san3.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 1c:04:a4:d0:5f:46:90:d6:ec:a2:25:8a:78:c4:e5:66 was issued on by GeoTrust Inc..

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
Organization unit: Akamai SAN SSL OV
State / Province: Middlesex
Locality: Feltham
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:04:a4:d0:5f:46:90:d6:ec:a2:25:8a:78:c4:e5:66
Serial Number (int): 37242495893530970318581269469197559142
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): c8:c9:ae:3d:da:da:1f:18:64:52:33:c0:a5:ab:36:38:06:08:f8:c8
Fingerprint (sha256): 0c:2c:d5:45:84:a5:6e:8b:1f:a9:1d:a8:ae:9e:1e:3d:07:70:70:6f:50:09:fc:5c:36:a5:23:08:6c:ee:d1:c1

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate san3.premiumtv.co.uk

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san3.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.en.jsportslive.jp
secure.tennistv.com
secure.sonyericssonopen.tennistv.com
secure.es.cincytennis.tennistv.com
secure.es.bnpparibasopen.tennistv.com
secure.es.rogerscup.tennistv.com
secure.rogerscup.tennistv.com
secure.bnpparibasopen.tennistv.com
secure.shanghairolexmasters.tennistv.com
secure.es.sonyericssonopen.tennistv.com
secure.es.atpworldtour.tennistv.com
secure.cincytennis.tennistv.com
secure.monte-carlorolexmasters.tennistv.com
secure.internazionalibnlditalia.tennistv.com
secure.es.monte-carlorolexmasters.tennistv.com
secure.es.internazionalibnlditalia.tennistv.com
secure.es.tennistv.com
secure.es.madrid-open.tennistv.com
secure.es.bnpparibasmasters.tennistv.com
secure.madrid-open.tennistv.com
secure.wtatennis.tennistv.com
secure.es.shanghairolexmasters.tennistv.com
secure.es.wtatennis.tennistv.com
secure.bnpparibasmasters.tennistv.com
secure.fonbetretail.performgroup.com
secure.betologicretail.performgroup.com
secure.stanleybetretail.performgroup.com
secure.caliente.performgroup.com
secure.retaretail.performgroup.com
secure.mobile.caliente.performgroup.com
secure.ligastavokretail.performgroup.com
secure.stsretail.performgroup.com
secure.ekasaretail.performgroup.com
secure.bilyoner.performgroup.com
secure.mobile.bilyoner.performgroup.com
secure.mobile.racingpostpaddypower.performgroup.com
secure.mobile.racingpostcoral.performgroup.com
secure.olybetretail.performgroup.com
san3.premiumtv.co.uk

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san3.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMotmtjOD70zhrrPPTlk
uMibOY/HdoTKHA9+apl+SvywteD+aWU1SBkdEgpq7dLg/InXKn37lW/iknrHrS3a
EHvwc7/38QVg+S/11tZ58ImW3wpr/gC9F5koyFHEali7FQbZ1bPvpecmdCWm6MUz
FkCQ2X0dCporbGIW3ntXAn+Z+pd8ZIsIMM+0dkyTExI701iWXSYcTt7ozx+njHFL
ft6RntdqXyTkMwsXLXQ5NX3MsClOF8qFlhf2P3kXo3RI0BuSYt9igj3BmgT0gTKO
LFUFcJDNJkoKTo99sDIF87sjJzrOCwFzQ/0VGepQWApI37naaf/tEl2IAPi7NzyY
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37242495893530970318581269469197559142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'san3.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23327545872360403961889104320990438600664495091701534784201293587814528724390204877053546370007718558090903670633680145946418479394354238191732899059944722336498162711468985694841421125801283644078270160891348959329121348061042980770011037841141238076046095276431014748761058964471441396358061501968579427078604952214647951368574400365556294363843062631402972399218861718874688815454697054375296336377400043587330403153512500802394537216874988576204497698614097442265591252639755466887845155430906168189247181627132286906988625073498725521479553333849013965020122093967038738222871691920026035975840376230555944786049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1472 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.en.jsportslive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sonyericssonopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.cincytennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.bnpparibasopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.rogerscup.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rogerscup.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bnpparibasopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.shanghairolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.sonyericssonopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.atpworldtour.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cincytennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.monte-carlorolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.internazionalibnlditalia.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.monte-carlorolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.internazionalibnlditalia.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.madrid-open.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.bnpparibasmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.madrid-open.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.shanghairolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.wtatennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bnpparibasmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betologicretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stanleybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.retaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ligastavokretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ekasaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostpaddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostcoral.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153ae858df000000403004630440220249551c908edbba522abba1c12d9957f79c1f0df4bcbf6c75de538a5100439530220237d9331c369aab06ef9542a88404a346d2f972781d5c48d2c9973725c100770007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153ae858e590000040300463044022077f22ebf197c0106676cf3505d73e5ba013155b6b89d8b5f9af65b4c6fe86564022008aa96600c73a0352fd0adffc342d0ade9bf9a6e978964f4b1a59580b6deb0c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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