTIyMjM1 OTU5WjB3MQswCQYDVQQGEwJVUzERMA8GA1UECAwIVmlyZ2luaWExEDAOBgNVBAcM B1N1ZmZvbGsxEjAQBgNVBAoMCVRvd25lQmFuazELMAkGA1UECwwCSVQxIjAgBgNV BAMMGXd3dy50b3duZWJhbmttb3J0Z2FnZS5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4L+i0UkJT9P1ffn/aJH/36zctABnk9aeJS/VwJj5dltUE d+OZOJxdau1ea/aBlgSK2XxA6tKJPq/QCXuFSfYv24f++z0UUjhmYlrPL350OyJi XZOogDMtz3T6Me/J4LzoBUB1jNGYiKx6r95+TfI4Ki3WZn6sdDCOE0Z5g1Eym727 HCWD68s3FkRBtI1MpjYldtkHWuGdqEqYKE/PSqEWBRtiUks1rR/gyvgkEd7x3quX W8jGN5k1BP55CL6bvMLzQ9N8YC4M3ZdlwC9/3eeQyvXA6dt8P6UT71fPRwd0DTa/ 5v2eGl48Wj74yx5FTuovjsh1JzQI+swY6EpqfiQJAgMBAAGjggVNMIIFSTCCAkIG A1UdEQSCAjkwggI1giRhcHBseW5vdy5mcmFua2xpbmZlZGVyYWxtb3J0Z2FnZS5j b22CG2ZyYW5rbGluZmVkZXJhbG1vcnRnYWdlLmNvbYIfd3d3LmZyYW5rbGluZmVk ZXJhbG1vcnRnYWdlLmNvbYIWd3d3LnRvd25lY2Fyb2xpbmFzLmNvbYISdG93bmVj YXJvbGluYXMuY29tghthcHBseW5vdy50b3duZWNhcm9saW5hcy5jb22CFnNpbW9u dG93bmVtb3J0Z2FnZS5jb22CGnd3dy5zaW1vbnRvd25lbW9ydGdhZ2UuY29tgh9h cHBseW5vdy5zaW1vbnRvd25lbW9ydGdhZ2UuY29tghh3d3cubmV3dG93bmVtb3J0 Z2FnZS5jb22CHWFwcGx5bm93Lm5ld3Rvd25lbW9ydGdhZ2UuY29tghRuZXd0b3du ZW1vcnRnYWdlLmNvbYIYd3d3LmhvbWVzYWxlbW9ydGdhZ2UuY29tgh1hcHBseW5v dy5ob21lc2FsZW1vcnRnYWdlLmNvbYIUaG9tZXNhbGVtb3J0Z2FnZS5jb22CEHRv d25lbW9ydGdhZ2UudXOCGWFwcGx5bm93LnRvd25lbW9ydGdhZ2UudXOCFHd3dy50 b3duZW1vcnRnYWdlLnVzgh5hcHBseW5vdy50b3duZWJhbmttb3J0Z2FnZS5jb22C GXd3dy50b3duZWJhbmttb3J0Z2FnZS5jb22CFXRvd25lYmFua21vcnRnYWdlLmNv bTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpo dHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwB AgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNv dXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3 dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9 I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2du LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5j cnQwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AN3rHSt6DU+mIIuBrYFocH4u jp0B1VyIjT0RxM227L7MAAABVsdUP1UAAAQDAEYwRAIgC8h+UPeOW0nt8I8Zo8+r BKgnXeqSfLPccRe8RqTAiGcCICWAmYdTKKXpW1vyiUuehuDrM9Yriqbv6jl/PDs/ invrAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFWx1RAeQAA BAMASDBGAiEAnriHi/FWL+5VQHem4JsWRs7qb4NyiC4bY9kbha0lr8QCIQDRcQiu Mcd58XW6TYRj/LL0roMCR2vKzbybP9oqhCrzbQB2AGj2mPgfZIK+OozuuSgdTPxx UV1nk9RE0QpnrLtPT/vEAAABVsdUQIEAAAQDAEcwRQIgUntsLdFHDU4YNaYwBNw2 Wy8jE08Q0lIUm8NXEv2JdSMCIQD2AtS/wJm6z/QBA65lAYrzy52bdugX9tWYVEJt qXZ1XjANBgkqhkiG9w0BAQsFAAOCAQEAMvXaKBxlCdo+xExyQK35T6v6jn+cUotv maqNaMvM7k/OdVEvguShWcQib1YhidPtc1FA/RSyEwyb+yeBRpQ4mQT/f7se9zsa 6TOP+3CndgyTrBm9T56t0FA+/dutfMenJgzB/KDvHsX0yRo6u+qUZRtBPsOiUyWz KjgtV1ya9wGDXyVRCPQomyiI7B5gp3ZrmbsokieQRT0DyPmjWklqD5qdskbXix7S vA+V4LeULJjpWJ6m5T+MWc4tzRhR1bZTgfL2jzLFW2lacxB0SU6b3HYOIh1YyOQG 3VZzd/Dkk0K5bZaBQYD9A1zc3aL7CededMI7kNP/VqO2nhtuD6MUdA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+C/otFJCU/T9X35/2iR/ 9+s3LQAZ5PWniUv1cCY+XZbVBHfjmTicXWrtXmv2gZYEitl8QOrSiT6v0Al7hUn2 L9uH/vs9FFI4ZmJazy9+dDsiYl2TqIAzLc90+jHvyeC86AVAdYzRmIiseq/efk3y OCot1mZ+rHQwjhNGeYNRMpu9uxwlg+vLNxZEQbSNTKY2JXbZB1rhnahKmChPz0qh FgUbYlJLNa0f4Mr4JBHe8d6rl1vIxjeZNQT+eQi+m7zC80PTfGAuDN2XZcAvf93n kMr1wOnbfD+lE+9Xz0cHdA02v+b9nhpePFo++MseRU7qL47IdSc0CPrMGOhKan4k CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 44906512044004227780355304160884294098 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Suffolk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TowneBank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.townebankmortgage.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31330724440723513973750919129056438478925716739831528533189172741741597173751684329739157005537378409607236079105185068861372986289967842004787815639135645642910754449366949033740395846769172985717657479920086401636287201725519762915441215698005211792418038145121420694014856106708424180997370308612936412017706669684331378861031695511783551356074307319469343871641305081015634812863009776143307512947868240756284054632614995077295908467487476090731585687626768527583987634086838719217431340913317466358083550134046206296129314241446540832000717143992755821638454603240652187048183237037274689390823322114018456249353 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (569 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynow.franklinfederalmortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklinfederalmortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinfederalmortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townecarolinas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townecarolinas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynow.townecarolinas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simontownemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simontownemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynow.simontownemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtownemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynow.newtownemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtownemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homesalemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynow.homesalemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesalemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townemortgage.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynow.townemortgage.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townemortgage.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynow.townebankmortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townebankmortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townebankmortgage.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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