enterprise-security-center2.geotrust.symclab.net

- Symantec Corp -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 19:73:8c:ac:b7:be:6f:d1:8c:63:22:8e:b8:05:dd:32 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Symantec Corp

Company registration number: 2158113
Organization: Symantec Corp
Organization unit: testlabs
State / Province: California
Locality: Mountain View
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 19:73:8c:ac:b7:be:6f:d1:8c:63:22:8e:b8:05:dd:32
Serial Number (int): 33830667254808846438399606529724898610
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 71:f5:e7:49:31:c5:a6:a3:03:86:b2:98:94:35:73:ef:16:7d:6d:ab
Fingerprint (sha256): 08:56:e3:49:1a:b3:45:1a:bc:49:78:42:69:54:9a:d8:52:25:55:75:20:51:1b:86:d9:84:e3:33:28:f7:3d:b9

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate enterprise-security-center2.geotrust.symclab.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enterprise-security-center2.geotrust.symclab.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enterprise-security-center2.geotrust.symclab.net

Other certificates including the domain name symclab.net

(limited to 100 certificates)
pv-adms.websecurity.symclab.net
stage3-ops.geotrust.symclab.net
stage7-ops-nm.geotrust.symclab.net
idc-digitalid-api.pki.symclab.net
pv-ecasconnector.ws.symclab.net
mpki7-uswest-dev-rdaragan.symclab.net
mmadmin11-manager.websecurity.symclab.net
sentinel2.websecurity.symclab.net
trustcenter-enterprise5.websecurity.symclab.net
symc-pc2-enroll.symclab.net
stage6-ops.geotrust.symclab.net
dev-pki-est.symclab.net
stage6-services-nm.geotrust.symclab.net
pv-idp-manager.vip.symclab.net
security-center5.geotrust.symclab.net
ft5-api-appsec-cws.ws.symclab.net
seal-test.symclab.com
ft2-clp-pki-ws.pki.symclab.net
gkhadke-iis1.samiwatest.symclab.net
pv-enterprise-ssl-adminmanager.websecurity.symclab.net
pv-testdrive-pki-idp.symclab.net
kbhalerao-lnx.websecurity.symclab.net
ft-ent-admin.bbtest.net
opscrowd.symclab.net
ptnr-ssltools.websecurity.symclab.com
prodeven1.symclab.net
stage1-windaemon.geotrust.symclab.net
ssl-certificate-center7.thawte.symclab.net
dev-security-center.geotrust.symclab.net
mmadmin5-manager.websecurity.symclab.net
ft4-seal.digitalcertvalidation.symclab.net
perf-ctlog1.websecurity.symclab.net
sentinel1.websecurity.symclab.net
ptnr-authentication.bbtest.net
ft1-smarticon.geotrust.symclab.net
stage2-ops.geotrust.symclab.net
sc-admin-enroll1.pki.symclab.net
dev-trustcenter-enterprise1.websecurity.symclab.net
pki-idp.symclab.net
ssp.gqa.vip.symc.io
verify1.thawte.symclab.net
certmanager5.websecurity.symclab.net
idc-digital-ups.pki.symclab.net
prododd1.symclab.net
ft-ee-seal.websecurity.symclab.net
gkhadke-nlb-iis.samiwatest.symclab.net
mmadmin5-manager.websecurity.symclab.net
proto-pki.symclab.com
pvvmgrdbverify.vip.symclab.net
dev-reporting.vip.symclab.net
dev-pc1-ocsp.symclab.net
stage6-cmsproxy1.geotrust.symclab.net
certmanager-webservices5.websecurity.symclab.net
stage5-services.geotrust.symclab.net
proto-pki-manager.symclab.com
rk1.symclab.net
idc-cic-sso.symclab.net
login.gdev.vip.symc.io
stage6-cmsproxy1-nm.geotrust.symclab.net
ft1-clp-pki-account.pki.symclab.net
ptnr-ciplus.pki.symclab.net
pv-enterprise-ssl-admin.websecurity.symclab.net
dev-dcs-enroll.pki.symclab.net
pv-evcs.websecurity.symclab.net
stage1-windaemon.geotrust.symclab.net
pki-cmp.symclab.net
enterprise-security-center2.geotrust.symclab.net
dev2-clp-pki-ws.pki.symclab.net
stage6-api.geotrust.symclab.net
stage1-cmsproxy2-nm.geotrust.symclab.net
proto-pki-reporting.symclab.com
stage1-windaemon-nm.geotrust.symclab.net
ft1-clp-pki-internal-svc.pki.symclab.net
oemsimulator.ws.symclab.net
dev2-clp-pki-idp.pki.symclab.net
stage2-cc-admin.geotrust.symclab.net
idc-cws-as-dev1.symclab.net
ft-enterprise-ssl-admin.websecurity.symclab.net
dev-ssl-certificate-center-enterprise1.thawte.symclab.net
mpki7-uswest-dev-rdaragan.symclab.net
swsigning.pki-saml-qa.symclab.net
ft4-securesigning.websecurity.symclab.net
mmadmin7-manager.websecurity.symclab.net
mpki7-dev-gopi.symclab.net
getcert5.websecurity.symclab.net
pvgoidservices-auth.vip.symclab.net
stage4-products-nm.geotrust.symclab.net
domainauth2.ws.symclab.net
ft5-smarticon.geotrust.symclab.net
dev-security-center1.geotrust.symclab.net
legacylistener1.symclab.net
infosec.samiwatest.symclab.net
prododd1.symclab.net
getcert8.websecurity.symclab.net
ssl-certificate-center2.thawte.symclab.net
prodeven.symclab.net
adms1.websecurity.symclab.net
mmadmin5-manager.websecurity.symclab.net
pv-mmadmin-enroll.websecurity.symclab.net
pv-viceapi.symclab.net

Certificate

The complete raw certificate details for enterprise-security-center2.geotrust.symclab.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbbS3TbICIr7em7QFAfM
hkQEKS8iCBEfWsWMG3yT/MU5QRUlMI6BtzBCyFy+EYw9+l82BS7VD0SQT4LzdhsW
bw/OUmah6ppnF8Wr7HnBazwDfNoatAwOFldg7IsankZTZNa0fJyIc/dIRl5bfSK4
1C0LD0KpzeIPvIiXDRx3Cv3CIfvy1+VpX4jTo/fYCNUBaVZJDYRwGyLMzkyfXFsA
YfWgcxVVt0tddS/asMfFLDHPbvINjwlN4Ba4vu0csAYI14pclvemcH//QUuKrbeF
dMjmaUYQPw+WrcqgRc3RUh3q81VEtahlB1xZXsJ89YWi9FkOkHBOyGLlzQcDF2YF
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33830667254808846438399606529724898610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2158113'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Symantec Corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'testlabs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'enterprise-security-center2.geotrust.symclab.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25969006238649095683942466136047208409342045182912935543040326553260060339868141161223193820279715799703933839934508523664680671379805343236100640475075516533918199645417958402123748374245176183037205071962058018391288897886040406451984901444085505127464990086280223635157309354238570726994197911147229736617019742192298263257319064331964213246766952826458747430337709937520970240849702463052946259446857356679250293448339541534276030761902715942757571591322310487575513418356303733658744844791688627304744227990570927702540048825151889276137369407115059567897559607623019919533460946844162744956111619269741152437651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-security-center2.geotrust.symclab.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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