sign-sts.flexdanmark.dk
Issued by RapidSSL SHA256 CA - G2
About this certificate
This digital certificate with serial number 71:54:77:c4:8f:c9:49:6e:af:b0:ec:89:89:06:96:41 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=sign-sts.flexdanmark.dk
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 71:54:77:c4:8f:c9:49:6e:af:b0:ec:89:89:06:96:41Serial Number (int): 150641345639774803772267239072753686081
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12
Fingerprint (sha1): bc:8c:16:6c:f8:cc:bf:1d:53:46:98:65:86:b7:1e:0a:6b:75:c1:8c
Fingerprint (sha256): 15:fd:cd:de:67:99:60:e1:63:5e:be:7b:ba:ab:ae:92:e0:5d:b0:66:9b:5e:cf:cd:62:2a:99:34:7a:65:c7:58
Issuing Certificate URL: http://gs.symcb.com/gs.crt
Revocation information
OCSP Server: http://gs.symcd.comCRL Distribution Point: http://gs.symcb.com/gs.crl
Check the revocation status for certificate sign-sts.flexdanmark.dk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sign-sts.flexdanmark.dk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sign-sts.flexdanmark.dk
Other certificates including the domain name flexdanmark.dk
(limited to 100 certificates)
bc.networkthinking.com
mobile.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
sign-teststs.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
sign-sts.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
flexdk-uccx-01.telefoni.flexdanmark.dk
flexdk-uccx-02.telefoni.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
intra.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
driftstatus.flexdanmark.dk
mobile.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
sign-teststs.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
sign-sts.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
flexdk-uccx-01.telefoni.flexdanmark.dk
flexdk-uccx-02.telefoni.flexdanmark.dk
driftstatus.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
intra.flexdanmark.dk
ekstra.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
driftstatus.flexdanmark.dk
flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
intra.flexdanmark.dk
driftstatus.flexdanmark.dk
vognmand.flexdanmark.dk
bc.networkthinking.com
intra.flexdanmark.dk
bc.networkthinking.com
*.flexdanmark.dk
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
bc.networkthinking.com
driftstatus.flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
bc.networkthinking.com
flexdanmark.dk
bc.networkthinking.com
ekstra.flexdanmark.dk
driftstatus.flexdanmark.dk
Certificate
The complete raw certificate details for sign-sts.flexdanmark.dk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIQcVR3xI/JSW6vsOyJiQaWQTANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX UmFwaWRTU0wgU0hBMjU2IENBIC0gRzIwHhcNMTcwMzAxMDAwMDAwWhcNMjAwMjI5 MjM1OTU5WjAiMSAwHgYDVQQDDBdzaWduLXN0cy5mbGV4ZGFubWFyay5kazCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOg0bxGhXLRK+QUTkVtCaYktP4kX GxOundPo1TG6nmPGkBVf3L8ba9/6+LLQwlXKZoxJ1rIBMHOmW0wt/MsFR0L73GfU yRk0VWcYAo4UKeurMtgB6a9wy/Dg1sUaxd5hFiJlLnYSw7Q3y1sfaKhSaWK3S+gZ PNr3Zi8opIw1wPxma5tal1IZg00sUD9kmtB3ypxlExHKtTDMLJ65UYry1AJxT4K3 CDi6pRohq/t87fwfru/8BSZl+UaZZr3YTPxzSQtdtcKse8Y2j0jzkDzSe2ejjNaL IBSaAvXzmT21q34RrfWPYSur3DQok344Es/MqWwWbLdCKlh7g5cArO95KZmVOGtR M8wMgtVg7gQWZCzu9zdDsC3kJvn7zQnMdijSvijPVoIT9TOEm5SCPUKuCJuOBfhJ TwOOzIr2HA1zti4Gk4621vpQOASuEv6gXGHI/VZHKJOjoeN0p/gLmRoQbC27GD6f IrLm8cp2g1qqnVAEz3jpuePbVIdz2o/vKtsU2XpAdBB3ab1r4dXNqP+GgTlgMN+/ Uw6EhdDDYjZ46a4mjXtcchB5hMuUtmlrw3JIaxAGD/3/6fq5xdqydI7+m9bXfmRz OBUnGletP8qwpws/6iQDrb3FAPvs39Uqk9sr+Qs9+MOUjGP+ShSw7HvmY8lBS/2d jEe3andqWkIfPGyFAgMBAAGjggGPMIIBizAiBgNVHREEGzAZghdzaWduLXN0cy5m bGV4ZGFubWFyay5kazAJBgNVHRMEAjAAMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6 Ly9ncy5zeW1jYi5jb20vZ3MuY3JsMG8GA1UdIARoMGYwZAYGZ4EMAQIBMFowKgYI KwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAsBggrBgEF BQcCAjAgDB5odHRwczovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwHwYDVR0jBBgw FoAUTPS/6Du+wiTzG0c7tW5IjharrxIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUH MAGGE2h0dHA6Ly9ncy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9ncy5z eW1jYi5jb20vZ3MuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+IO/t22I5foHsaKLQGZ5YH58Na0eRPH+6ZMBvcUvcIdpTiGvSnnPL yC4917YJZsftWM1CYJpsO72ER9+CY1O7k8Nn86HXhst71mQPKVJPwsY34eAyrxw4 /ISlwXOqHr2/jLyCr+INJPkMAFoKLhwLWjacOnqqcp0Dd3aYYwWCJujzNeDuITLS 9Qb1tfMZ9w502I72EMnuSxY8ungEV400pnqj1DqgDHILpBbdIMiqv191O6LO2Fmj k4VoHoEPTmF1GSzd3+JICCkRt/0Yx4Z9xfVKlXUotE+G59Zx/945sCHLNCQjqfjy CEac0XdE6cwa8B3YA/8cy91GTmzaYAjx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6DRvEaFctEr5BRORW0Jp iS0/iRcbE66d0+jVMbqeY8aQFV/cvxtr3/r4stDCVcpmjEnWsgEwc6ZbTC38ywVH QvvcZ9TJGTRVZxgCjhQp66sy2AHpr3DL8ODWxRrF3mEWImUudhLDtDfLWx9oqFJp YrdL6Bk82vdmLyikjDXA/GZrm1qXUhmDTSxQP2Sa0HfKnGUTEcq1MMwsnrlRivLU AnFPgrcIOLqlGiGr+3zt/B+u7/wFJmX5RplmvdhM/HNJC121wqx7xjaPSPOQPNJ7 Z6OM1osgFJoC9fOZPbWrfhGt9Y9hK6vcNCiTfjgSz8ypbBZst0IqWHuDlwCs73kp mZU4a1EzzAyC1WDuBBZkLO73N0OwLeQm+fvNCcx2KNK+KM9WghP1M4SblII9Qq4I m44F+ElPA47MivYcDXO2LgaTjrbW+lA4BK4S/qBcYcj9Vkcok6Oh43Sn+AuZGhBs LbsYPp8isubxynaDWqqdUATPeOm549tUh3Paj+8q2xTZekB0EHdpvWvh1c2o/4aB OWAw379TDoSF0MNiNnjpriaNe1xyEHmEy5S2aWvDckhrEAYP/f/p+rnF2rJ0jv6b 1td+ZHM4FScaV60/yrCnCz/qJAOtvcUA++zf1SqT2yv5Cz34w5SMY/5KFLDse+Zj yUFL/Z2MR7dqd2paQh88bIUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 150641345639774803772267239072753686081 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sign-sts.flexdanmark.dk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947313015566615496663159491423691486951899886038278153723592071336359527640499122823801865599020134646150210621441383566438519070778973776843041230711164125164362014882921279721379039468242864132981627763363289947282132286416156433240722976377849486685068667587213033303664108365244979811998892596468162942860813828383794506272120627303483331110960730356601361663071357140200709410565183477282861051170048920966409321085354767835507811155710093704192638832678266927353804289037802384954598373019457615959598099127225447860132898863060704107051093895814519873625316631593562685739594847054260438225461567029038569732470155450224188892718552827097760888089855350196976792347418323127893899441178270996850103871248711222888499975476263315810988988318581322688487160347879289802438593203587731125314550727198680667928663376257788728705710320728035360908647277646892789746260741052090115890336032382123932730876503388755689017525354293292222720547869716232779316556030707099760258778297824897301133020501107045513146190117032346903715030408120088273400044345783937678332014282057160007669441915650587474440303010380642343552685126102128109878248358925742200199420655259010383579397966189768976678042616266320866457262874058645156669451397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sign-sts.flexdanmark.dk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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