safercar.gov

- National Highway Traffic Safety Administration -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 91:9e:46:82:86:35:36:b9:b5:fd:95:72:2d:ba:f7 was issued on by GeoTrust Inc..

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

National Highway Traffic Safety Administration

Organization: National Highway Traffic Safety Administration
Organization unit: OCIO
State / Province: District Of Columbia
Locality: Washington
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 91:9e:46:82:86:35:36:b9:b5:fd:95:72:2d:ba:f7
Serial Number (int): 756093251571601600100409182769756919
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 93:bc:83:c7:dc:df:4c:d3:b4:02:92:1b:cd:d5:4e:46:28:d3:cf:68
Fingerprint (sha256): 10:54:c0:98:97:8f:2a:61:1c:f9:8a:b5:93:69:82:f8:c7:19:55:23:6e:cf:b4:ae:52:83:ab:38:01:e6:86:53

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate safercar.gov

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safercar.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.911.gov
www.nhtsa.dot.gov
isearch.nhtsa.gov
www.distracteddriving.gov
www.nhtsa.gov
www.safercar.gov
resourcecenter.911.gov
gtstest.nhtsa.gov
dredata.nhtsa.gov
www.trafficsafetymarketing.gov
www-odi.nhtsa.dot.gov
webapi.nhtsa.gov
www.ems.gov
mcs.nhtsa.gov
www-nrd.nhtsa.dot.gov
vinrcl.safercar.gov
cms.tsm.nhtsa.dot.gov
gts.nhtsa.gov
hvedata.nhtsa.gov
www-esv.nhtsa.dot.gov
www.distraction.gov
www-fars.nhtsa.dot.gov
www.safertruck.gov
safercar.gov

Other certificates including the domain name safercar.gov

(limited to 100 certificates)
safercar.gov
friar.safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
map.safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
vinrcl.safercar.gov
vinrcl.safercar.gov
www.safercar.gov
FRIAR.SAFERCAR.GOV
safercar.gov
safercar.gov
vinrcl.safercar.gov
www.safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
map.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
map.safercar.gov
safercar.gov

Certificate

The complete raw certificate details for safercar.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ambQ++5aW7cErntrr+b
ILb9SxQuFTDS60weJiA5uiV8tUH/uxdeNHxVuOrCr0fVV/d4tcq2T6vupomAAqLq
RCDI0eyJItO+OgrB+f2l95cGTrehLQkdk8MfXqFgQ4Ap0ZxutC3JqURf46oxOloU
PwB4XZt/aEtM5SmqeqO56vXyPNoGvH8fhl56eH/pK9rM7HGarykghESO8dPMweJP
6Y3R/BxtgYqTgJosYmfTnIyxWahIa/Qm7fWmM3edw2WLzTU7A7u5O3lrJLJxr7t4
v9fjS/gyY7NwAsSj+US1hMu29atiObtNH6A8dXhsMTY7MkUTzpsh5s6WZIMKXAUK
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 756093251571601600100409182769756919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District Of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National Highway Traffic Safety Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCIO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'safercar.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29497161142052902038432076983987679234493087541090802013359548224081846217163496380762167982196040229771865323340607497618968601866690484993661231894663000219388542921677036000204678656394061031291933269299119948871193957034707214102881182732818256190479936449357575763194909252814542651998052199023598672747412245430283836048033160414782628899942836901599257906945435688232315794346232472696683196816778704632458703186348426548062270364540704651868729337262286136984465690156989449179530050487401321319490195701619432481557166046161744908933440269867494712509665375705973050931117969286609319612172555514989882182233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.911.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isearch.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distracteddriving.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safercar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecenter.911.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtstest.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dredata.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trafficsafetymarketing.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-odi.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ems.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcs.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-nrd.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinrcl.safercar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.tsm.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gts.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvedata.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-esv.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distraction.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fars.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safertruck.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safercar.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001567b630380000004030046304402200b0534d4fadbddea1b1f3be767d0c85f607ca197bb512627a724988e61af767602204ef25f49c8ad7493760d92f4b40b2ef03daabd285e237fd5b5090b331dbe00c8007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001567b63039a0000040300463044022100bb08620122410080a5cef3d60f82f9d014f1d9bbe28550c9f04f62b74f4a451c021f5fe910004c9fa32bf22b917b278cbc6eacdce0f07f4b9f1d64d5c2a602da16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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