www.chinacache.com

- Beijing Blue-IT Technology Co.,Ltd. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 4f:01:8d:d8:ae:ec:c1:65:ec:2e:5b:4c:6b:ea:9e:36 was issued on by GeoTrust Inc..

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Beijing Blue-IT Technology Co.,Ltd.

Organization: Beijing Blue-IT Technology Co.,Ltd.
State / Province: Beijing
Locality: Beijing
Country: CN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:01:8d:d8:ae:ec:c1:65:ec:2e:5b:4c:6b:ea:9e:36
Serial Number (int): 105017080951040718252870065181600423478
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): aa:f0:e0:2b:e9:97:dd:af:49:b7:34:7f:0f:97:58:ca:fb:1e:e7:81
Fingerprint (sha256): 09:c0:5f:fe:f9:fe:75:9b:fe:c8:31:a1:f2:fb:08:9d:f3:e9:e7:47:e9:59:ea:33:c2:8a:ea:c6:0d:d0:de:3b

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.chinacache.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chinacache.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.listerine.com.cn
www.cytsbiz.com
www.cleanandclear.com.cn
ssl-static.pinganfang.com
ssl-file.anhouse.com
ssl-static.anhouse.com
r.uzaicdn.com
r01.uzaicdn.com
r02.uzaicdn.com
r03.uzaicdn.com
img10.360buyimg.com
img11.360buyimg.com
img12.360buyimg.com
img13.360buyimg.com
img14.360buyimg.com
img20.360buyimg.com
img30.360buyimg.com
h.caifupai.com
hybrid.caifupai.com
s2.caifupai.com
www.caifupai.com
edit.obwoman.cn
obwoman.cn
www.obwoman.cn
cdnemm.shanghaigm.com
api.chinacache.com
bandwidth-api.chinacache.com
openapi.chinacache.com
www.chinacache.com
chinacache.com

Other certificates including the domain name chinacache.com

(limited to 100 certificates)
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
report.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
log301.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
test2.edu.chinacache.com
www.chinacache.com
ccms.chinacache.com
cdn04.ccedge.net
*.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
yun.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
storage-1.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
en.chinacache.com
www.chinacache.com
yun.chinacache.com
*.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
s.portal.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
ap4-1.cdn.salesforce-communities.com
www.chinacache.com
www.chinacache.com
*.chinacache.com
www.chinacache.com

Certificate

The complete raw certificate details for www.chinacache.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qWrPdxTHvKzswY4Wqf0
HG4Zpt+9tyyFy+7Pji7S/so4BwyoPgmxAJN3Mg1kqcSTe1gwl8wNdxrTXhR1R4T9
+UXxCvnJXm/6OtAIbNeYlJWdLQu/I+rPFSn/Hc6C06PgUlc//zFr1nZIMVM9YKxg
oNi3cnKaqDHUt+4irqG3Z9BkuQWbLQ7+Tbk91oUgJAnRn9Z/ZkbW1IrhwGSZNyr0
X1nMryw7LHMzagNhTQ5YwHXOxqUOSxUz2LoOkUfYIyEIh8igTUWeQU7N17i10jB/
sqp4gh/5WdECK0Qe5bOssApQ7s5Omwl+5e0L3nnWKGFTU598f7YHHx46PwUMlhqu
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105017080951040718252870065181600423478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing Blue-IT Technology Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.chinacache.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26591738428500601358206189463232357494353212341441928471737558235456593025806654693597534315608131783006613282791711902087724276654161641154079660004415626286749819610262913377613675059911320854874156334026371196801168380733546222741718946396509114144030598458126008914565978165706493311288776625418722708272937756496335871877451108070499470028694123366243108096616878535203802461165797662669719843497522542149164442844870067086245550271070185032706557205010979184315544673539471229534018834190188947602073323049582582598973907617118341267921302338855827629672607961339110017851448183050825117557571824201097818058431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listerine.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cytsbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanandclear.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-static.pinganfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-file.anhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-static.anhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.uzaicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r01.uzaicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r02.uzaicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r03.uzaicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img10.360buyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img11.360buyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img12.360buyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img13.360buyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img14.360buyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img20.360buyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img30.360buyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h.caifupai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.caifupai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.caifupai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caifupai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.obwoman.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obwoman.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obwoman.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnemm.shanghaigm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandwidth-api.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openapi.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinacache.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a5c4ebc6e48fd7ca907d763778d494e1e98322744654e12a76ef7d4ec01db666ef16b8a703792a41f87ab2f20aa9adeebcbf5aa213f7277d8a48ee3d659bfb203921fb8dbac9568305741f1830f0125bcb54312c2713bfc42124534a27dcf5b35beeed9a05ea786383ab7d7c9ac76ef5f39a82c8749b4d912e19760b9540374c6175a9d08e9dd0b55ddc6e24c9a92ae369cdad85f64b65a09397427a7dc8757793849f739487d50a4cbcfc55528baf48e77a400ce5e228a1a73100781f98dbfda00d85c95951c709b17ab2ee4baf1ff552eb4fc2a89fe61040f878e698e989315d210fd62f932de72bc87d3367c1350d2f05986673fac6785ad6f840d3baf0a