*.index.about.com
- IAC Search & Media, Inc. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 1b:53:ca:be:e7:18:02:95:e0:ed:7a:f3:4a:61:ba:e2 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
IAC Search & Media, Inc.
Organization:
IAC Search & Media, Inc.
State / Province:
California
Locality: Oakland
Country: US
Locality: Oakland
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:53:ca:be:e7:18:02:95:e0:ed:7a:f3:4a:61:ba:e2Serial Number (int): 36324228697061998307127642457955744482
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 57:d5:f2:c2:4a:03:71:5e:1c:df:f8:62:77:ec:6a:3f:9d:cb:be:af
Fingerprint (sha256): 03:ce:85:a9:ad:99:13:71:0e:aa:e5:7f:64:00:a9:eb:7f:ec:96:53:fc:5d:6b:97:2b:be:dd:0c:f3:34:af:15
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate *.index.about.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.index.about.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.index.about.com
Other certificates including the domain name about.com
(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
Certificate
The complete raw certificate details for *.index.about.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIQG1PKvucYApXg7XrzSmG64jANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTUwOTAyMDAwMDAwWhcNMTgwOTAxMjM1 OTU5WjB3MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEQMA4GA1UE BxQHT2FrbGFuZDElMCMGA1UEChQcSUFDIFNlYXJjaCAmYW1wOyBNZWRpYSwgSW5j LjEaMBgGA1UEAxQRKi5pbmRleC5hYm91dC5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0W/zNl5PgDauOZpyWZ/kvSjXCvgW6iysOgI5dh0ACWRcn Hov3TMPcK+Srdm+p2S3BwQQ2wJ/kdmh0dylhSss7o9sQkQr9wD+fThsFnCvYcRtc cvaSijgkJNjv+artW8W1cFv0kIrRSHCZvGZZw3jefYD7LY4kL/yf8AFVBO4yVped tXit7tPK5y8qCH1zUfWBOkeW/T8np3xHozmfbW6hGGYHew7ou+CD7zu7oImtPWht bnfS3QaRKtqw8UN+BVekGc81/WsvwTxOmkE5PE8/4ahK8sqLwpncv0jy+BvV+9Iz xkczMqFaMu6ijhxmF0rfLWVO8b5xXzF2YMsfVAlHAgMBAAGjggGjMIIBnzAcBgNV HREEFTATghEqLmluZGV4LmFib3V0LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQE AwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNy bDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBz Oi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBB BggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2Vz L3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEsw STAfBggrBgEFBQcwAYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYa aHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcnQwDQYJKoZIhvcNAQELBQADggEBAAgo foOSzmf+MyT20ToswAR6zyFrkMGuwCj7au8CDM9F4wiUgU7blelcwJL5Tg6+WByf heMc2Q5mRBlbZ9DtOL9DktCWiaRAkdufHiqwS0CGuOpEu4LKRnCNp4pJhZOdDJ9K 93ah79Wx1F2kw2hBkuUNMsVojRdwm9LP/vLbrfhzkbvGWnkogkUzavAJNqjtIoJe dkJflCHgvBNR7YDV1pYoNXB7I/J8UE9qWMxGsxhD4ohxRqohNitWKKyWSx5vM+p5 4c4w6SSn7+cJfD0c67zsJxIUKNv0Vh7i0PxKtEntVx9AsiByZZFdDuxrvpxkhTm4 3T4NPGdXsm536FdNJ4w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFv8zZeT4A2rjmaclmf5 L0o1wr4FuosrDoCOXYdAAlkXJx6L90zD3Cvkq3ZvqdktwcEENsCf5HZodHcpYUrL O6PbEJEK/cA/n04bBZwr2HEbXHL2koo4JCTY7/mq7VvFtXBb9JCK0UhwmbxmWcN4 3n2A+y2OJC/8n/ABVQTuMlaXnbV4re7TyucvKgh9c1H1gTpHlv0/J6d8R6M5n21u oRhmB3sO6Lvgg+87u6CJrT1obW530t0GkSrasPFDfgVXpBnPNf1rL8E8TppBOTxP P+GoSvLKi8KZ3L9I8vgb1fvSM8ZHMzKhWjLuoo4cZhdK3y1lTvG+cV8xdmDLH1QJ RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 36324228697061998307127642457955744482 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oakland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IAC Search & Media, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.index.about.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22768255626718064542028928027160184072963076832465091127897055681736896778511141855824714763049448997466100145749461356460671739086194293368513304676796466825690075741959366361654256781643437680250251297445930673678834790682422824262819681974627211978310612546249174404479470852400017243105171098957020509972003871859199583714651576631828985641316410063759720901348134068534078076002378694555899599534309690964695774126003005751732510531048676161003440532082809747336257223217487950326130807920295768911478991447498315942197507963234862324820712619400927392304689320536742111022384156252428546786605668864116428900679 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.index.about.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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