*.d.clients.liip.ch

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 5e:04:4c:d2:76:84:58:f8:80:74:84:05:41:3c:e4:1c was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.d.clients.liip.ch

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:04:4c:d2:76:84:58:f8:80:74:84:05:41:3c:e4:1c
Serial Number (int): 124969758928939466405342140548586988572
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): ed:75:df:cc:d0:d1:4c:ee:e9:6a:85:77:ab:06:38:fc:3e:ba:e3:3c
Fingerprint (sha256): 0e:b6:d0:b2:56:46:40:23:03:79:ad:82:c6:a6:f7:44:a5:2e:8b:26:51:d2:b5:80:62:fa:af:4e:48:99:49:ed

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.d.clients.liip.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.d.clients.liip.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.d.clients.liip.ch

Other certificates including the domain name liip.ch

(limited to 100 certificates)
zebra.liip.ch
liip.ch
beta-zebra.liip.ch
liip.ch
legacy-clients.k8s.liip.ch
prolek.stage01.sb.liip.ch
gitlab.liip.ch
monitoring.elearning.liip.ch
test-wiki.liip.ch
bundstarterkit.demo.liip.ch
crm.svc.clients.liip.ch
baspo.bedev.liip.ch
liip.ch
guess.liip.ch
support.liip.ch
playground.moodle.liip.ch
*.clients.liip.ch
unitar2.stage01.sb.liip.ch
blog.liip.ch
moodle.careum-weiterbildung.ch
liip.ch
techpool.stage01.sb.liip.ch
eduprep.sosaerzte.ch
nagios.liip.ch
crmstage.svc.clients.liip.ch
account.liip.ch
repair-cafe-stage.clients.liip.ch
stage.bwo.clients.liip.ch
liip-moodle.devel01.sb.liip.ch
order.elearning.liip.ch
meinunterricht2.kvz-weiterbildung.ch
moodle.liip.ch
liip.ch
prolek.stage01.sb.liip.ch
memberplus.rai.clients.liip.ch
vagrantbox-public.liip.ch
blog.liip.ch
ehb.clients.liip.ch
iuffp1.clients.liip.ch
lsca.devel01.sb.liip.ch
mdl-tph-mnet.devel01.sb.liip.ch
preprod.liip.ch
mobi.demo.liip.ch
wks.devel01.sb.liip.ch
preprod.liip.ch
iuffp1.clients.liip.ch
moodle.liip.ch
iuffp1.clients.liip.ch
*.d.clients.liip.ch
download.liip.ch
guidelines.liip.ch
stage.bwo.clients.liip.ch
repair-cafe.clients.liip.ch
*.liip.ch
crm.svc.clients.liip.ch
bzwu.stage01.sb.liip.ch
liip.ch
account.liip.ch
moodle-sob.clients.liip.ch
monitoring.elearning.liip.ch
cpdf.liip.ch
techpool.stage01.sb.liip.ch
liip-moodle.live03.sb.liip.ch
lsca.devel01.sb.liip.ch
moodle.careum-weiterbildung.ch
h5p.devel01.sb.liip.ch
gtm-generator.liip.ch
slides.liip.ch
lhc.stage01.sb.liip.ch
account.liip.ch
slides.liip.ch
blog.liip.ch
moodle-dev.graduateinstitute.ch
bgs.stage01.elearning.liip.ch
projects.liip.ch
lama.liip.ch
baspo.bedev.liip.ch
chbox.clients.liip.ch
kompra.stage01.sb.liip.ch
elearning.liip.ch
futura21.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
shop.stapferhaus.bedev.liip.ch
dev.zb.clients.liip.ch
iuffp1.clients.liip.ch
iuffp1.clients.liip.ch
liip-moodle.stage01.sb.liip.ch
baspo.bedev.liip.ch
liip-moodle.devel01.sb.liip.ch
stage.bwo.clients.liip.ch
hfgz.stage01.sb.liip.ch
bcv.demo.liip.ch
gtm-generator.liip.ch
stage.bwo.clients.liip.ch
sasdb.clients.liip.ch
liip.ch
tourismuskv.stage01.sb.liip.ch
solradmin.live03.sb.liip.ch
php-osx.liip.ch
vagrantbox-public.liip.ch

Certificate

The complete raw certificate details for *.d.clients.liip.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHWzCCBkOgAwIBAgIQXgRM0naEWPiAdIQFQTzkHDANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS
UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDYzMDAwMDAwMFoXDTIwMDYyOTIzNTk1
OVowHjEcMBoGA1UEAwwTKi5kLmNsaWVudHMubGlpcC5jaDCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAOH0aNpec3aV6ThxXDPi8dr9uTLN3/gdHWv1LSQW
t1Cs6riZrbvfBIAa04Xu8PSwUhGEKhcJn4PRIeM1GjNlBXKOmfqtRai00GAE/kQn
KZRxWCSeAWwveLpnoBPDJaEBIwXVZjtDlkHg6O5bFsfKl4T8lIMBW0/hhLgWBcGh
wKWTZyeXaZfNhdzrYSnlAMkBDeEKtK69iV/PnGsyE+WtHFP1bfSUK8+y9+YXvYC6
7sNxr3/nIZc1+tlLqcPwpnnXVvESJFjtWNtlztbn7tqOufFYEaxv2NwQK/E0rTtJ
Vb/2x+HuS2L62D8BDq1GTT7y7Gv8FGa4UgtAgHGeMclBkZD0kAfdYYbz1i/ilnMw
XYf/y7SFwTD/HVO28jt6FwxZ2qnYz15dwBV2wjZ+u+3s67lJm1eS++v2YOLfyZkv
KB0YWk/vjdnPHSf5AnyAY5uWvS5F5fd2GkeQ5jK9Eeh9nSfX7ip7YE56odaRqlQK
Dk7EVp7y2dbcA4P8ZMzfH4FelCs/5JmVmY0tamtm2cjg6rjtfYnVNTWgOqww66hd
9J8LhNwPF+ROxhtHzfjdWY5e5nPJtWIEUzrHep4EFN8/gJcS/fd2rM+7LmnqO4ne
fKHppyUVvVlt2M3ECSW3WjS7H8MxirDUi1gxreBM42txDlCAUII59/iH0ODb09J6
TVFrAgMBAAGjggNvMIIDazAeBgNVHREEFzAVghMqLmQuY2xpZW50cy5saWlwLmNo
MAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNiLmNv
bS9ncC5jcmwwbwYDVR0gBGgwZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYeaHR0
cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0dHBz
Oi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyI
Msh8reKmAU/abzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dw
LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5j
cnQwggH1BgorBgEEAdZ5AgQCBIIB5QSCAeEB3wB2AN3rHSt6DU+mIIuBrYFocH4u
jp0B1VyIjT0RxM227L7MAAABXPlUXD0AAAQDAEcwRQIhAMyghXOBdh1IQHLxcn6Y
S9oDmMRFRsquKQGYes3dLSEWAiAh689q2jnsuEiDWYNYJBuZKIWWXrxApsspjcW4
TQFzFAB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABXPlUXHYA
AAQDAEcwRQIgVU49TxAarM4vOuITjjUDriFxB3ttfUmw9FQo+lZ0FcoCIQDvSVyi
At3UEsqwMsgWyIBjEhGWu8DZ2fWEIu7Zkz1yYAB2AO5Lvbd1zmC64UJpH6vhnmaj
D35fsHLYgwDEe4l6qP3LAAABXPlUXjIAAAQDAEcwRQIgSlxFKBfT0jotN5Zavctc
JocnSuIdftHq6iJZdNSKd+gCIQCXLJtGQ6D+lVnNX4t2M5jBTcCTAq7EfRysY4ze
ZkSBbgB1ALx44d/F9jxoRkkzTaEPoV8JeWkgCcCBtPP2kX8+2bilAAABXPlUXS8A
AAQDAEYwRAIgN6uR8g+YmDszuPyBKFELmJeu+BiivqMXLx41ewB/hRYCIHf4Q5Cm
MsrhkfD5lhw6FSHLti1jM55k5b4xqpHcfDAYMA0GCSqGSIb3DQEBCwUAA4IBAQCc
485Yg2TnSxGVWDbFePe9qjF9Oa2qF9eodNcdkvkTf3nQeQe3uP3pOfVZCk4hErZF
v4L+McnyeFlBQ0W2FHW14vWMlxONmhdVgS9ZEzn1LbpiKX7amp4dirR3G5nO4/pk
c0H3B8XMRhQn5MMMp4GxBvHzs1uKEI9DvYtB3vQdkf4QkJ54SlPMRSrtbGhTBrWt
+i8sO1Zg+AqWDghPT28lj4TJwPuwvGdX6pCFwWfzZ+Rn0GFlstzyT77oBFTprKTA
E5oq0hM8ven/G7SeSsDAILtAlHa9A0+nwx0CmUztNCTo55VTKfuDd2DcDbCbnBC7
aMq1PMi4gr1LUNlmzXAl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4fRo2l5zdpXpOHFcM+Lx
2v25Ms3f+B0da/UtJBa3UKzquJmtu98EgBrThe7w9LBSEYQqFwmfg9Eh4zUaM2UF
co6Z+q1FqLTQYAT+RCcplHFYJJ4BbC94umegE8MloQEjBdVmO0OWQeDo7lsWx8qX
hPyUgwFbT+GEuBYFwaHApZNnJ5dpl82F3OthKeUAyQEN4Qq0rr2JX8+cazIT5a0c
U/Vt9JQrz7L35he9gLruw3Gvf+chlzX62Uupw/CmeddW8RIkWO1Y22XO1ufu2o65
8VgRrG/Y3BAr8TStO0lVv/bH4e5LYvrYPwEOrUZNPvLsa/wUZrhSC0CAcZ4xyUGR
kPSQB91hhvPWL+KWczBdh//LtIXBMP8dU7byO3oXDFnaqdjPXl3AFXbCNn677ezr
uUmbV5L76/Zg4t/JmS8oHRhaT++N2c8dJ/kCfIBjm5a9LkXl93YaR5DmMr0R6H2d
J9fuKntgTnqh1pGqVAoOTsRWnvLZ1twDg/xkzN8fgV6UKz/kmZWZjS1qa2bZyODq
uO19idU1NaA6rDDrqF30nwuE3A8X5E7GG0fN+N1Zjl7mc8m1YgRTOsd6ngQU3z+A
lxL993asz7suaeo7id58oemnJRW9WW3YzcQJJbdaNLsfwzGKsNSLWDGt4Ezja3EO
UIBQgjn3+IfQ4NvT0npNUWsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124969758928939466405342140548586988572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.d.clients.liip.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921814853201247960241512588518585725841244464373665598886181900917387007684613893994334702356346172935904443001425582724719146297303249334832437096275979119228463263833970911941190834458816674749031591449333636641537771031049266317217159951703700044029826424264138886735220856742036512037381621305696055917107600333450252616752823541588479978526845489276922134188741330720964222929034953638694334320012703014477153739858572379761705095698277153165241186950890151821799393472311283494307485290608325639337446878674041327070797758369051151876688435368692281966774577521363462219610371709230605957901085898694481601357488133136801585786761710139273221625382535100381141154572503710991613130715988368169647549071189897773570162081989513251132258623252736308198713567245999508764786733228813140060483038633738360141363533072478828700120916182851413891865130582523807313209215249759644417859559432026882312987836693980211417807034259629933975484518407744273931095435970203037623499628812568526369132839685401785504238431382022702577751644788857655675459870180632165365930165243575691780814653717580774848905547667812141024627505088669875135675603872676405048978877424393355129541130427315407435697369168330210433856316017240896410493997419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.clients.liip.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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