axelspringer.de

- Axel Springer SE -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 12:0b:9b:e7:b6:1a:b9:80:15:27:60:0f:e4:ff:ac:47 was issued on by GeoTrust Inc..

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Axel Springer SE

Organization: Axel Springer SE
State / Province: Berlin
Locality: Berlin
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:0b:9b:e7:b6:1a:b9:80:15:27:60:0f:e4:ff:ac:47
Serial Number (int): 23986381321125055479461706283180076103
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 4d:37:71:9f:8a:19:ac:97:53:4f:fe:db:c6:90:ed:76:72:43:99:fa
Fingerprint (sha256): 15:46:09:f4:a9:10:93:76:7a:d4:8d:12:a0:67:1e:a2:7e:95:1e:40:b6:a2:d1:37:e6:28:08:0d:7c:dc:d0:63

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate axelspringer.de

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for axelspringer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.mazandmore.de
autodiscover.bild.de
autodiscover.asdirekt.de
autodiscover.axelspringer.com
mail.axelspringer.com
autodiscover.immonet.de
weltn24.de
autodiscover.weltn24.de
autodiscover.welt.de
autodiscover.computerbild.de
autodiscover.autobild.de
webmailhh.axelspringer.de
marc-hh.axelspringer.de
marc-b.axelspringer.de
autodiscover.axelspringer.de
webmail.axelspringer.de
webmailb.axelspringer.de
mail.axelspringer.de
axelspringer.de
www.axelspringer.de

Other certificates including the domain name axelspringer.de

(limited to 100 certificates)
mypersonal.axelspringer.de
*.axelspringer.de
*.prod.ps.axelspringer.de
el-shop.welt.de
career.axelspringer.de
ideationcouncil.axelspringer.de
*.prod.ps.bild.de
axelspringer.de
klick.regionalvermarktung.axelspringer.de
*.prod.ps.axelspringer.de
marketplace.axelspringer.de
nachhaltigkeit.axelspringer.de
go.axelspringer.de
go.axelspringer.de
efa.axelspringer.de
axelspringer.de
www.axelspringer.de
*.prod.ps.axelspringer.de
mail.oculus.axelspringer.de
*.prod.ps.axelspringer.de
nachhaltigkeit.axelspringer.de
axelspringer.de
fs.axelspringer.de
contracttool.axelspringer.de
www.axelspringer.de
lyncdiscover.axelspringer.de
*.prod.ps.axelspringer.de
www.axelspringer.de
regio360.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
earlybird.axelspringer.de
*.prod.ps.axelspringer.de
www.ideationcouncil.axelspringer.de
somaetbws.axelspringer.de
karriere.axelspringer.de
remote.axelspringer.de
contracttool.axelspringer.de
*.prod.ps.bild.de
klick.regionalvermarktung.axelspringer.de
axelspringer.de
*.api.ps.bild.de
go.axelspringer.de
rich-media.axelspringer.de
digas-review.axelspringer.de
axelspringer.de
axelspringer.de
axelspringer.de
*.services.ps.axelspringer.de
motiveingang.axelspringer.de
teams.axelspringer.de
campus.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de
axelspringer.de
link.abonnement.axelspringer.de
*.axelspringer.de
motiveingang.axelspringer.de
career.axelspringer.de
mib2.axelspringer.de
mypersonal.axelspringer.de
transfer.axelspringer.de
marketplace.axelspringer.de
*.auth.axelspringer.de
*.prod.ps.bild.de
go.axelspringer.de
nachhaltigkeit.axelspringer.de
ascs-ww.axelspringer.de
regio.axelspringer.de
upload.zs.axelspringer.de
secure.axelspringer.de
sirius.regionalvermarktung.axelspringer.de
ideationcouncil.axelspringer.de
marketplace.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
somaetbws.axelspringer.de
*.services.ps.bild.de
*.axelspringer.de
motiveingang.axelspringer.de
aboservice.audiovideofotobild.de
*.axelspringer.de
kundenservice.auth.axelspringer.de
mediaportal.axelspringer.de
teams.axelspringer.de
gutscheine.axelspringer.de
aboservice.audiovideofotobild.de
axelspringer.de
*.prod.ps.axelspringer.de
go.axelspringer.de
*.prod.ps.spring-media.de
miu5.axelspringer.de
teams.axelspringer.de
*.services.ps.bild.de
axelspringer.de
*.prod.ps.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de

Certificate

The complete raw certificate details for axelspringer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIINzCCBx+gAwIBAgIQEgub57YauYAVJ2AP5P+sRzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzA1MDQwMDAwMDBaFw0xOTAzMTcy
MzU5NTlaMGQxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCZXJsaW4xDzANBgNVBAcM
BkJlcmxpbjEZMBcGA1UECgwQQXhlbCBTcHJpbmdlciBTRTEYMBYGA1UEAwwPYXhl
bHNwcmluZ2VyLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIzw
9QPOgFnjyGra9nanIjVjiCd9Q8zP+Pr4SZAe7B6h/w9EjNIBXYw7V/f/MSNEDhHu
jrP4+qhgtRczm2lj3BBX1N/3okIaJpSbARPUgAsF7lkI7TelTkQ6OeyLsp3h7+fR
Y4wvXiTC+VEuxxTqhaPyTUxu5z7dCFL33N+OutAzxwBnMYgdNT6h4PL0mnCz/pWo
3t5abxS/pf1zeDLC6ekG5s3KycO702el6d2HcCRADX/3nRsxHFnBHxua7qMBft5S
15Xm6VhChNBc9X2/wR9Om14PSUmhn0/STH6NBOH30OX46vwnZqEainAbdQsGATi/
oH1bRrU+wEseGyxbcwIDAQABo4IFATCCBP0wggH0BgNVHREEggHrMIIB54IaYXV0
b2Rpc2NvdmVyLm1hemFuZG1vcmUuZGWCFGF1dG9kaXNjb3Zlci5iaWxkLmRlghhh
dXRvZGlzY292ZXIuYXNkaXJla3QuZGWCHWF1dG9kaXNjb3Zlci5heGVsc3ByaW5n
ZXIuY29tghVtYWlsLmF4ZWxzcHJpbmdlci5jb22CF2F1dG9kaXNjb3Zlci5pbW1v
bmV0LmRlggp3ZWx0bjI0LmRlghdhdXRvZGlzY292ZXIud2VsdG4yNC5kZYIUYXV0
b2Rpc2NvdmVyLndlbHQuZGWCHGF1dG9kaXNjb3Zlci5jb21wdXRlcmJpbGQuZGWC
GGF1dG9kaXNjb3Zlci5hdXRvYmlsZC5kZYIZd2VibWFpbGhoLmF4ZWxzcHJpbmdl
ci5kZYIXbWFyYy1oaC5heGVsc3ByaW5nZXIuZGWCFm1hcmMtYi5heGVsc3ByaW5n
ZXIuZGWCHGF1dG9kaXNjb3Zlci5heGVsc3ByaW5nZXIuZGWCF3dlYm1haWwuYXhl
bHNwcmluZ2VyLmRlghh3ZWJtYWlsYi5heGVsc3ByaW5nZXIuZGWCFG1haWwuYXhl
bHNwcmluZ2VyLmRlgg9heGVsc3ByaW5nZXIuZGWCE3d3dy5heGVsc3ByaW5nZXIu
ZGUwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYa
aHR0cDovL2dqLnN5bWNiLmNvbS9nai5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EM
AQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVz
b3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93
d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQUZ47tg0/WHp1A
BAwERqFwNLIPcjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9n
ai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nai5zeW1jYi5jb20vZ2ou
Y3J0MIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwDd6x0reg1PpiCLga2BaHB+
Lo6dAdVciI09EcTNtuy+zAAAAVvS8CPgAAAEAwBIMEYCIQC8+bVODHUqX71DgLzm
pqrW7dliVlU8ChZYYp8iWIkA/AIhAKiVMpQZxjSGRiKmofvMBYN8MsjY9jSaey4b
gLPzR9MiAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFb0vAk
HQAABAMARzBFAiBY2EnJd+iIBGawFfJaNwR+oocI4D5EfGeww8FU4lbFnwIhAP+O
oNC4J3uJdOqqofPLEfTLXaygo91HLCasbjoYE5ymAHcA7ku9t3XOYLrhQmkfq+Ge
ZqMPfl+wctiDAMR7iXqo/csAAAFb0vAmfgAABAMASDBGAiEAp3AVLDC6O7KBDynQ
Q2zO5hTxX5URTg0tstIk3DofLSYCIQDoIT8hbijEJdBt+DnCNthLs1J9ZPLAO3Lt
vBBt5xbFVzANBgkqhkiG9w0BAQsFAAOCAQEAPhBdk0+eH/l4s1tU8aNFMSW9NYw6
t0fjvzYsVEqUUxY9HMV8LSCVqp1553jfia+EzUESHNs8tWx8CwZh+/ctGdH8rmge
a6t4vOX4zc33K300WA/dWFAIp1El8JrbfpFu3U7ZAb0wIvtxrC+oI8Fu/vnFkcv2
YQRI1G7UCb1afX3Z+Gn2GFa4DW8qa45LWfxXvwjUEwe5XzGHTnYHrqWZ98fOXFkY
ZDTaugiNzohmwVFumWLQQI4hWcitoJrqPB24NZ5gC56k/O81EKn6WnPtFlRkxfL3
et+2IXTYpV7XOaiIs7uglv3PYPEBXW9YuztZlFfXrK9DA0XohDni+kAzNQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIzw9QPOgFnjyGra9nan
IjVjiCd9Q8zP+Pr4SZAe7B6h/w9EjNIBXYw7V/f/MSNEDhHujrP4+qhgtRczm2lj
3BBX1N/3okIaJpSbARPUgAsF7lkI7TelTkQ6OeyLsp3h7+fRY4wvXiTC+VEuxxTq
haPyTUxu5z7dCFL33N+OutAzxwBnMYgdNT6h4PL0mnCz/pWo3t5abxS/pf1zeDLC
6ekG5s3KycO702el6d2HcCRADX/3nRsxHFnBHxua7qMBft5S15Xm6VhChNBc9X2/
wR9Om14PSUmhn0/STH6NBOH30OX46vwnZqEainAbdQsGATi/oH1bRrU+wEseGyxb
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23986381321125055479461706283180076103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Axel Springer SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'axelspringer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22287442389122001148956899690577172887986678130815080751313518922056954609696977669564435243668654038958288040707264587862403277436383546859210593897382376350942990858991210218661974316756693156889543828546251378741697372187912416832435423275636839112806509754603941493412837918975792394597766810735470403868652861262527268906483995115942846674863247966980510487061574058936464738530075238009914531074454741717891811134665524850608033397731427590765675821959791325286345714221458405625697096452294926780714930489579011887098928355587792689990840701267044553537600644798927991448629308068619051307043350831594539342707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (491 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mazandmore.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.asdirekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.axelspringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.axelspringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.immonet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weltn24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.weltn24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailhh.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marc-hh.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marc-b.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailb.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axelspringer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003e105d934f9e1ff978b35b54f1a3453125bd358c3ab747e3bf362c544a9453163d1cc57c2d2095aa9d79e778df89af84cd41121cdb3cb56c7c0b0661fbf72d19d1fcae681e6bab78bce5f8cdcdf72b7d34580fdd585008a75125f09adb7e916edd4ed901bd3022fb71ac2fa823c16efef9c591cbf6610448d46ed409bd5a7d7dd9f869f61856b80d6f2a6b8e4b59fc57bf08d41307b95f31874e7607aea599f7c7ce5c59186434daba088dce8866c1516e9962d0408e2159c8ada09aea3c1db8359e600b9ea4fcef3510a9fa5a73ed165464c5f2f77adfb62174d8a55ed739a888b3bba096fdcf60f1015d6f58bb3b599457d7acaf430345e88439e2fa403335