ssl.wsj.com

- Dow Jones and Company -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 77:62:9e:2f:c8:dd:46:f1:d3:13:9f:75:4c:3e:a7:28 was issued on by GeoTrust Inc..

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Dow Jones and Company

Organization: Dow Jones and Company
Organization unit: Dow Jones and Company
State / Province: New Jersey
Locality: Princeton
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:62:9e:2f:c8:dd:46:f1:d3:13:9f:75:4c:3e:a7:28
Serial Number (int): 158690184997146926714432524500326065960
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): f9:1a:65:60:93:ae:df:44:c7:c4:73:5b:2b:f0:2a:d5:e1:b6:2d:6f
Fingerprint (sha256): 03:62:83:61:26:72:b9:f8:79:b6:8c:68:3e:74:f6:be:ad:c3:8c:42:a0:70:2c:f4:2f:c2:d3:ca:39:4d:e2:69

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate ssl.wsj.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.wsj.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.marketwatch.com
store.barrons.com
s3.marketwatch.com
asset.wsj.net
api-staging-secure.wsj.net
cdn.smpdev.wsj.com
si3.wsj.net
vir.www.wsj.com
sfonts.wsj.net
sg.wsj.net
rwidget.wsj.net
wsjsafehouse.com
art-secure.wsj.net
assets.efinancialnews.com
s1.wsj.net
kr.wsj.com
s3.wsj.net
wn.wsj.com
si4.wsj.net
ore.www.wsj.com
s1.marketwatch.com
www.ssl.wsj.com
si.wsj.net
blogs.wsj.com
widgets.stg.dowjones.com
video-api-secure.stg.wsj.com
video-api-secure.wsj.com
s.marketwatch.com
blogs.marketwatch.com
services.dowjones.com
www.wsjsafehouse.com
s4.wsj.net
djlogin.stg.dowjones.com
cdn.store.wsj.net
portfolio.wsj.com
realtime.wsj.com
help.wsj.com
services-secure.stg.dowjones.com
ss.wsj.net
cdn.smpdev.wsj.net
s.wsj.net
si2.wsj.net
global.stg.factiva.com
professor.wsj.com
cbuy.wsj.com
m-secure.wsj.net
city.wsj.com
s4.marketwatch.com
newsletters.barrons.com
si1.wsj.net
apistg.dowjones.com
wsjproreg.wsj.com
suggest.stg.dowjones.com
student.wsj.com
api-secure.wsj.net
admin.stream.wsj.com
services-secure.dowjones.com
portfolio.marketwatch.com
sj.wsj.net
fonts.wsj.net
api.stg.dowjones.com
guides.wsj.com
s.smartmoney.net
portfolio.barrons.com
v-secure.wsj.net
cdn.store.wsj.com
indo.wsj.com
s2.wsj.net
utilities.stg.dowjones.com
sf.wsj.net
sc.wsj.net
s2.marketwatch.com
fonts-ssl.wsj.net
admin.stream.marketwatch.com
blogs.barrons.com
ssl.wsj.com

Other certificates including the domain name wsj.com

(limited to 100 certificates)
mlnewsplus.wsj.com
customercenter.wsj.com
suggest.factiva.com
brand.stg.dowjones.com
cmonetwork.wsj.com
iwap.wsj.com
id.cn.wsj.com
accounts.dowjones.com
suggest.int.factiva.com
on.wsj.com
iphonetest.wsj.com
credit-card-api-00.store.wsj.com
blueprint.stg.wsj.com
blue-partner.wsj.com
customercenter.wsj.com
accounts.dowjones.com
newsplus.int.wsj.com
newsplus.wsj.com
asia.buy.wsj.com
ssl.wsj.com
print.wsj.com
www.wsj.com
conferences.wsj.com
wsjtechhealth.wsj.com
setup.wsj.com
commenting.wsj.com
*.d.dev.wsj.com
ae.wsj.com
confirm.wsj.com
subscribe.wsj.com
ssl.wsj.com
print.wsj.com
update.wsj.com
projects.wsj.com
education.wsj.com
payment-01.store.wsj.com
chat.wsj.com
adfinder.wsj.com
r-uat.smpdev.wsj.com
guides.wsj.com
newsplus.wsj.com
*.wsj.com
stg.accounts.dowjones.com
www.s.dev.wsj.com
professor.wsj.com
www.s.dev.realestate.wsj.com
contact.wsj.com
www.s.dev.wsj.com
amp.wsj.com
sm.wsj.com
confirm.s.dev.wsj.com
CONTACT.WSJ.COM
deloitte.stg.wsj.com
*.s.dev.wsj.com
at.wsj.com
partner.wsj.com
iphonetest.wsj.com
newsplus.web.prod.pib.dowjones.io
professional.wsj.com
financialcrisis.wsj.com
highschool.wsj.com
r.wsj.com
prepare.wsj.com
ceocouncil.wsj.com
*.stg.dowjones.com
partners.wsj.com
foefestival.wsj.com
newsplus.web.prod.pib.dowjones.io
amp.wsj.com
mlsignin.stg.wsj.com
suggest.dowjones.com
chat.s.dev.wsj.com
v2.pixel.djp.data.newscorp.com
*.wsj.com
test9.dowjones.com
sbk-beta.asia.wsj.com
store.wsj.com
login.wsj.com
*.dowjones.com
cyber.pro.wsj.com
commerce.wsj.com
journalist.wsj.com
investinginafrica.wsj.com
am.wsj.com
global.factiva.com
accounts.dowjones.com
classifieds.wsj.com
store.wsj.com
customercenter.wsj.com
buy.wsj.com
confirm.wsj.com
blue-customercenter.wsj.com
journalist.stg.wsj.com
financingthefuture.stg.wsj.com
prod.payment.store.wsj.com
on.wsj.com
bbtest.wsj.com
commercialpartnerships.wsj.com
journalist.wsj.com
print.wsj.com

Certificate

The complete raw certificate details for ssl.wsj.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zu4vOLDm/4z7Pzh2QPm
QWuoubzT2LxLZSg88EHz4+yIJX/xhJMYz5Bz/3NgnxbxAw/mPvW55XFeR0rVFHqd
aoQkOo/kC0xC5+m0TrNDNM4P3J+Qo3IdhXRjexyJLJ2ekgvI/O3i718WA9b4SkDb
l8zJYluKEzmzsrCYRCaPEYsA/MsMGbQk9UKJwByiZuM9kNMssT0MeXuOsJi+PBNf
tQyvqWeuDM9B8Q/W5E2HvAQuK4QIu1BRRZ4mqjqLw2nBjEVDk2V0SU1vqMxyyi/7
SCuw9YxbDkLgy1Bl9otbX3Wu646GG2s0n2CH+J6paWbPJMzL1tVjrqrpzU4igrKl
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158690184997146926714432524500326065960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Dow Jones and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Dow Jones and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ssl.wsj.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27170685402135270159083683599749574301948038370950438269330416154418937344835150766219120642744925970837078225962336737438639724291272749195150528673245965910910347785270108302485523285654726027693110082095947057195445429608865152631564182575912357993383272080621546564984499374926501725299813176098422766090893979746380934855580220313480365948154508190223300822890769238675449513987624691520986907542712877046649037085529032959272054135156431414313604517818881248206202293517900097309100682606396104076859937331830159195473705903553586750502606554123480466065042378498139009948903223453686385971929744436917192271231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1430 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.barrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging-secure.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.smpdev.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si3.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vir.www.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfonts.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwidget.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjsafehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-secure.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.efinancialnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wn.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si4.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ore.www.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssl.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.stg.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-api-secure.stg.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-api-secure.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsjsafehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djlogin.stg.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.store.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtime.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-secure.stg.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.smpdev.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si2.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.stg.factiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professor.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbuy.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-secure.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'city.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.barrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si1.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apistg.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsjproreg.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suggest.stg.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-secure.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stream.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-secure.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sj.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stg.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guides.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.smartmoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.barrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v-secure.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.store.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indo.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilities.stg.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts-ssl.wsj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stream.marketwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.barrons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.wsj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000152ac99b8270000040300473045022100993ac3fe086078d4267ff019a73f6d5d4dbf22d13033b371e976180a1d56a6a302205d7885c98348aa3af9516cbf7c502dbc7561e9cc292bbe1ab19d2d10d516716d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000152ac99b84b000004030047304502206e3965f62af1d082bb21d46ce641801399e26d4e993fc8cc57cb80556e9d3812022100981003d409cb5a7d9c57ca424438f52a5338cb9935a0a71b939cc61db5b56c2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c2dcfac61bc5dd67c437b9f7481b34bc5e1107b18b7d4d29fe9482c710cc70952a4659e32b8242a4cd4cd47a53de855efdbdaf3c39951ca3e4425722b925553bdfd5b53fccdb815e33d7fd75f06160802cdc93d2e6bf45b9944d0fddf86701a23101e7d30f1e39e471b11d1cb3fc9b4b4bcd048b999dc5e91b4d20c857f3b0c69ec3f320294b80dbd48713254830ec528b95bf7806655d104e3ed4886f83ba0d924d656598a96c42449de275085ab4c214ec832692b2a072102d100691ee4b287a95d3bcb9bd3c19452a797eefd1c13684f425f4f6bf6e868fbc34996f8d2065e95f896d609b02c99e7cede85441c174c912a4f6ca1b4bc81b6d2eff18b05d5e