www.carmudi.com
- Carmudi GmbH -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 6f:ce:50:fe:54:ec:a7:2c:a9:ef:37:e2:a5:2f:41:ae was issued on by GeoTrust Inc..
With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Carmudi GmbH
Organization:
Carmudi GmbH
Organization unit: Carmudi
Organization unit: Carmudi
State / Province:
Berlin
Locality: Berlin
Country: DE
Locality: Berlin
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6f:ce:50:fe:54:ec:a7:2c:a9:ef:37:e2:a5:2f:41:aeSerial Number (int): 148615563427988243918102014565704221102
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 80:1c:be:2e:83:03:e9:80:28:9c:38:9f:47:01:f7:e1:bf:4e:0e:44
Fingerprint (sha256): 02:5c:ce:5f:ab:ae:aa:6e:1f:a2:35:a6:16:54:ce:1d:c1:3f:3d:eb:18:ea:1b:4f:56:cd:28:72:ca:b1:fd:da
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate www.carmudi.com
22
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.carmudi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vi.carmudi.vn
www.carmudi.vn
static.carmudi.vn
carmudi.vn
en.carmudi.vn
carmudi.com.ph
www.carmudi.com.ph
en.carmudi.com.ph
static.carmudi.com.ph
www.carmudi.co.id
carmudi.co.id
en.carmudi.co.id
ba.carmudi.co.id
static.carmudi.co.id
carmudi.qa
static.carmudi.qa
en.carmudi.qa
www.carmudi.qa
ar.carmudi.qa
carmudi.com
static.carmudi.com
www.carmudi.com
www.carmudi.vn
static.carmudi.vn
carmudi.vn
en.carmudi.vn
carmudi.com.ph
www.carmudi.com.ph
en.carmudi.com.ph
static.carmudi.com.ph
www.carmudi.co.id
carmudi.co.id
en.carmudi.co.id
ba.carmudi.co.id
static.carmudi.co.id
carmudi.qa
static.carmudi.qa
en.carmudi.qa
www.carmudi.qa
ar.carmudi.qa
carmudi.com
static.carmudi.com
www.carmudi.com
Other certificates including the domain name carmudi.com
(limited to 100 certificates)
www.carmudi.com
sni47695.cloudflaressl.com
carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
chef.carmudi.com
*.ad.carmudi.com
*.carmudi.com
www.carmudi.com
chef.carmudi.com
*.bf.carmudi.com
*.carmudi.com
*.saudi.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
carmudi.com
carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
carmudi.com
www.carmudi.com
*.carmudi.com
www.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
ad.carmudi.com
sni47695.cloudflaressl.com
carmudi.com
carmudi.com
carmudi.com
*.carmudi.com
www.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
*.ne.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
carmudi.com
sni47695.cloudflaressl.com
tunnel.dev.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
www.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
*.carmudi.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
www.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
chef.carmudi.com
*.ad.carmudi.com
*.carmudi.com
www.carmudi.com
chef.carmudi.com
*.bf.carmudi.com
*.carmudi.com
*.saudi.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
carmudi.com
carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
carmudi.com
www.carmudi.com
*.carmudi.com
www.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
ad.carmudi.com
sni47695.cloudflaressl.com
carmudi.com
carmudi.com
carmudi.com
*.carmudi.com
www.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
*.ne.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
carmudi.com
sni47695.cloudflaressl.com
tunnel.dev.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
www.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
*.carmudi.com
sni47695.cloudflaressl.com
*.carmudi.com
*.carmudi.com
*.carmudi.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
sni47695.cloudflaressl.com
www.carmudi.com
sni47695.cloudflaressl.com
Certificate
The complete raw certificate details for www.carmudi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIQb85Q/lTspyyp7zfipS9BrjANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwOTE1MDAwMDAwWhcNMTgxMjE1MjM1 OTU5WjByMQswCQYDVQQGEwJERTEPMA0GA1UECAwGQmVybGluMQ8wDQYDVQQHDAZC ZXJsaW4xFTATBgNVBAoMDENhcm11ZGkgR21iSDEQMA4GA1UECwwHQ2FybXVkaTEY MBYGA1UEAwwPd3d3LmNhcm11ZGkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA6N+F2ck250CMZY139wbVjgrxxnpZWX3f1g+L844DC3xTbHg0pSFC UaQR6BtlztVxuhViPnsAP7KKZv/jgJFW7tBtUp51FbmYjCZjwcFt3aoCHA4W2m+n xXx/VbtdCWqSH1JLddHsrzm7E0ZpqgK8K3AbCPPQmHE6LhFDylhndJlcoFDmXdDq SOBrt7guBAzh4tZ0ZjPXvf9DmfPcFtha3FaKYGNo48E9EDycyKXWXudj0gTjYAOb hrukOPc6VGrt9aH4RJEhKdHvZPGMntuAkiNZOUhlLSvqW+P+ulFU2qMEOWkCJEN3 N9ec8vfOuBW6kR62YfiQdqqXT5EKkD3+9wIDAQABo4IDITCCAx0wggGDBgNVHREE ggF6MIIBdoINdmkuY2FybXVkaS52boIOd3d3LmNhcm11ZGkudm6CEXN0YXRpYy5j YXJtdWRpLnZuggpjYXJtdWRpLnZugg1lbi5jYXJtdWRpLnZugg5jYXJtdWRpLmNv bS5waIISd3d3LmNhcm11ZGkuY29tLnBoghFlbi5jYXJtdWRpLmNvbS5waIIVc3Rh dGljLmNhcm11ZGkuY29tLnBoghF3d3cuY2FybXVkaS5jby5pZIINY2FybXVkaS5j by5pZIIQZW4uY2FybXVkaS5jby5pZIIQYmEuY2FybXVkaS5jby5pZIIUc3RhdGlj LmNhcm11ZGkuY28uaWSCCmNhcm11ZGkucWGCEXN0YXRpYy5jYXJtdWRpLnFhgg1l bi5jYXJtdWRpLnFhgg53d3cuY2FybXVkaS5xYYINYXIuY2FybXVkaS5xYYILY2Fy bXVkaS5jb22CEnN0YXRpYy5jYXJtdWRpLmNvbYIPd3d3LmNhcm11ZGkuY29tMAkG A1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6 Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCB hDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl cy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdl b3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4 m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3lt Y2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2BCG2LqfUOPw 7Sg1e20yqESXV1wVw62ExRW+XIYpP3KNpawkHpSnlHwEQNNciiSMOHKERKn6HZfe RckK9+xXEyt5pKma3a/zxOvOdyhR3FVOjFAtKrtRD+ulZqBc2Hh3f4ED23BNMgw9 qRAvxSVb8UICeceSe2yM75U8JqkfwCAHbSGvq4BSR7+doQc+UQQnAt2Vj4C+NJCC PQ5pqJEbC5uYpbGRS64pxmor9kRmsFdARXUbVJ46SGmhKmePZvI28VkKK6hR7XKK /QIMHpnwdit75zHR9Xw5NzgrSGCV9Do4PdHYUzW9UJDVDYGck+GvtxcGhkfN76Y8 YmmnX8xe0g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N+F2ck250CMZY139wbV jgrxxnpZWX3f1g+L844DC3xTbHg0pSFCUaQR6BtlztVxuhViPnsAP7KKZv/jgJFW 7tBtUp51FbmYjCZjwcFt3aoCHA4W2m+nxXx/VbtdCWqSH1JLddHsrzm7E0ZpqgK8 K3AbCPPQmHE6LhFDylhndJlcoFDmXdDqSOBrt7guBAzh4tZ0ZjPXvf9DmfPcFtha 3FaKYGNo48E9EDycyKXWXudj0gTjYAObhrukOPc6VGrt9aH4RJEhKdHvZPGMntuA kiNZOUhlLSvqW+P+ulFU2qMEOWkCJEN3N9ec8vfOuBW6kR62YfiQdqqXT5EKkD3+ 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 148615563427988243918102014565704221102 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Carmudi GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Carmudi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.carmudi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29397509979706458603191035234274246306936131376866917679279863983592351282472641845270823075980324992100614400607115139251534737445612838246810897262635842934490054041616581666514338239778876996671030216957085588086879595929844246868888652509596057798675977963618896574839132930178588255165686183761022064988974453295088572258358675724185843980864680038322215411774409986821988265431300396135304094688547245942266047205617607289563125415987642347348073465905497120991996814401369097003139097786289395033769385896170881893279552387210856729384870660138931247436867007552673218423829389683866015772712272100805394169591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vi.carmudi.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmudi.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.carmudi.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmudi.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.carmudi.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmudi.com.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmudi.com.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.carmudi.com.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.carmudi.com.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmudi.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmudi.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.carmudi.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba.carmudi.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.carmudi.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmudi.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.carmudi.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.carmudi.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmudi.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.carmudi.qa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmudi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.carmudi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmudi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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