openid.auth.wfp.org
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 0a:8a:8b:15:f4:53:b7:6d:d9:10:8b:74:ac:e5:aa:35 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=openid.auth.wfp.org
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:8a:8b:15:f4:53:b7:6d:d9:10:8b:74:ac:e5:aa:35Serial Number (int): 14011637918668834782354132237440887349
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): d3:bb:23:b8:eb:7e:b6:fa:e3:6d:d6:54:10:30:ce:da:15:5c:95:67
Fingerprint (sha256): 07:21:a9:71:ee:c2:b8:15:2f:25:45:b1:29:f6:68:bb:93:1a:af:34:10:73:ff:14:b7:06:cc:94:5e:a9:fd:22
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate openid.auth.wfp.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for openid.auth.wfp.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
openid.auth.wfp.org
Other certificates including the domain name wfp.org
(limited to 100 certificates)
helpdesk.travelleaders.com
speakto.ner.wfp.org
helpdesk.travelleaders.com
api.efs.wfp.org
*.sdn.wfp.org
wga.wfp.org
5728757302165504-fe2.pantheonsite.io
app.dev.mealstracker.lbn.wfp.org
5728757302165504-fe2.pantheonsite.io
partnerconnect.wfp.org
helpdesk.travelleaders.com
api.dev.comp.wfp.org
servicedesk.nga.wfp.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
*.opweb.wfp.org
*.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
training.comet.wfp.org
gis.tur.wfp.org
partnerships.comet.wfp.org
ko.donate.wfp.org
docs.lms.wfp.org
qa.dashboard.wfp.org
staging.spaplus.wfp.org
kontext.wfp.org
dev.api.efs.wfp.org
openid.auth.wfp.org
speakto.cod.wfp.org
partnerships.comet.wfp.org
job-listing.wfp.org
openid.auth.wfp.org
helpdesk.travelleaders.com
speakto.mwi.wfp.org
helpdesk.andersonmt.org
indblik.wfp.org
helpdesk.andersonmt.org
dev.maps.slv.wfp.org
api.dev.dashboard.wfp.org
etcconnect.bgd.wfp.org
mobile.less.wfp.org
farm2go.wfp.org
5728757302165504-fe2.pantheonsite.io
docs.gefs.wfp.org
*.guesthouse.wfp.org
go.docs.wfp.org
api.wfp.org
dev.vulnerabilityneedsreview.syr.wfp.org
qa.scope.eguide.wfp.org
irm.analytics.wfp.org
*.comet.wfp.org
mail.wfp.org
action.bangkok.wfp.org
training.simsas.wfp.org
helpdesk.andersonmt.org
supplychain.go.wfp.org
pit.cbt.wfp.org
esm.wfp.org
*.schoolconnect.wfp.org
speakto.uga.wfp.org
maano.api.wfp.org
*.hosting.wfp.org
mobile.wfp.org
wfpapi.dev.beneficiaryenrolment.syr.wfp.org
ja.news.wfp.org
servicedesk.frauenthal-automotive.com
api.simsas.wfp.org
membership.executiveboard.wfp.org
helpdesk.andersonmt.org
api.pos.syr.wfp.org
qa.oevmis.wfp.org
helpdesk.andersonmt.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
buildingblocks.jor.wfp.org
ssd.wfp.org
training.spaplus.wfp.org
5728757302165504-fe2.pantheonsite.io
wall.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
portal.sen.wfp.org
dev.plusschoolmenus.wfp.org
5728757302165504-fe2.pantheonsite.io
qa.plusschoolmenus.wfp.org
spring.wfp.org
5728757302165504-fe2.pantheonsite.io
panorama.wfp.org
5728757302165504-fe2.pantheonsite.io
status.api.wfp.org
helpdesk.andersonmt.org
*.selfservice.go.wfp.org
qa.its.wfp.org
qa.comet.wfp.org
integrator.efs.wfp.org
dev.auctiondigitaloffice.wfp.org
wob.dev.oims.wfp.org
catalog.efs.wfp.org
donatenow.wfp.org
speakto.ner.wfp.org
helpdesk.travelleaders.com
api.efs.wfp.org
*.sdn.wfp.org
wga.wfp.org
5728757302165504-fe2.pantheonsite.io
app.dev.mealstracker.lbn.wfp.org
5728757302165504-fe2.pantheonsite.io
partnerconnect.wfp.org
helpdesk.travelleaders.com
api.dev.comp.wfp.org
servicedesk.nga.wfp.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
*.opweb.wfp.org
*.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
training.comet.wfp.org
gis.tur.wfp.org
partnerships.comet.wfp.org
ko.donate.wfp.org
docs.lms.wfp.org
qa.dashboard.wfp.org
staging.spaplus.wfp.org
kontext.wfp.org
dev.api.efs.wfp.org
openid.auth.wfp.org
speakto.cod.wfp.org
partnerships.comet.wfp.org
job-listing.wfp.org
openid.auth.wfp.org
helpdesk.travelleaders.com
speakto.mwi.wfp.org
helpdesk.andersonmt.org
indblik.wfp.org
helpdesk.andersonmt.org
dev.maps.slv.wfp.org
api.dev.dashboard.wfp.org
etcconnect.bgd.wfp.org
mobile.less.wfp.org
farm2go.wfp.org
5728757302165504-fe2.pantheonsite.io
docs.gefs.wfp.org
*.guesthouse.wfp.org
go.docs.wfp.org
api.wfp.org
dev.vulnerabilityneedsreview.syr.wfp.org
qa.scope.eguide.wfp.org
irm.analytics.wfp.org
*.comet.wfp.org
mail.wfp.org
action.bangkok.wfp.org
training.simsas.wfp.org
helpdesk.andersonmt.org
supplychain.go.wfp.org
pit.cbt.wfp.org
esm.wfp.org
*.schoolconnect.wfp.org
speakto.uga.wfp.org
maano.api.wfp.org
*.hosting.wfp.org
mobile.wfp.org
wfpapi.dev.beneficiaryenrolment.syr.wfp.org
ja.news.wfp.org
servicedesk.frauenthal-automotive.com
api.simsas.wfp.org
membership.executiveboard.wfp.org
helpdesk.andersonmt.org
api.pos.syr.wfp.org
qa.oevmis.wfp.org
helpdesk.andersonmt.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
buildingblocks.jor.wfp.org
ssd.wfp.org
training.spaplus.wfp.org
5728757302165504-fe2.pantheonsite.io
wall.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
portal.sen.wfp.org
dev.plusschoolmenus.wfp.org
5728757302165504-fe2.pantheonsite.io
qa.plusschoolmenus.wfp.org
spring.wfp.org
5728757302165504-fe2.pantheonsite.io
panorama.wfp.org
5728757302165504-fe2.pantheonsite.io
status.api.wfp.org
helpdesk.andersonmt.org
*.selfservice.go.wfp.org
qa.its.wfp.org
qa.comet.wfp.org
integrator.efs.wfp.org
dev.auctiondigitaloffice.wfp.org
wob.dev.oims.wfp.org
catalog.efs.wfp.org
donatenow.wfp.org
Certificate
The complete raw certificate details for openid.auth.wfp.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIQCoqLFfRTt23ZEIt0rOWqNTANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE2MDQwNjAwMDAwMFoXDTE4MDQwNjIzNTk1 OVowHjEcMBoGA1UEAwwTb3BlbmlkLmF1dGgud2ZwLm9yZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKcUX3wXLWnUIfZURZ/YniFzAt0PgemVxW1P7NLz 2tIQBGZ/bLZ8szHv7jzz33NL5ULCReHZtnYiv4dB1rIYvwK/Sd7v4KBM+GH0wJ81 /xRvO8UmZ0xPg97g6mWWJ+Q+1AluKlzxXAbXQeyX2tZcubR/+Tu3/JwTq9rAP/in CHf+ymcgKcDmgBAZYPGFZybBgcFveomr92UT2J9zdcAF+7CGb65CZk80Iqsr8lvV JGgfIFjr5fsg0Gjm6ffjynK0rMUO1Z1I9w45fk/x+bkydC4i6SL80iFm6D8pKrwp fgVKx2TY0GwK6wRGRffDp74+PQHtYWl5HcNGDDapfOaL9UkCAwEAAaOCAvowggL2 MB4GA1UdEQQXMBWCE29wZW5pZC5hdXRoLndmcC5vcmcwCQYDVR0TBAIwADArBgNV HR8EJDAiMCCgHqAchhpodHRwOi8vZ3Auc3ltY2IuY29tL2dwLmNybDBvBgNVHSAE aDBmMGQGBmeBDAECATBaMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBpZHNz bC5jb20vbGVnYWwwLAYIKwYBBQUHAgIwIAweaHR0cHM6Ly93d3cucmFwaWRzc2wu Y29tL2xlZ2FsMB8GA1UdIwQYMBaAFJfCJ1CewsnsDIgyyHyt4qYBT9pvMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYB BQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Auc3ltY2QuY29tMCYGCCsG AQUFBzAChhpodHRwOi8vZ3Auc3ltY2IuY29tL2dwLmNydDCCAYAGCisGAQQB1nkC BAIEggFwBIIBbAFqAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswA AAFT60fhegAABAMASDBGAiEA4zNe5b3QSgjPFNlDjo6zLGVeulwPo5UcjVAieRWs rfACIQD90YpvRRbqpcmgw2KxPO+xXv6YCz0JjTl9wAR7RLaLIwB3AKS5CZC0GFgU h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABU+tH4awAAAQDAEgwRgIhAPKPNX0t jwKWsqlJAkbi4vnDHExWJ/W+GPiRvUYNl8l7AiEA2QhWLefYVdXE/1oOSTxae228 XLUkFu+O4LzdotDTSDwAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7 xAAAAVPrR+G8AAAEAwBHMEUCIDc2F0/gMZGmyxHhQQd3d6u8X3ho1RA3d/G8+uwA GqO1AiEA1UtyrLuKByWyOcR51KXRWlosKqjvvKVlRNsRfI5TVi4wDQYJKoZIhvcN AQELBQADggEBAGRPQXJWwjNWlEQKyHVB6T4uHd+BsQcFUIwrOCFr/kjg3Bumdgsa RpPqsU/KTsznFeucb10TSZ9n8H7UTYQN+z2vnRC558bQxVwQy48TXapyIHozHhGm rgjAdOaMNcBfm7rwkCjO3U0Q35pZDy3xkUgqlDxePm6hFm95FN6sKgeij8GvAL7k 5MlqDyy1pFiVnk6jPCAM9hTpKRlobxz48rpaqOyav+972thkFqDuKtSwEQtR5TjH dhJC6cRGLjGopDVRStRPo2YTIcEWlQ5gh3zugKZaqB7yLURbi51jTmnMT2e01Ohi FRWGEqGeSmgATzFdlODFrYJANSst21UJjJU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxRffBctadQh9lRFn9ie IXMC3Q+B6ZXFbU/s0vPa0hAEZn9stnyzMe/uPPPfc0vlQsJF4dm2diK/h0HWshi/ Ar9J3u/goEz4YfTAnzX/FG87xSZnTE+D3uDqZZYn5D7UCW4qXPFcBtdB7Jfa1ly5 tH/5O7f8nBOr2sA/+KcId/7KZyApwOaAEBlg8YVnJsGBwW96iav3ZRPYn3N1wAX7 sIZvrkJmTzQiqyvyW9UkaB8gWOvl+yDQaObp9+PKcrSsxQ7VnUj3Djl+T/H5uTJ0 LiLpIvzSIWboPykqvCl+BUrHZNjQbArrBEZF98Onvj49Ae1haXkdw0YMNql85ov1 SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14011637918668834782354132237440887349 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'openid.auth.wfp.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21091843223761145937551879761272046942760087066413089801222713127011257849698838209164733713136891773191445443055146416065206751252920337872949430126942959371037563890093263143717265826177560431192161227501590511550854954853069827925069118392315393462866146225634702106341144881295448386126840974285787755724777110172580876036571259581522397339120713586053052627017792616187461675129502977755210103050423229724453909420599887076579323206702744186467776271089907728155808814685716205278600279438128800274087038760519847185308127378059645977269965517160367392008531377592184774647159603182549450000675289175889577506121 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.auth.wfp.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153eb47e17a0000040300483046022100e3335ee5bdd04a08cf14d9438e8eb32c655eba5c0fa3951c8d50227915acadf0022100fdd18a6f4516eaa5c9a0c362b13cefb15efe980b3d098d397dc0047b44b68b23007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153eb47e1ac0000040300483046022100f28f357d2d8f0296b2a9490246e2e2f9c31c4c5627f5be18f891bd460d97c97b022100d908562de7d855d5c4ff5a0e493c5a7b6dbc5cb52416ef8ee0bcdda2d0d3483c00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000153eb47e1bc000004030047304502203736174fe03191a6cb11e141077777abbc5f7868d5103777f1bcfaec001aa3b5022100d54b72acbb8a0725b239c479d4a5d15a5a2c2aa8efbca56544db117c8e53562e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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