sanpki-gui.fiducia.de

- Fiducia & GAD IT AG -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 41:c1:b5:51:41:92:cc:6d:d0:83:48:b8:bc:a3:92:b7 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Fiducia & GAD IT AG

Company registration number: HRB 102381
Organization: Fiducia & GAD IT AG
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:c1:b5:51:41:92:cc:6d:d0:83:48:b8:bc:a3:92:b7
Serial Number (int): 87405610573630172275345631748001338039
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): f7:27:95:46:32:1e:ba:29:fa:31:b7:02:5c:98:55:73:59:8b:c2:3f
Fingerprint (sha256): 14:43:e3:2e:03:80:65:49:88:dd:85:6a:01:10:2e:bd:ba:ff:62:f0:01:12:ad:e8:01:a5:24:48:4d:40:c5:65

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate sanpki-gui.fiducia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanpki-gui.fiducia.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanpki-gui.fiducia.de

Other certificates including the domain name fiducia.de

(limited to 100 certificates)
jprint31-z.brz.fiducia.de
webcenter-publish-01g.fiducia.de
finanzportal.fiducia.de
oapimgbrs024.brz.fiducia.de
fiducia-direkt.de
ZIS4.NOC.FIDUCIA.DE
webcenter-publish-01h.fiducia.de

vr-bankingapp-riat.web.fiducia.de
jprint48-riat-e.brz.fiducia.de
agreetouch.fiducia.de
SEUDB-DEV.RZ.BANKENIT.DE
pegasus.peras.fiducia.de
agreesb.fiducia.de
fints-test.atruvia.de
webdav-uit-a.fiducia.de
fidwdpa40.fid.sap.fiducia.de
giropay-admin.fiducia.de
genogoogle-riat.brz.fiducia.de
sonar-dev.rz.bankenit.de
ftgwp10.fiducia.de
pilot.vr-infoforum.fiducia.de
ebics.fiducia.de
webcenter-publish-01g.fiducia.de
OAPIMGBRS034.BRZ.FIDUCIA.DE
oatimgbrs016.brz.fiducia.de
webdav-uit.fiducia.de
*.E1.WEB.FIDUCIA.DE
geno-formular2.finanzportal.fiducia.de
vr-bankingapp-edu.web.fiducia.de
fus.rz.bankenit.de
vr-bankingapp-edu.web.fiducia.de
RAPIMGBRS034.BRZ.FIDUCIA.DE
webcenter-publish-01a.fiducia.de
cik7011.uit.sap.fiducia.de
giropay.fiducia.de
xmc-nac03.netz.fiducia.de
citrix-a.uit.fiducia.de
vr-bankingapp-messe.web.fiducia.de
www.vr-infoforum.fiducia.de
*.p20.brz.fiducia.de
geno-formular2.finanzportal.fiducia.de
sonargraphlic-dev.rz.bankenIT.de
SONARGRAPHLIC-QA.RZ.BANKENIT.DE
datenservice.fiducia.de
seu27.pka.bankenit.de
svn.fiducia.de
*.web.fiducia.de
identity.fiducia.de
jenkins.rz.bankenit.de
agreesb20-g.fiducia.de
webcenter-publish-01f.fiducia.de
bo-p-uit.fiducia.de
sonargraphlic-qa.rz.bankenIT.de
identity.fiducia.de
seulicences.rz.bankenit.de
oapimgbrs035.brz.fiducia.de
zis2.noc.fiducia.de
seudb.rz.bankenIt.de
xmc-gim.netz.fiducia.de
finanzportal-ms.fiducia.de
webcenter-publish-01h.fiducia.de
giropay-transx.fiducia.de
zvs-production.p20.brz.fiducia.de
rentenmanager-prod.vkb.fiducia.de
webcenter-publish-01e.fiducia.de
uitmgwug3.uit.sap.fiducia.de
giropay-admin.fiducia.de
citrix-a.uit.fiducia.de
webcenter-publish-01d.fiducia.de
vr-bankingapp-riat.web.fiducia.de
*.l1.web.fiducia.de
uit-sharepoint.fiducia.de
*.WEBCENTER-PV-PILOT-MS.BRZ.FIDUCIA.DE
servicedesk.sap.fiducia.de
cie7012.uit.sap.fiducia.de
webservices.fiducia.de
voting.fiducia.de
svn-qa.fiducia.de
webcenter-publish-01d.fiducia.de
webdav-uit.fiducia.de
webdav-uit-a.fiducia.de
jprint42-z.brz.fiducia.de
hbci11.fiducia.de
sts.enterprise.fiducia.de
ide.rz.bankenIT.de
hbci11.fiducia.de
mobile-access.fiducia.de
pegasus.peras.fiducia.de
*.l2.web.fiducia.de
dzbhcmhrt.dzb.sap.fiducia.de
ebics.fiducia.de
vr-bankingapp-last.web.fiducia.de
sanpki-gui.fiducia.de
dbawdpa01.dba.sap.fiducia.de
UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE
test-intmob.fiducia.de
jprint31-riat-e.brz.fiducia.de
webcenter-publish-02a.fiducia.de
fiderps38.fid.sap.fiducia.de

Certificate

The complete raw certificate details for sanpki-gui.fiducia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgIQQcG1UUGSzG3Qg0i4vKOStzANBgkqhkiG9w0BAQsFADBH
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX
R2VvVHJ1c3QgRVYgU1NMIENBIC0gRzQwHhcNMTYxMTIzMDAwMDAwWhcNMTgxMTMw
MjM1OTU5WjCCAQIxEzARBgsrBgEEAYI3PAIBAxMCREUxFzAVBgsrBgEEAYI3PAIB
AhMGSGVzc2VuMSIwIAYLKwYBBAGCNzwCAQETEUZyYW5rZnVydCBhbSBNYWluMR0w
GwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKSFJCIDEwMjM4
MTELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVtYmVyZzESMBAG
A1UEBwwJS2FybHNydWhlMRwwGgYDVQQKDBNGaWR1Y2lhICYgR0FEIElUIEFHMR4w
HAYDVQQDDBVzYW5wa2ktZ3VpLmZpZHVjaWEuZGUwggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQDR9XlQi9CckAF36r/RhzUkim+8/Ealqw7P1Afvpoed+O9X
oSm4ZBODThBtRxtZn3VlJo0dguEHjTsJk0JVYaejqPL+UTsj9L3jnko3sUbuLPJH
geX+75Jx2b9jjpPXcmbXhc57ktdRgzoJXjkH9GO02J/BbriVX40s6K1iIMIpBI7d
/Rg8wCYOt6I7ie7q2iZfNrkqo9ut0Te0BSp6Is8R+tNRVvVBl8s2wYT+0wtxS4Zn
mDj83zlJSeheogOvHmT/kSMXBNtUcOzFvDkVDSSGABzdatC7D/fWDoRGeIr3wDVU
WOXniqW7Hh8OfhlWJPQ7lbs6/l1gtrpC93OjpeKsHuRyYJr7B3i5Q9C2/LUxME8X
O/Cg03+3yt7fTmdO5NQ8BM0JDv5Wtvq1INjjZjLw91LDgZ7dY2baO+Nu3zm/liga
eVOh3sXAoS+5DQQoOxd9s+xvX5nZXZtkmdRowPaVSmw66alOgbqmVEPY4yzMEo7J
SJ8gIBc8oRQuVaEQnjhjxXFz2QmlWeG+gmawE4h5SxSD4NYqCsqc9OYvk5+pPZgH
1qDOTQ0C7MlN75qnIK8YNPmAB16WPggyDK/EGPEe2NGwMkI3HDwmsbMmqVp8poIi
vRRqPxiHE6Uqa1CcOMSu/249Ms+SwKH++v4LyNWUI/9e9eDkOXRhuXzY89TEkwID
AQABo4IByDCCAcQwIAYDVR0RBBkwF4IVc2FucGtpLWd1aS5maWR1Y2lhLmRlMAkG
A1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6
Ly9nbS5zeW1jYi5jb20vZ20uY3JsMIGpBgNVHSAEgaEwgZ4wgZIGCSsGAQQB8CIB
BjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291
cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3
Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAHBgVngQwB
ATAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU3s9c
ULeuAh8VF6oW6A21KJ1qWvMwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNo
dHRwOi8vZ20uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ20uc3ltY2Iu
Y29tL2dtLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMAH6GvF6dtLXL90hWUE8Jz1BJpA1IwGf9sDD9UNPN43SiKByOHQgIf1Vjd6o
mjRzozNelhbzGjOPF6Qz59reAnqwuuVbzvN550KSX5oqzHahY3FaVxvwuR3xEqjO
ue5IRj3hlMfQZNYzntG5zpOMEEx4OklWaZZPY6wzSJ2UkNbWOojoIXeprsW7yauL
Dgo5AnlKoZIan22j14KGXqFZr0aSSlHXhC9zPDRmcJrhCJCXEQkUn/sv+nOpzOQ0
6TGbn2OdiqGG5mdC9KJ5+ETcbi1AFllbRWYiGPKNvjLsa34PQQ0wQUuARf03ltQu
r4mj4c1kDkyE5ry4gh4eWbnTkA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87405610573630172275345631748001338039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 102381'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fiducia & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sanpki-gui.fiducia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856557508966065559260967821289203212797361591685770247200223844903739682032164847408550386614271396693690728157217893874763439129115871095161992706363090879352187457382835087757228241728257767785781485009779344704248434877669947826391937627398535293595696831489191446438996164362725834136917216839103058549807297745328482510918210832410097256010613711069689132972451685690715891922082750083260223618872542254046350887969749770162146602783634429843655208402956133362814133474267527841901644992440225695973267669470728115271581736872196772782893953445829624603579471185929009100168251470667678328816691292068379323591690043216116038435011807752831881383515969428391974813813768856725121953624577640425464321839343250682961125544865721844690754158353005584671487272998756296299804649625183536805829177406969952868275852391492392543813334129190814540012876101073827068402809345592918377665045797922199410404079384511848205841299188351492865237681527678795405865621708126257690989724471335779075814003508322781057995906079745132378750316633074314306734032431118539280538420936106008095473118732491396221909727165520691130529176261569788105847300162150521106327229712605075371679484349626875570679269202595175457479041028177523470228571283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanpki-gui.fiducia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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