finanzportal-ms.fiducia.de

- Fiducia & GAD IT AG -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 6a:92:70:87:d5:b7:a6:ef:b1:78:08:35:ec:a5:35:45 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Fiducia & GAD IT AG

Company registration number: HRB 102381
Organization: Fiducia & GAD IT AG
Organization unit: PRODUKTION
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:92:70:87:d5:b7:a6:ef:b1:78:08:35:ec:a5:35:45
Serial Number (int): 141658525286367044625674004999012955461
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): df:8a:5a:5d:d0:78:cb:50:3c:00:a6:14:07:00:17:80:ae:7e:8f:b4
Fingerprint (sha256): 0c:88:82:03:28:53:41:eb:c6:5e:5c:5e:13:1b:c7:f1:b3:57:78:3e:df:fd:b5:fb:f2:03:0f:85:ee:80:14:67

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate finanzportal-ms.fiducia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for finanzportal-ms.fiducia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

finanzportal-ms.fiducia.de

Other certificates including the domain name fiducia.de

(limited to 100 certificates)
jprint31-z.brz.fiducia.de
webcenter-publish-01g.fiducia.de
finanzportal.fiducia.de
oapimgbrs024.brz.fiducia.de
fiducia-direkt.de
ZIS4.NOC.FIDUCIA.DE
webcenter-publish-01h.fiducia.de

vr-bankingapp-riat.web.fiducia.de
jprint48-riat-e.brz.fiducia.de
agreetouch.fiducia.de
SEUDB-DEV.RZ.BANKENIT.DE
pegasus.peras.fiducia.de
agreesb.fiducia.de
fints-test.atruvia.de
webdav-uit-a.fiducia.de
fidwdpa40.fid.sap.fiducia.de
giropay-admin.fiducia.de
genogoogle-riat.brz.fiducia.de
sonar-dev.rz.bankenit.de
ftgwp10.fiducia.de
pilot.vr-infoforum.fiducia.de
ebics.fiducia.de
webcenter-publish-01g.fiducia.de
OAPIMGBRS034.BRZ.FIDUCIA.DE
oatimgbrs016.brz.fiducia.de
webdav-uit.fiducia.de
*.E1.WEB.FIDUCIA.DE
geno-formular2.finanzportal.fiducia.de
vr-bankingapp-edu.web.fiducia.de
fus.rz.bankenit.de
vr-bankingapp-edu.web.fiducia.de
RAPIMGBRS034.BRZ.FIDUCIA.DE
webcenter-publish-01a.fiducia.de
cik7011.uit.sap.fiducia.de
giropay.fiducia.de
xmc-nac03.netz.fiducia.de
citrix-a.uit.fiducia.de
vr-bankingapp-messe.web.fiducia.de
www.vr-infoforum.fiducia.de
*.p20.brz.fiducia.de
geno-formular2.finanzportal.fiducia.de
sonargraphlic-dev.rz.bankenIT.de
SONARGRAPHLIC-QA.RZ.BANKENIT.DE
datenservice.fiducia.de
seu27.pka.bankenit.de
svn.fiducia.de
*.web.fiducia.de
identity.fiducia.de
jenkins.rz.bankenit.de
agreesb20-g.fiducia.de
webcenter-publish-01f.fiducia.de
bo-p-uit.fiducia.de
sonargraphlic-qa.rz.bankenIT.de
identity.fiducia.de
seulicences.rz.bankenit.de
oapimgbrs035.brz.fiducia.de
zis2.noc.fiducia.de
seudb.rz.bankenIt.de
xmc-gim.netz.fiducia.de
finanzportal-ms.fiducia.de
webcenter-publish-01h.fiducia.de
giropay-transx.fiducia.de
zvs-production.p20.brz.fiducia.de
rentenmanager-prod.vkb.fiducia.de
webcenter-publish-01e.fiducia.de
uitmgwug3.uit.sap.fiducia.de
giropay-admin.fiducia.de
citrix-a.uit.fiducia.de
webcenter-publish-01d.fiducia.de
vr-bankingapp-riat.web.fiducia.de
*.l1.web.fiducia.de
uit-sharepoint.fiducia.de
*.WEBCENTER-PV-PILOT-MS.BRZ.FIDUCIA.DE
servicedesk.sap.fiducia.de
cie7012.uit.sap.fiducia.de
webservices.fiducia.de
voting.fiducia.de
svn-qa.fiducia.de
webcenter-publish-01d.fiducia.de
webdav-uit.fiducia.de
webdav-uit-a.fiducia.de
jprint42-z.brz.fiducia.de
hbci11.fiducia.de
sts.enterprise.fiducia.de
ide.rz.bankenIT.de
hbci11.fiducia.de
mobile-access.fiducia.de
pegasus.peras.fiducia.de
*.l2.web.fiducia.de
dzbhcmhrt.dzb.sap.fiducia.de
ebics.fiducia.de
vr-bankingapp-last.web.fiducia.de
sanpki-gui.fiducia.de
dbawdpa01.dba.sap.fiducia.de
UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE
test-intmob.fiducia.de
jprint31-riat-e.brz.fiducia.de
webcenter-publish-02a.fiducia.de
fiderps38.fid.sap.fiducia.de

Certificate

The complete raw certificate details for finanzportal-ms.fiducia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZePMEhV3xdfz45dwDC6
QR5CwTfsutBKX6yakBECOW7pACIDtn2ADeXfUKwQoa8q/utnz7RmUpXM3sRb1zDT
kvag8AfNnfIoJdbBq9N9ZrdEqD1j+kcQBMNMiSIUUcwhBx3QJ+86E3D3uurmVCVU
/yXCR2Y2oJQUwflBBlk8pVzvjmamku+yU9hte/HTycFceSlgAIHScPLSZtrWtEno
BW3KZOvGFyFJRqJc7bot0+gDhu2n41kHcS53Ed5+J+7J6U6y9ubcaTQ1E3zXdzuJ
SAriJnCvOo8qR5dGruQrSHstjp9HauHHm69L0Cl0bTqxOBVcqrIu55Gh47m+q3oF
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141658525286367044625674004999012955461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 102381'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fiducia & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PRODUKTION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'finanzportal-ms.fiducia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29488261748427656972492815843340342975561600880693813165558393337585172641039141185092608226036850000490676979676490439694663520844118564477376464382046824816641209003923003826035114481949311402174876738932781710419545920268435680742941247366002124614307664439087593965321322462286197897922722796047373364388858443094276119034404450975925720653059711771327654702959871260978644866400855450710606490761085086380262252712162670090544815144715126626663137918212672599107308421956430909642566102272209379705951013521707880226528047326537638136309799187897390720276941277093217795458688762639780749426958014581590600582511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finanzportal-ms.fiducia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001598cfd00ee000004030046304402203f03b46da63e6c680d9f675172c66a8e5391368e0d5750f8076145b71fe565e8022051bedfd7b841246595e8f0bb93774788109ec3f3fb66f522605556c1f6885a25007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001598cfd011e000004030046304402206d56dbfe59829d3613d94ad7d434e6476c40bf4642accb871e9e6196efc5d37302204adc7eb991c1bcdd3bfffb6440a419835957d41fb80eca3abd83c8c0728d3783
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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