ista.ihost.com
- IBM Danmark ApS -
Issued by GeoTrust SHA256 SSL CA
About this certificate
This digital certificate with serial number 05:4e:71:45:91:19:9e:c3:b5:ef:12:c5:29:1b:22:38 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
IBM Danmark ApS
Organization:
IBM Danmark ApS
State / Province:
Denmark
Locality: Ballerup
Country: DK
Locality: Ballerup
Country: DK
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:4e:71:45:91:19:9e:c3:b5:ef:12:c5:29:1b:22:38Serial Number (int): 7053436557825021356256120159082324536
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72
Fingerprint (sha1): 1f:f2:e6:09:fd:60:b5:35:1a:ae:a0:9f:34:e5:42:f0:4d:99:96:cb
Fingerprint (sha256): 0b:15:d0:d5:95:a6:e0:22:37:87:2c:22:2a:bf:80:99:08:ed:13:32:8e:fd:a0:41:6d:76:35:cf:59:45:c6:91
Issuing Certificate URL: http://gj.symcb.com/gj.crt
Revocation information
OCSP Server: http://gj.symcd.comCRL Distribution Point: http://gj.symcb.com/gj.crl
Check the revocation status for certificate ista.ihost.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ista.ihost.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ista.ihost.com
Other certificates including the domain name ihost.com
(limited to 100 certificates)
test.claims.ihost.com
*.jz-dev.ihost.com
dbrmobile.fr2.usf.ihost.com
ipwc-sl.ihost.com
gsc.ihost.com
rtpwebvpn.brsrtp.ihost.com
test-watson2.ihost.com
masdev.monitor.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
ssl.wsc.ihost.com
survey.ihost.com
gsc.ihost.com
ehrkb.ihost.com
impactdev.rny.ihost.com
sldcmwas.gps.ihost.com
ista.ihost.com
www.reporting.ihost.com
smarthelp.ihost.com
www.elearning.jp.ihost.com
p2p.ihost.com
ciscovpn4.tl.ihost.com
p2p.ihost.com
ri3pa340.msd.ihost.com
ips.ihost.com
frfcqcm011ix328.montpellier.mebs.ihost.com
cpd-cp4waiops.apps.ocp-nw.p128.cesc.nca.ihost.com
vpn.bos.tec.ihost.com
*.jz-xit04.ihost.com
webvpna.brsrtp.ihost.com
*.gps.ihost.com
*.edu.ihost.com
maaccelerator.ihost.com
tvc.ihost.com
ista-preprod.ihost.com
aos.us.ihost.com
ista.ihost.com
help.dms.ihost.com
ctmwebbld1.msd.ihost.com
icafmtest.ihost.com
tyco.msd.ihost.com
survey2.ihost.com
impact-enterprise.rny.ihost.com
ips-preprod.ihost.com
axap1ph-web.msd.ihost.com
icafm.ihost.com
jira5.ihost.com
jiratest.ihost.com
chat.smarthelp.ihost.com
div16qp.fairfax.ihost.com
ista.ihost.com
*.edu.ihost.com
bld1vpn.brsbld.ihost.com
sni.cloudflaressl.com
stf1vpn.brsstf.ihost.com
*.cloud.red.ihost.com
ista-preprod.ihost.com
dev-process.vcfclaims.ihost.com
ehrkbpp.ihost.com
iconik-processor.apps.ocp4vam.p159.cesc.nca.ihost.com
watson-genomics.ihost.com
ptest.process.claims.ihost.com
etime.fairfax.ihost.com
*.gpsemea.ihost.com
www.as400lug.ihost.com
*.red.ihost.com
cisco.maaccelerator.ihost.com
etime.fairfax.ihost.com
test.rapid.ihost.com
*.lbps.ihost.com
haglobal-prod.red.ihost.com
*.red.ihost.com
*.edu.ihost.com
icafmdev.ihost.com
rchbcc.rochester.ihost.com
*.edu.ihost.com
vhost0532.dc1.on.ca.compute.ihost.com
masdev.home.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
tracktrace.be.ihost.com
rchbcc.rochester.ihost.com
mbpstoolsdev.ihost.com
fsdctoyz-lab.bet.fiscnet.ihost.com
dadsweb4.uk.ihost.com
asa003b.centers.ihost.com
prod.rapid.ihost.com
w.maaccelerator.ihost.com
citrix.ehr.ihost.com
quickplace.fr2.usf.ihost.com
watson.ihost.com
jira4.ihost.com
clarify.bto.ihost.com
travelexpense.eu.kfi.iers.ihost.com
testimpact.rny.ihost.com
matraining.accelerator.ihost.com
jira.ihost.com
*.tec.ch.usf.ihost.com
sonoco.iers.ihost.com
matraining.accelerator.ihost.com
gnm.sni.ibm.com
aos.us.ihost.com
stats.surfaid.ihost.com
prod.rapid.ihost.com
*.jz-dev.ihost.com
dbrmobile.fr2.usf.ihost.com
ipwc-sl.ihost.com
gsc.ihost.com
rtpwebvpn.brsrtp.ihost.com
test-watson2.ihost.com
masdev.monitor.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
ssl.wsc.ihost.com
survey.ihost.com
gsc.ihost.com
ehrkb.ihost.com
impactdev.rny.ihost.com
sldcmwas.gps.ihost.com
ista.ihost.com
www.reporting.ihost.com
smarthelp.ihost.com
www.elearning.jp.ihost.com
p2p.ihost.com
ciscovpn4.tl.ihost.com
p2p.ihost.com
ri3pa340.msd.ihost.com
ips.ihost.com
frfcqcm011ix328.montpellier.mebs.ihost.com
cpd-cp4waiops.apps.ocp-nw.p128.cesc.nca.ihost.com
vpn.bos.tec.ihost.com
*.jz-xit04.ihost.com
webvpna.brsrtp.ihost.com
*.gps.ihost.com
*.edu.ihost.com
maaccelerator.ihost.com
tvc.ihost.com
ista-preprod.ihost.com
aos.us.ihost.com
ista.ihost.com
help.dms.ihost.com
ctmwebbld1.msd.ihost.com
icafmtest.ihost.com
tyco.msd.ihost.com
survey2.ihost.com
impact-enterprise.rny.ihost.com
ips-preprod.ihost.com
axap1ph-web.msd.ihost.com
icafm.ihost.com
jira5.ihost.com
jiratest.ihost.com
chat.smarthelp.ihost.com
div16qp.fairfax.ihost.com
ista.ihost.com
*.edu.ihost.com
bld1vpn.brsbld.ihost.com
sni.cloudflaressl.com
stf1vpn.brsstf.ihost.com
*.cloud.red.ihost.com
ista-preprod.ihost.com
dev-process.vcfclaims.ihost.com
ehrkbpp.ihost.com
iconik-processor.apps.ocp4vam.p159.cesc.nca.ihost.com
watson-genomics.ihost.com
ptest.process.claims.ihost.com
etime.fairfax.ihost.com
*.gpsemea.ihost.com
www.as400lug.ihost.com
*.red.ihost.com
cisco.maaccelerator.ihost.com
etime.fairfax.ihost.com
test.rapid.ihost.com
*.lbps.ihost.com
haglobal-prod.red.ihost.com
*.red.ihost.com
*.edu.ihost.com
icafmdev.ihost.com
rchbcc.rochester.ihost.com
*.edu.ihost.com
vhost0532.dc1.on.ca.compute.ihost.com
masdev.home.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
tracktrace.be.ihost.com
rchbcc.rochester.ihost.com
mbpstoolsdev.ihost.com
fsdctoyz-lab.bet.fiscnet.ihost.com
dadsweb4.uk.ihost.com
asa003b.centers.ihost.com
prod.rapid.ihost.com
w.maaccelerator.ihost.com
citrix.ehr.ihost.com
quickplace.fr2.usf.ihost.com
watson.ihost.com
jira4.ihost.com
clarify.bto.ihost.com
travelexpense.eu.kfi.iers.ihost.com
testimpact.rny.ihost.com
matraining.accelerator.ihost.com
jira.ihost.com
*.tec.ch.usf.ihost.com
sonoco.iers.ihost.com
matraining.accelerator.ihost.com
gnm.sni.ibm.com
aos.us.ihost.com
stats.surfaid.ihost.com
prod.rapid.ihost.com
Certificate
The complete raw certificate details for ista.ihost.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIQBU5xRZEZnsO17xLFKRsiODANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzA0MDQwMDAwMDBaFw0xODA3MDQy MzU5NTlaMGUxCzAJBgNVBAYTAkRLMRAwDgYDVQQIDAdEZW5tYXJrMREwDwYDVQQH DAhCYWxsZXJ1cDEYMBYGA1UECgwPSUJNIERhbm1hcmsgQXBTMRcwFQYDVQQDDA5p c3RhLmlob3N0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwT aQZ7zywqDMRFwYWpHgsFbmBdUSuVHGMptkDsLLyM7po41/QKcXBnIW9BigfSXtMY 3OXGfygy2hs8Uurbm00PhJK7txwlriAQ8CtjWAt/E46ey3fA+HTjqnM0w55gakRM 1j34rryhXxuC51efHY7AcyiBe7LlJLpAvACrmF8Qe8xN9eVCTiIdy7CaCM34zuf9 jtsXVQJpOrIqSdew0lGeaBF30xVR8F7R03gRX14lKcay7/I7Bg8VSEwXig6Ed6c/ WAyoyfmVo+ZFcClHS6D67KRSvqOsPmgR4XLkHLesV1pPUsdsyoV8HY3bTkHcsokP fl8eYUpMVT/sgLTkH7sCAwEAAaOCAbUwggGxMBkGA1UdEQQSMBCCDmlzdGEuaWhv c3QuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAe oByGGmh0dHA6Ly9nai5zeW1jYi5jb20vZ2ouY3JsMIGdBgNVHSAEgZUwgZIwgY8G BmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29t L3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBz Oi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUFGeO7YNP 1h6dQAQMBEahcDSyD3IwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRw Oi8vZ2ouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ2ouc3ltY2IuY29t L2dqLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Pm6GXMtGnyXLJTRrFlNoXBsuOqlRse+9fEypLrvCASjFZl64d4RkbqP1PJatjufq vuHTdFiGBBOJfancJRrFRMVjTUlXu2Y9ysFrF0gf7+R9EtgNnAHf/Z0QDtZNz2bX F75YgH2htL5DOuX4Go08WZLDeT8x20XOF0xNMrSPYQm20EVWPJRVQPukMSo4WzDD 6p9KLqEwe53j59m/XxYTpG4JnKkUA7Ftc8FhfFR2R9MY0ZA7RJMTqISuMNa6uNo2 zvxkcXXUeuOdN19gYO70bBWni6y+CbG3OIpeSOVF051KgYtdCbU5nCkYN143z/j/ WdfyPN5UEmhdr1tKXvJc7A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBNpBnvPLCoMxEXBhake CwVuYF1RK5UcYym2QOwsvIzumjjX9ApxcGchb0GKB9Je0xjc5cZ/KDLaGzxS6tub TQ+Ekru3HCWuIBDwK2NYC38Tjp7Ld8D4dOOqczTDnmBqREzWPfiuvKFfG4LnV58d jsBzKIF7suUkukC8AKuYXxB7zE315UJOIh3LsJoIzfjO5/2O2xdVAmk6sipJ17DS UZ5oEXfTFVHwXtHTeBFfXiUpxrLv8jsGDxVITBeKDoR3pz9YDKjJ+ZWj5kVwKUdL oPrspFK+o6w+aBHhcuQct6xXWk9Sx2zKhXwdjdtOQdyyiQ9+Xx5hSkxVP+yAtOQf uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7053436557825021356256120159082324536 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Denmark' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ballerup' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IBM Danmark ApS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ista.ihost.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25762185766643058485907989906514433521664385092275933271863716285587554760829148343757962601563335700511646150465163698730515265822397918714041297674239818011329945207928365833286852970945194766272990503657099228710802756672763387177596882926112403421810084126658688638729482469033073823707690605358709526868552938562348708273428633149127810605177358260124097400477244731175737777909307861399534169803006661841385696533976899521312684435433062693599706629377187634395948488817602358860979588656159680248340734967958109120167034746814216706701799922469444994637957987654056242281573421529547744555251125995039166308283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ista.ihost.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003e6e865ccb469f25cb25346b1653685c1b2e3aa951b1efbd7c4ca92ebbc20128c5665eb87784646ea3f53c96ad8ee7eabee1d37458860413897da9dc251ac544c5634d4957bb663dcac16b17481fefe47d12d80d9c01dffd9d100ed64dcf66d717be58807da1b4be433ae5f81a8d3c5992c3793f31db45ce174c4d32b48f6109b6d045563c945540fba4312a385b30c3ea9f4a2ea1307b9de3e7d9bf5f1613a46e099ca91403b16d73c1617c547647d318d1903b449313a884ae30d6bab8da36cefc647175d47ae39d375f6060eef46c15a78bacbe09b1b7388a5e48e545d39d4a818b5d09b5399c2918375e37cff8ff59d7f23cde5412685daf5b4a5ef25cec