secure01.fanaticsretailgroup.com

- Fanatics -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 36:b8:dd:b9:c9:4a:6f:76:61:9c:65:b8:fd:2a:eb:f3 was issued on by GeoTrust Inc..

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Fanatics

Organization: Fanatics
Organization unit: Online
State / Province: Florida
Locality: Jacksonville
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 36:b8:dd:b9:c9:4a:6f:76:61:9c:65:b8:fd:2a:eb:f3
Serial Number (int): 72738191526384811429692188892076895219
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): e2:ee:2a:4f:c1:9b:b7:d7:c0:ee:c3:a5:34:f4:25:da:cb:ed:e3:84
Fingerprint (sha256): 05:6c:2c:46:8b:25:0e:66:35:65:b9:88:bc:46:3a:ff:fd:36:fd:d6:6f:64:85:b8:fe:50:cd:be:a0:88:33:5c

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate secure01.fanaticsretailgroup.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure01.fanaticsretailgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.nflshop.com
secure02.fanaticsretailgroup.com
www.surffanatics.com
www.collegebasketballstore.com
www.collegefootballstore.com
product-images.fanatics.com
nba.frgimages.com
qc3-m.fanatics.com
www.fansedge.com
shop.mlb.com
images.surffanatics.com
yahoosports.teamfanshop.com
www.gnomefanatics.com
nhl.frgimages.com
www.ladyfanatics.com
qc2-www.fanatics.com
nascar.frgimages.com
ord-s05.fanatics.com
m.fansedge.com
fanatics.frgimages.com
mlb.frgimages.com
mobile.footballfanatics.com
nflshop.frgimages.com
qc3-images.fanatics.com
espnshop.frgimages.com
fansedge.frgimages.com
mshop.mlb.com
www.kidfanatics.com
www.nflshop.com
mlsstore.frgimages.com
m.fanatics.com
qc3-www.fanatics.com
secure01.fanaticsretailgroup.com

Other certificates including the domain name fanaticsretailgroup.com

(limited to 100 certificates)
secure02.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
*.sites.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
san-2-s1.tlsprovisioning.exacttarget.com
secure03.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure06.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
image.email-aaanational.com
secure04.dv.fanaticsretailgroup.com
secure06.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure07.fanaticsretailgroup.com
secure05.fanaticsretailgroup.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure07.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure04.fanaticsretailgroup.com
image.email-aaanational.com
returns.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
image.email-aaanational.com
secure03.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com

Certificate

The complete raw certificate details for secure01.fanaticsretailgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRMf73e18JbA+LmU9jw1
+7q8AccBxOXHrdlC/4bjzAVLtZuEEUF/P22HAZM8Q3g5643bXdba2nPHckLF841k
3OEHQgvW8eA/T2QS9RbTFZpDyGHuvj7Y4F5iMR4MuNohKLdpjAxn/fy5Bhtugx9n
LcHjnkeLZzNotYM3B1Fws4TSgm29Cde7gA8wK/JgddWsxz2nVhZGAS/wHBtxnlnb
yk8uNjClSoCa9jNE9vE27gNmzJh9IFUHy/lwgF37wiYXyk581TqYENF5iLCeIN3t
ZkIU3PoakEKEom4HUFoXbdWD2FnukqoqB+5tqP+/pxdZMJwf5n34GyZsMRtoAasg
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72738191526384811429692188892076895219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fanatics'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Online'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure01.fanaticsretailgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23868470403183061880102494619814528171356225789650783290695255680440124579625632898051407446181048897671378456989616218915285198873086884389273772100571297387571311886535488452448522479249330471900076425265746508640258321946078657903403288728367649925276795868403599280232458743046157495832910431431792224173646750167778449166991664745129181700913665859236071087877151562541422587314187982332621314985180406896262041997874570869795610223557327462629852330937266588319942120487997378137105910964179634294546736986465186668734335094714249867459019058838473736713610909632191794626657926427178191729675533692659829514251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure02.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surffanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegebasketballstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegefootballstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product-images.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc3-m.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fansedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.surffanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoosports.teamfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnomefanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhl.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladyfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc2-www.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nascar.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ord-s05.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fansedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlb.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.footballfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflshop.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc3-images.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnshop.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fansedge.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mshop.mlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidfanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlsstore.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc3-www.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure01.fanaticsretailgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ac88a86bf13af3a83cacdb5c4d804b62037d4988e6ec645838fe3f183a02fda0f1d16d88f788eee8cb8048562bc78b2629af02407d7218033d32d7a79088a5d8139959536e90307bc15f8649cd0b00298270855b363a9644da83e666988a576b8af789a3ca5f783a80ac38ba2f6c0e0b530029337722e7713410a6e64e139f409a2e79f9b34f5e22167e8da51b6cf849ac2595927fbf40851c1e91179c243667ad9bdb4b606cd37ea608db53b5a157ce5a9c84767040d75a331914a044c986c7c2298b9e79fbdab020f8fe751717dc71cc22423f15bda01de0ee99657063f44d0d4619999cd17182f0bff49719c69d284649981b0731278b2ef77cde8495593