www.nivea.de

- Beiersdorf AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 11:21:96:da:41:48:f2:83:98:f1:c9:14:29:68:e2:10 was issued on by GeoTrust Inc..

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Beiersdorf AG

Organization: Beiersdorf AG
State / Province: Hamburg
Locality: Hamburg
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:96:da:41:48:f2:83:98:f1:c9:14:29:68:e2:10
Serial Number (int): 22771281378059908548928235613270368784
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 13:c7:71:17:91:bc:61:31:bc:66:a9:48:1c:7b:b7:0d:e0:ea:ee:db
Fingerprint (sha256): 05:62:48:b8:20:19:87:08:6e:ea:d7:19:32:79:10:f5:9d:57:08:8e:45:01:7b:06:55:bc:70:00:ee:65:31:3f

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.nivea.de

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nivea.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nivea.ee
www.nivea.no
www.nivea.com.au
www.nivea.com
www.nivea.at
www.nivea.com.tr
www.nivea.rs
www.nivea.co.th
www.nivea.hu
www.nivea.dk
www.fr.nivea.ch
www.de.nivea.ch
www.nivea.ch
www.nivea.gr
www.nivea.lv
www.nivea.ru
www.nivea.co.nz
www.nivea.co.uk
www.nivea.it
www.nivea.fi
www.nivea.lt
www.nivea.fr
www.nivea.pt
www.nivea.pl
www.nivea.ro
www.nivea.se
www.nivea.es
www.nivea.si
www.nivea.cz
www.nivea.co.ke
www.nivea.com.pl
www.nivea-me.com
www.en.nivea-me.com
www.nivea.be
www.nivea.bg
www.nivea.ie
www.nivea.hr
www.fr.nivea.ca
www.en.nivea.ca
www.nivea.ca
www.nivea.nl
www.nivea.sk
www.nivea.com.mx
www.nivea.de
nivea.de

Other certificates including the domain name nivea.de

(limited to 100 certificates)
Beiersdorf Aktiengesellschaft
chiosco.flp.ch
www.glamitalia.com
autodiscover.epaper-poonen.neuer-bund-verlag.de
magazin.nivea.de
kiosk.citytipp.org
www.nivea.de
magazin.ferienmagazin-deutschland.de
nivea.de
chiosco.flp.ch
nivea.de
ref-ci-brands.nivea.de
dialog.nivea.de
webkiosk.die-bank.de
akamai-san204.exacttarget.com
magazine.arbeit-und-arbeitsrecht.de
www.nivea.de
dialog.nivea.de
nivea.de
www.nivea.de
brochures.hilliard.com
akamai-san204.exacttarget.com
az-cdn-test.nivea.de
epaper.chili-peppers.de
shop.nivea.de
kiosk.astrosofa.com
autodiscover.epaper-poonen.neuer-bund-verlag.de
fall-magazine.robinsonlightingandbath.com
publikationen.kmu.org
magazine.arbeit-und-arbeitsrecht.de
nivea.de
preview.nivea.de
magazine.arbeit-und-arbeitsrecht.de
kiosk.seniorenreisen.de
akamai-san204.exacttarget.com
neubau-projekte.vr-immoservice-mainfranken.de
magazin.ferienmagazin-deutschland.de
blaetterkatalog.andrees-angelreisen.de
dialog.nivea.de
www.nivea.de
www.nivea.de
www.podworko.nivea.pl
webkiosk.die-bank.de
fall-magazine.robinsonlightingandbath.com
www.nivea.de
www.sblaettle.at
ext14.nivea.de
ext14.nivea.de
social.nivea.de
www.nivea.de
www.nivea.de
akamai-san204.exacttarget.com
www.podworko.nivea.pl
m.nivea.de
kiosk.velototal.de
www.nivea.de
dialog.nivea.de
nivea.com.tr
cloud.newsletter.nivea.de
nivea.de
nivea.de
neubau-projekte.vr-immoservice-mainfranken.de
dialog.nivea.de
bhuat.nivea.de
kiosk.seniorenreisen.de
kiosk.flp.at
www.nivea.de
www.sblaettle.at
brochures.hilliard.com
chiosco.flp.ch
nivea.de
nivea.de
magazine.arbeit-und-arbeitsrecht.de
social.nivea.de
magazin.plusperfekt.de
brochures.hilliard.com
epaper.immobilienboerse-ag.ch
az.nivea.de
kiosk.seniorenreisen.de
nivea.de
nivea.de
Beiersdorf Aktiengesellschaft
kiosk.seniorenreisen.de
app-service.nivea.de
nivea.de
bhuat.nivea.de
webkiosk.die-bank.de
kiosk.flp.at
kiosk.flp.de
www.nivea.de
*.app-service.nivea.de
nivea.de
shop.nivea.de
www.podworko.nivea.pl
nivea.com.tr
brochures.hilliard.com
kiosk.flp.de
www.nivea.de
nivea.de
kiosk.flp.at

Certificate

The complete raw certificate details for www.nivea.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TMs8gDLl77aNu8dQdqB
ga0Ls3lDfTqn1/kK93eomfQiNwIUQPCbrb+10pnN0jERZGgkPtqQZ4lsqJSF94ml
ah8WMqibajhi8nO3Xx+K6uQMamDE3redjdbjANFpErhNa+ae1Z83Ef7VcKwh6juc
j4tHpLtIE7ZMY8OJNJh+zdXNcx+HNwQsnsZOc3u0o5b9b7DWqmzZ3P5ycxp44Gka
M7yjOVM1QDblGHfnJigmKX6AJRSwg3PmjGq/bZV+gGBAT04Gu2bLJEoavLEl1eON
JuR735swrEcR9Bq+K94MbMHSZVW3q0GOjtlemLuCvsLHVMEA+RxvZEn9drt426ib
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22771281378059908548928235613270368784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beiersdorf AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nivea.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29438760670056059353810084871957869465096100401476193194545568387789716526415261224213839117049361360331755912984445527037422305835992173606864265245502897129182255713785661476594282925054593084693518004208210491545102928724105208660607884901033707703783644755568370092573498203899230275614841918889478910556224242532030996196786982809165167870283834912509920824292002805063037004012001575322577103655571254119691932350146308153944322977064323236272544830486859927177683019812256486361826913175023571963806404618540782611462815889480853468367052149243758514354933625616080257653601297525248870859949372168099594804049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.nivea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.de.nivea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.nivea-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.nivea.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.nivea.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nivea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivea.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015728084b5500000403004730450220185ae2bb9afb04d5e4aa0cb97a2188de5c529c865ff7b3e58a7968d7e8a9303c022100dc4b41b533fdc2bbb4ef2b5bb143d74ebae1c90890e70f7ea93d537290bed27d007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015728084cfb0000040300483046022100a3ce4aacc893a47efb735e994a8e55648cc7e5962148ba455d42b8dcb7dec1bf022100f8acf22c37f11693c9a7d2a9b0f28d5cb7f8446dc73572b32c82c7440cc26a26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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