www.contact-werbegeschenke.de
- Contact-Werbegeschenke Wiegers e.K. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 52:80:8a:6b:3a:39:bd:13:b7:42:96:6a:ab:d7:05:d7 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Contact-Werbegeschenke Wiegers e.K.
Organization:
Contact-Werbegeschenke Wiegers e.K.
Organization unit: Management
Organization unit: Management
State / Province:
Nordrhein-Westfalen
Locality: Kerken
Country: DE
Locality: Kerken
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 52:80:8a:6b:3a:39:bd:13:b7:42:96:6a:ab:d7:05:d7Serial Number (int): 109664117120214184703681439757728417239
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): a0:e8:97:26:4d:78:bf:d6:04:ec:82:10:92:31:ba:06:0a:92:b0:2f
Fingerprint (sha256): 08:cb:ef:4c:59:1c:a1:a7:f7:90:c2:4d:67:8f:f1:a1:86:2a:f2:98:05:5a:81:39:a8:c6:de:68:7d:25:a1:d6
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate www.contact-werbegeschenke.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.contact-werbegeschenke.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.contact-werbegeschenke.de
contact-werbegeschenke.de
contact-werbegeschenke.de
Other certificates including the domain name contact-werbegeschenke.de
(limited to 100 certificates)
www.contact-werbegeschenke.de
www.contact-werbegeschenke.de
cw-geschenke.de
www.contact-werbegeschenke.de
www.contact-werbegeschenke.de
www.contact-werbegeschenke.de
cw-geschenke.de
contact-werbegeschenke.de
cw-geschenke.de
www.contact-werbegeschenke.de
cw-geschenke.de
cw-geschenke.de
www.contact-werbegeschenke.de
www.contact-werbegeschenke.de
cw-geschenke.de
www.contact-werbegeschenke.de
www.contact-werbegeschenke.de
www.contact-werbegeschenke.de
cw-geschenke.de
contact-werbegeschenke.de
cw-geschenke.de
www.contact-werbegeschenke.de
cw-geschenke.de
cw-geschenke.de
www.contact-werbegeschenke.de
Certificate
The complete raw certificate details for www.contact-werbegeschenke.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIQUoCKazo5vRO3QpZqq9cF1zANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNDI3MDAwMDAwWhcNMTcwNTI3MjM1 OTU5WjCBpzELMAkGA1UEBhMCREUxHDAaBgNVBAgME05vcmRyaGVpbi1XZXN0ZmFs ZW4xDzANBgNVBAcMBktlcmtlbjEsMCoGA1UECgwjQ29udGFjdC1XZXJiZWdlc2No ZW5rZSBXaWVnZXJzIGUuSy4xEzARBgNVBAsMCk1hbmFnZW1lbnQxJjAkBgNVBAMM HXd3dy5jb250YWN0LXdlcmJlZ2VzY2hlbmtlLmRlMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAupIz196SfOvw4OA8YrcJ0lqCdC2ivGH4YYssx9Hlt9MF gxYmp9PsY468mLVsb3V3qmIU2sP/uuHCXx2hTqjOwZ+m6BwU6fU05F83JJNjeSM1 ZXFcCvGIJzmq8MDd1mupYhTAsBFhgS2VnE08AiD2RYTUPMO5gcPxft/gtazIN0Yq ybH0jcNGiDYURnIv/+lzQsPwS6DJ7t/6BQKOQUdsSV0ceVrdO8VdRCf3PlDoexLk 2MuX3noZvL9Ow/yZLLSkfoACw3jHhxRh7NEqeScgkNw1CRb+C5YsIGxki0GfS/C5 1QGO9RpxJTmJWfgs2NP2mecxydFNVRxSz19Ko/387QIDAQABo4IC0jCCAs4wQwYD VR0RBDwwOoIdd3d3LmNvbnRhY3Qtd2VyYmVnZXNjaGVua2UuZGWCGWNvbnRhY3Qt d2VyYmVnZXNjaGVua2UuZGUwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYD VR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1Ud IASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5n ZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUH AgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0 b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSME GDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYB BQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9n bi5zeW1jYi5jb20vZ24uY3J0MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA3esd K3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFUWAT6UwAABAMARzBFAiEA /gvofNFu6CzcgK7NNp3HXRF6/kPjObptTw0Pq85UEPkCIFhAkknr8x6L5nDEhU6s hv/k6hxKyDuLOaB6HC6UnUhrAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fN DsgN3BAAAAFUWAT6agAABAMARzBFAiEAvaHwyC9pIgN+yQBwKaXD5WW9g1UG5tq+ p5sLqr8SC9oCIC6Qr7XcTS4FbVvwEphUlarFfEaGtBAVBLwzMCq1+H1SMA0GCSqG SIb3DQEBCwUAA4IBAQBVS35x+TPEDXgwnTqBwoCLpQYuWXH4QzvaXvmUqlcv/84I yUn/zJRZFcg9tisru3YjIKBw0Na7fGTj3oWKw8sDvrngfZVP9vhAYsXJgG6CnQyi uBwB/ybcRg5la0zGC0FmXfXeVvUJFRkxcmkBJri4kdLLioOX4zSkFOrDFtf9uIFx dh2Oa4eISW2GkYKBIwawBVxx3Bknok+kgjhFxtVSIg2yAs+VC9bVUscRB40PvV+t v6qxVcyvop6AsaBkzrI6qtd4p5VsAld1B6ASx6BBYf0XTOAVJBANaIfd3V3Zm3Rr pu8/ZeXkspUDeWDOLS1uMqD0rS8VvxehG5uvUlFD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupIz196SfOvw4OA8YrcJ 0lqCdC2ivGH4YYssx9Hlt9MFgxYmp9PsY468mLVsb3V3qmIU2sP/uuHCXx2hTqjO wZ+m6BwU6fU05F83JJNjeSM1ZXFcCvGIJzmq8MDd1mupYhTAsBFhgS2VnE08AiD2 RYTUPMO5gcPxft/gtazIN0YqybH0jcNGiDYURnIv/+lzQsPwS6DJ7t/6BQKOQUds SV0ceVrdO8VdRCf3PlDoexLk2MuX3noZvL9Ow/yZLLSkfoACw3jHhxRh7NEqeScg kNw1CRb+C5YsIGxki0GfS/C51QGO9RpxJTmJWfgs2NP2mecxydFNVRxSz19Ko/38 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 109664117120214184703681439757728417239 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kerken' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Contact-Werbegeschenke Wiegers e.K.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Management' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.contact-werbegeschenke.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23552419869700460245882117088752306783935508800873499398596064613185956537514648007295991129035468418224893616747239319218943767932036897982106493327618166488625956467281741730971348370111108385703946943455071671255534936601245835471537374642871494214319771098314153651901795168814816905470140256866831984798956986291250852316128833791739325030769709388189432603800125888683628366772922560797734912593340373711285912479691150876552895076396169213907359538798545389562459671350094868563969557220009674092542960659831806530673196244537563780778211147026046077760638177768635364441438155236284698338245208124082792299757 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contact-werbegeschenke.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact-werbegeschenke.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001545804fa530000040300473045022100fe0be87cd16ee82cdc80aecd369dc75d117afe43e339ba6d4f0d0fabce5410f9022058409249ebf31e8be670c4854eac86ffe4ea1c4ac83b8b39a07a1c2e949d486b007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001545804fa6a0000040300473045022100bda1f0c82f6922037ec9007029a5c3e565bd835506e6dabea79b0baabf120bda02202e90afb5dc4d2e056d5bf012985495aac57c4686b4101504bc33302ab5f87d52 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00554b7e71f933c40d78309d3a81c2808ba5062e5971f8433bda5ef994aa572fffce08c949ffcc945915c83db62b2bbb762320a070d0d6bb7c64e3de858ac3cb03beb9e07d954ff6f84062c5c9806e829d0ca2b81c01ff26dc460e656b4cc60b41665df5de56f50915193172690126b8b891d2cb8a8397e334a414eac316d7fdb88171761d8e6b8788496d869182812306b0055c71dc1927a24fa4823845c6d552220db202cf950bd6d552c711078d0fbd5fadbfaab155ccafa29e80b1a064ceb23aaad778a7956c02577507a012c7a04161fd174ce01524100d6887dddd5dd99b746ba6ef3f65e5e4b295037960ce2d2d6e32a0f4ad2f15bf17a11b9baf525143