www.lembit.dev.motorcyclenews.com

- Bauer Corporate Services UK LP -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 53:84:f1:00:3d:1a:f8:9c:ad:68:b4:63:89:fd:6f:d5 was issued on by GeoTrust Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bauer Corporate Services UK LP

Organization: Bauer Corporate Services UK LP
Organization unit: Bauer Corporate Services UK LP
State / Province: Cambridgeshire
Locality: Peterborough
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:84:f1:00:3d:1a:f8:9c:ad:68:b4:63:89:fd:6f:d5
Serial Number (int): 111016194915100286458041475033491926997
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 05:37:e5:4e:98:b4:df:59:b0:93:bb:df:79:5d:2e:eb:96:13:ab:3d
Fingerprint (sha256): 0c:65:ce:7c:b3:c9:3f:5c:2f:4f:aa:58:93:a7:d3:9e:fd:c0:eb:fc:29:e5:27:aa:d8:bf:10:e6:95:14:3a:a5

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.lembit.dev.motorcyclenews.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lembit.dev.motorcyclenews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stg.motorcyclenews.com
forum.dev.motorcyclenews.com
forum.stg.motorcyclenews.com
cms.dev.carmagazine.co.uk
www.stg.carmagazine.co.uk
beta.stg.parkers.co.uk
www.lembit.stg.motorcyclenews.com
beta.dev.parkers.co.uk
www.dev.motorcyclenews.com
cms.stg.carmagazine.co.uk
www.dev.parkers.co.uk
www.stg.parkers.co.uk
www.dev.carmagazine.co.uk
www.lembit.dev.motorcyclenews.com

Other certificates including the domain name motorcyclenews.com

(limited to 100 certificates)
sp.gosanangelo.com
*.motorcyclenews.com
cmp.am-online.com
www.bauermedia.co.uk
winit-stage.winchristmas.co.uk
winit.planetradio.co.uk
winit.coolfm.co.uk
*.parkers.co.uk
winit.metroradio.co.uk
winit.bauerpublishing.com
winit.rockfm2.co.uk
twinit-production.herokuapp.com
winit.metroradio2.co.uk
sellyourbike.motorcyclenews.com
www.bauermedia.co.uk
*.parkers.co.uk
www.lembit.dev.motorcyclenews.com
winit.metroradio.co.uk
sellyourbike.motorcyclenews.com
winit.metroradio.co.uk
www.bauermedia.co.uk
mcncompare.motorcyclenews.com
www.bauermedia.co.uk
winit.todaysgolfer.co.uk
sp.motorcyclenews.com
adnoncentaur3.abasoft.co.uk
sp.motorcyclenews.com
local.motorcyclenews.com
www.bauermedia.co.uk
insurance.motorcyclenews.com
winit-stage.bauerpublishing.com
*.parkers.co.uk
winit.metroradio.co.uk
winit-stage.bauerpublishing.com
winit.motorcyclenews.com
www.motorcyclenews.com
winit.metroradio.co.uk
winit.metroradio.co.uk
sellyourbike.motorcyclenews.com
*.leads.motorcyclenews.com
www.motorcyclenews.com
winit.metroradio.co.uk
winit.westsound.co.uk
www.bauermedia.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
*.parkers.co.uk
winit.metroradio.co.uk
www.bauermedia.co.uk
www.dev.motorcyclenews.com
winit.tay3.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
*.leads.motorcyclenews.com
sp.motorcyclenews.com
*.parkers.co.uk
winit.metroradio.co.uk
winit.model-rail.co.uk
winit-stage.winchristmas.co.uk
mcncompare.motorcyclenews.com
winit.metroradio.co.uk
www.bauermedia.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
sp.motorcyclenews.com
winit.metroradio.co.uk
adnoncentaur3.abasoft.co.uk
winit.metroradio.co.uk
winit.planetradio.co.uk
www.bauermedia.co.uk
clickswin.bellamagazine.co.uk
winit.metroradio.co.uk
www.bauermedia.co.uk
winit.bikemagazine.co.uk
winit-stage.motorcyclenews.com
*.parkers.co.uk
winit.metroradio.co.uk
www.bauermedia.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
shop.motorcyclenews.com
sp.gosanangelo.com
sp.motorcyclenews.com
www.bauermedia.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit.mfr3.co.uk
www.bauermedia.co.uk
winit.mfr2.co.uk
*.parkers.co.uk
winit.mfr.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
forum.aws.motorcyclenews.com
winit-stage.bauerpublishing.com
forum.int.motorcyclenews.com
winit.metroradio.co.uk
members.stg.motorcyclenews.com

Certificate

The complete raw certificate details for www.lembit.dev.motorcyclenews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztHLrb7M4wx7Stj3K+yP
zbrxLC+myJiAER5kv5C3UAQLb1drUwS79A13+HbHvNML9au1EaEiXYWc1ms0vAEW
WvxFa8G7EHmvSKY7Q8Sdq//hhkGhgdeR4i+0Xlc7xhAiuaETESp7tFLcDbl7i6oW
lclTDTnJ7biehG/i2Wclc+YRWMPTdDiQlXtJnObbgHvBHb7IhnhL8WYJ8Xkt0nUU
kcSb/5BIczKCgJCmCSXY+wWG4XIxDfvIaci+q//eTI+a3gfbbZPxrPm95qVERjJD
ndhF1hg9qUhZ3uyD28rm6T6HYKVIUpCvzA/eXcoYNvBae2FZOtHqVDK/dUdM7nYg
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111016194915100286458041475033491926997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cambridgeshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Peterborough'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bauer Corporate Services UK LP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bauer Corporate Services UK LP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lembit.dev.motorcyclenews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26108544898963575209036408442624348750569266979583935294072112652024359299549675323108223009817053943394590768586195542023983387142707716661256355872195759078209572357045367909845508304137708764640877506592917404222619413468473992777438985291881432625756764000070171631401287343180485732194918410431325022208923071197193997503884351576897990715419605240928591816421569747375267353803422685129683571378030087844392971687356347297918194426066793118608517720512852279971674298060562854204990706657665158585843502654635025711568103279885995109147385593197884482518092996621849597114771114553222320644420165970488125169673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (392 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.dev.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.stg.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.dev.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.stg.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lembit.stg.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.dev.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.stg.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lembit.dev.motorcyclenews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab86dcda22a49ea8b48e51260255a8c9ed5b8b20d6b71065beccdb3cbc36374e74f649ddc27debfb4638cda41ecf3fd3060b1b07b1602c1159ffc99bfa01dff74ba1d47336dbab29db2c2f91bbf29d85ccce95208a7ba8530704f3dfc93223dee54523e367fda3e86591d99a7c5adcb77e9467a6c290fe2fd8028f6258aa22cc15072749ad46bfbaec5adf3e021300e0aeccbe25fe1f6cba4fa878b97bc4c60105ab755d59f84af79b80611806d9379acd47817460031701c6dd6d55a5e723bd5d15d8928a16691b91e5b6749f8aa4d68d69c22b8e11b9b826bf6083edc1a6f2cdb40450c964032b9fa6ad97326d274c70e847cf0e9ff972ec2e4777e22fe32b