mymail.stevenage.gov.uk

- Stevenage Borough Council -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 2e:2b:4d:15:86:0b:d5:dc:65:f3:3c:cb:78:36:d1:20 was issued on by GeoTrust Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Stevenage Borough Council

Company registration number: Government Entity
Organization: Stevenage Borough Council
Organization unit: ICT
State / Province: Hertfordshire
Locality: Stevenage
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:2b:4d:15:86:0b:d5:dc:65:f3:3c:cb:78:36:d1:20
Serial Number (int): 61369320021839321149542499360162894112
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): e2:e3:5e:e1:9d:b7:05:11:47:6e:4d:d2:50:31:db:3c:bc:a1:92:ad
Fingerprint (sha256): 12:de:7b:27:77:81:58:9a:a9:8c:bc:3f:9f:92:2e:01:d0:db:69:3b:47:f7:48:85:63:fa:8b:ba:53:9f:e7:79

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate mymail.stevenage.gov.uk

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mymail.stevenage.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hertfordtheatre.com
autodiscover.hertfordtheatre.com
hertspartnership-ala.gov.uk
autodiscover.hertspartnership-ala.gov.uk
mymail.eastherts.gov.uk
eastherts.gov.uk
autodiscover.eastherts.gov.uk
stevenage.gov.uk
autodiscover.stevenage.gov.uk
mymail.stevenage.gov.uk

Other certificates including the domain name stevenage.gov.uk

(limited to 100 certificates)
www.fixmystreet.com
www.stevenage.gov.uk
www.fixmystreet.com
webmail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
*.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
myaccount.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
remote.stevenage.gov.uk
*.stevenage.gov.uk
eforms.stevenage.gov.uk
mymail.stevenage.gov.uk
*.stevenage.gov.uk
mymail.stevenage.gov.uk
*.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
dwp-cis.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
lahdenymparistovahti.fi
www.fixmystreet.com
www.fixmystreet.com
publicaccess.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
remote.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
payments.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mydesktop.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
eforms.stevenage.gov.uk
lahdenymparistovahti.fi
*.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
dwp-cis.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com

Certificate

The complete raw certificate details for mymail.stevenage.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOk162xKL65fl/0HQFr0
iKBByKq6/m9qbnknLiX5CmRTHFseNWFmi/aNMXijUOnxJf8N86maZMUgAnw4wJnA
HVtQkveP2nKlTCboWs04adRvnzScF3F/oIvcLolHtQicu7m5UFkA36lbeTHTxH9s
a5FtweZRdpSfTmvh7ndMgdaMtWTLzMCaOX6OWnkzcSZdm0qSFGyE0akrZH6OQgqo
VEQsei1277OD2KWy+csWMLXBfbZ09NuMmiCAqlnkSDu1/GNpbONvmclZhnAHESrL
TaK7ulYBjV4Mu6j9GLpCi8oV1+V9BcoMZCqBGHgu+vt1kpLiQdvX5zb00vV8KhpS
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61369320021839321149542499360162894112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hertfordshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stevenage'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stevenage Borough Council'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mymail.stevenage.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20313129239152359908497781221080537662094515343118697856922234938569463780344732959560183023920901850262221437242745754266190947053111408789320277625449263078806159107833295873766920145630363356143088189870055162308515005335751136756724059295201697014772424618119921345916860450610139201692499769411498768448444281488865231432824850970368603407441390767739926416367311363971253484924825202161440259161897396793584493293790588851678650428057625686912495622177022718546896156635075219274488137524275821159321918925575096333262988644543382724109709821732916057615340769262293364670375470276243242071189047875130397184727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (278 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertfordtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hertfordtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertspartnership-ala.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hertspartnership-ala.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymail.eastherts.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastherts.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eastherts.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenage.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stevenage.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymail.stevenage.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c8224beab752efcb22e1111ab5f65844a9b99e4a3c3a71bcc778d680c581788bbc31b0a46e6732d3d4fd1d6784016280702195b9070064062fb0675ae4e39164c6504cae5074d0607118042d0143e5e45747da6d80dba4d87f6208c711498e032d397f2dc67e7c414fb1bc95e758ef7e895ae715f418a5d559d22447f0e8eecf3debd70f1c8e3f6ea2570537aebcdb7b9567d10abf3a6b237c2dfbba12fdd37a14ad5ae01ca06eed510b552b195e8dbf07d1d6bd01f4a55132035a9a54abdbe1e72159c930ffbcf7796acbc30e83ff64133ea53762731e26fa7099c85138199f00a3e24aa7caa3367e7c24b297784a7322fd4fac27a8b5de133891261871331