secure9.san1.raxcdn.com
- Rackspace US Inc. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 15:1b:ca:1d:47:f6:1c:40:49:55:e0:a4:46:52:72:c3 was issued on by GeoTrust Inc..
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Rackspace US Inc.
Organization:
Rackspace US Inc.
Organization unit: IT
Organization unit: IT
State / Province:
Texas
Locality: San Antonio
Country: US
Locality: San Antonio
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 15:1b:ca:1d:47:f6:1c:40:49:55:e0:a4:46:52:72:c3Serial Number (int): 28058079293291289089119915682173186755
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 64:29:28:d9:7a:13:92:42:dd:7e:b0:57:e5:d1:2a:d9:ff:b9:4a:f5
Fingerprint (sha256): 07:7f:f0:b3:53:a6:30:81:56:bb:47:e1:f9:a3:84:94:33:8d:41:20:78:c3:01:01:dd:68:89:a4:cc:53:48:f8
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate secure9.san1.raxcdn.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure9.san1.raxcdn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.everlast.com
www.altread.com
i1.lmsin.net
other.secure9.san1.raxcdn.com
www.web-stat.com
www.hoteling.com
secure9.san1.raxcdn.com
www.altread.com
i1.lmsin.net
other.secure9.san1.raxcdn.com
www.web-stat.com
www.hoteling.com
secure9.san1.raxcdn.com
Other certificates including the domain name raxcdn.com
(limited to 100 certificates)
secure11.san1.raxcdn.com
secured2.san1.raxcdn.com
secure4.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secured3.san1.raxcdn.com
secured2.san1.raxcdn.com
secure11.san1.raxcdn.com
secured1.san1.raxcdn.com
secure8.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secured3.san1.raxcdn.com
secured2.san1.raxcdn.com
secured2.san1.raxcdn.com
secure6.san1.raxcdn.com
secure11.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure12.san1.raxcdn.com
secure5.san1.raxcdn.com
secure10.san1.raxcdn.com
secured2.san1.raxcdn.com
*.scdn3.secure.raxcdn.com
secure11.san1.raxcdn.com
secure1.san1.raxcdn.com
secured2.san1.raxcdn.com
secure2.san1.raxcdn.com
*.scdn2.secure.raxcdn.com
www.mani.co.il
secure9.san1.raxcdn.com
secure7.san1.raxcdn.com
secure6.san1.raxcdn.com
secure3.san1.raxcdn.com
secured1.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure8.san1.raxcdn.com
secure6.san1.raxcdn.com
secured1.san1.raxcdn.com
secured2.san1.raxcdn.com
secure11.san1.raxcdn.com
secure11.san1.raxcdn.com
secure8.san1.raxcdn.com
secured1.san1.raxcdn.com
secure.raxcdn.com
secured1.san1.raxcdn.com
secure10.san1.raxcdn.com
secured1.san1.raxcdn.com
secured3.san1.raxcdn.com
secure12.san1.raxcdn.com
secure9.san1.raxcdn.com
secure2.san1.raxcdn.com
secure11.san1.raxcdn.com
secure6.san1.raxcdn.com
secure4.san1.raxcdn.com
secure6.san1.raxcdn.com
secure1.san1.raxcdn.com
secure12.san1.raxcdn.com
secure10.san1.raxcdn.com
secure2.san1.raxcdn.com
*.scdn5.secure.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secure7.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secure8.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secured1.san1.raxcdn.com
secure6.san1.raxcdn.com
secure10.san1.raxcdn.com
secure7.san1.raxcdn.com
secure10.san1.raxcdn.com
secured2.san1.raxcdn.com
secured3.san1.raxcdn.com
secured2.san1.raxcdn.com
secured2.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secure2.san1.raxcdn.com
secured1.san1.raxcdn.com
secure10.san1.raxcdn.com
secure5.san1.raxcdn.com
secure9.san1.raxcdn.com
*.scdn3.secure.raxcdn.com
secured1.san1.raxcdn.com
secured3.san1.raxcdn.com
secure5.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secure2.san1.raxcdn.com
secured1.san1.raxcdn.com
*.scdn1.secure.raxcdn.com
secured2.san1.raxcdn.com
secure4.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secured3.san1.raxcdn.com
secured2.san1.raxcdn.com
secure11.san1.raxcdn.com
secured1.san1.raxcdn.com
secure8.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secured3.san1.raxcdn.com
secured2.san1.raxcdn.com
secured2.san1.raxcdn.com
secure6.san1.raxcdn.com
secure11.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure12.san1.raxcdn.com
secure5.san1.raxcdn.com
secure10.san1.raxcdn.com
secured2.san1.raxcdn.com
*.scdn3.secure.raxcdn.com
secure11.san1.raxcdn.com
secure1.san1.raxcdn.com
secured2.san1.raxcdn.com
secure2.san1.raxcdn.com
*.scdn2.secure.raxcdn.com
www.mani.co.il
secure9.san1.raxcdn.com
secure7.san1.raxcdn.com
secure6.san1.raxcdn.com
secure3.san1.raxcdn.com
secured1.san1.raxcdn.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure8.san1.raxcdn.com
secure6.san1.raxcdn.com
secured1.san1.raxcdn.com
secured2.san1.raxcdn.com
secure11.san1.raxcdn.com
secure11.san1.raxcdn.com
secure8.san1.raxcdn.com
secured1.san1.raxcdn.com
secure.raxcdn.com
secured1.san1.raxcdn.com
secure10.san1.raxcdn.com
secured1.san1.raxcdn.com
secured3.san1.raxcdn.com
secure12.san1.raxcdn.com
secure9.san1.raxcdn.com
secure2.san1.raxcdn.com
secure11.san1.raxcdn.com
secure6.san1.raxcdn.com
secure4.san1.raxcdn.com
secure6.san1.raxcdn.com
secure1.san1.raxcdn.com
secure12.san1.raxcdn.com
secure10.san1.raxcdn.com
secure2.san1.raxcdn.com
*.scdn5.secure.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secure7.san1.raxcdn.com
secure10.san1.raxcdn.com
secure11.san1.raxcdn.com
secure8.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secured1.san1.raxcdn.com
secure6.san1.raxcdn.com
secure10.san1.raxcdn.com
secure7.san1.raxcdn.com
secure10.san1.raxcdn.com
secured2.san1.raxcdn.com
secured3.san1.raxcdn.com
secured2.san1.raxcdn.com
secured2.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secure2.san1.raxcdn.com
secured1.san1.raxcdn.com
secure10.san1.raxcdn.com
secure5.san1.raxcdn.com
secure9.san1.raxcdn.com
*.scdn3.secure.raxcdn.com
secured1.san1.raxcdn.com
secured3.san1.raxcdn.com
secure5.san1.raxcdn.com
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
secure2.san1.raxcdn.com
secured1.san1.raxcdn.com
*.scdn1.secure.raxcdn.com
Certificate
The complete raw certificate details for secure9.san1.raxcdn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIQFRvKHUf2HEBJVeCkRlJywzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNDA0MDAwMDAwWhcNMTcwNDA0MjM1 OTU5WjB+MQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxFDASBgNVBAcUC1Nh biBBbnRvbmlvMRowGAYDVQQKFBFSYWNrc3BhY2UgVVMgSW5jLjELMAkGA1UECxQC SVQxIDAeBgNVBAMUF3NlY3VyZTkuc2FuMS5yYXhjZG4uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjFY6O1uyWhVtIY6K01XN31jpaM486c8sInD cw/aKyPJ4B7A6dEzzd45Vrq1OgAtBzdh2NczPvLOpapQmDcKgJ6A09BLMyB8x/5J Fx5sK+9rC8BeUs+xFQIYDnKTsg8er2dLhxylt5g2tJUEPOV0ZjkN7HCseLfIuAR3 jG92VA99s1GQ4uFtg/YlIJFfYhdgRK0H/W9T+EbwPoe0WeGFqShp5pnaKbkJtKeL H3ns9yhzg8iesTgHgiWlSsjwofkXcrcInB9ZPAUC/cmWeQ5YVlEAcPHPOsGX8IZh RvygtE0oublTH0xz/OxyjqCY+H6j7xAu6t8tQ97tRzFJAN5tbwIDAQABo4IDKTCC AyUwgZgGA1UdEQSBkDCBjYIQY2RuLmV2ZXJsYXN0LmNvbYIPd3d3LmFsdHJlYWQu Y29tggxpMS5sbXNpbi5uZXSCHW90aGVyLnNlY3VyZTkuc2FuMS5yYXhjZG4uY29t ghB3d3cud2ViLXN0YXQuY29tghB3d3cuaG90ZWxpbmcuY29tghdzZWN1cmU5LnNh bjEucmF4Y2RuLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8E JDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGV MIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3Ry dXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1 DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkv bGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaA FNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcw AYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5 bWNiLmNvbS9nbi5jcnQwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDd6x0reg1P piCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVPjrt7fAAAEAwBIMEYCIQDYPude /nOVGFVzYNko4uNmrj8Y7XSjGAl7apd8emHkiwIhAPmloCwZqrJMhMzaQSZacHZ9 Mw/qyVrLTscjgrpHuCdhAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN 3BAAAAFT467fJAAABAMARzBFAiEA4bvczVLoS94Fg2GCXVXO25r5gXfiwO/I0NaW g/blu7MCIFNUrPn/uw8uVpZf2Gey8+v1lR8Fa3Y2peH7ez35PFHiMA0GCSqGSIb3 DQEBCwUAA4IBAQAmwYSuvdu5CVay6I7norJjl3MkHcQQQ01VxLWKfulCf598Ne6E ms0ZWB5FpT3xAY+9vh4hNRlGaFyGqqNvJa2lUh92qGMV/68hsD6ANkSnxYkPyeTJ 1LkWQafxUR6tqYTogtxP2r7ogLC9gkebd8xbgwTGQOuXrvj4+/e7nySemF+1xvbG x8qWxgvt2s/SRgP+S8TxUPbpWnhZUGT3A1tMfoklvKJblFicNNGjoht+1//lVneX ZwbXbWNycqjlspJ2jPh8Ci9Opk86eY4KhWt+74L+u4t84Ji8EDpUNoSnEy5fbcUY usbxeQPj1Qi85NRo6FvHqkWK6JhCu7wXZZnM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjFY6O1uyWhVtIY6K01X N31jpaM486c8sInDcw/aKyPJ4B7A6dEzzd45Vrq1OgAtBzdh2NczPvLOpapQmDcK gJ6A09BLMyB8x/5JFx5sK+9rC8BeUs+xFQIYDnKTsg8er2dLhxylt5g2tJUEPOV0 ZjkN7HCseLfIuAR3jG92VA99s1GQ4uFtg/YlIJFfYhdgRK0H/W9T+EbwPoe0WeGF qShp5pnaKbkJtKeLH3ns9yhzg8iesTgHgiWlSsjwofkXcrcInB9ZPAUC/cmWeQ5Y VlEAcPHPOsGX8IZhRvygtE0oublTH0xz/OxyjqCY+H6j7xAu6t8tQ97tRzFJAN5t bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 28058079293291289089119915682173186755 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'San Antonio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Rackspace US Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'secure9.san1.raxcdn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25524471665783436420696262650851586731555575865237500954629635619606284655196345787036015635263160676702143496642961447970289353376768871748380713604228597511576259899575859937172876303948737244256116294797098330803939121840506514407194140713914641345459830017420557459100605093632320912797461579098805024999815886933356981825574816724629442514427301212520664577498160997181979526932970715522312025554688847076858244595734492642289580958253033680725075389603759854798051860543662961348353298890181602750301288538084332718257069294054734838751251550529657291376272386949851016731103157514041607590476596137192681532783 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.everlast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altread.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i1.lmsin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'other.secure9.san1.raxcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web-stat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoteling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure9.san1.raxcdn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153e3aededf0000040300483046022100d83ee75efe739518557360d928e2e366ae3f18ed74a318097b6a977c7a61e48b022100f9a5a02c19aab24c84ccda41265a70767d330feac95acb4ec72382ba47b82761007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153e3aedf240000040300473045022100e1bbdccd52e84bde058361825d55cedb9af98177e2c0efc8d0d69683f6e5bbb302205354acf9ffbb0f2e56965fd867b2f3ebf5951f056b7636a5e1fb7b3df93c51e2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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