ngaitahu.iwi.nz
- Te Runanga o Ngai Tahu -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 45:b2:33:60:54:09:e7:b3:8c:c8:c0:a6:c8:f7:b1:af was issued on by GeoTrust Inc..
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Te Runanga o Ngai Tahu
Organization:
Te Runanga o Ngai Tahu
State / Province:
Christchurch
Locality: Christchurch
Country: NZ
Locality: Christchurch
Country: NZ
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 45:b2:33:60:54:09:e7:b3:8c:c8:c0:a6:c8:f7:b1:afSerial Number (int): 92642002584780497488947965296708661679
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): a7:81:04:5d:37:28:bf:52:b8:1e:1a:4b:7a:f5:46:97:2c:9b:c4:2f
Fingerprint (sha256): 17:09:32:55:d5:36:0c:3c:e0:88:84:b5:0e:bc:8c:52:ee:ee:04:27:69:29:b4:e0:23:57:0e:5b:41:08:c8:69
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate ngaitahu.iwi.nz
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ngaitahu.iwi.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.ngaitahu.iwi.nz
hybrid.ngaitahu.iwi.nz
ngaitahu.iwi.nz
www.ngaitahu.iwi.nz
hybrid.ngaitahu.iwi.nz
ngaitahu.iwi.nz
www.ngaitahu.iwi.nz
Other certificates including the domain name ngaitahu.iwi.nz
(limited to 100 certificates)
ssl388199.cloudflaressl.com
communitynet.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
leadersonline.ngaitahu.iwi.nz
webmail.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388198.cloudflaressl.com
ssl388199.cloudflaressl.com
*.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
tekereme.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
sni.cloudflaressl.com
ssl388198.cloudflaressl.com
communitynet.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
sts.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
www.mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388197.cloudflaressl.com
ssl388198.cloudflaressl.com
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ngaitahu.iwi.nz
tekereme.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
sni.cloudflaressl.com
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
www.mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl388197.cloudflaressl.com
webmail.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
webmail.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
communitynet.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
leadersonline.ngaitahu.iwi.nz
webmail.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388198.cloudflaressl.com
ssl388199.cloudflaressl.com
*.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
tekereme.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
sni.cloudflaressl.com
ssl388198.cloudflaressl.com
communitynet.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
sts.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
www.mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388197.cloudflaressl.com
ssl388198.cloudflaressl.com
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ngaitahu.iwi.nz
tekereme.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
sni.cloudflaressl.com
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
www.mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl388197.cloudflaressl.com
webmail.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
webmail.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
Certificate
The complete raw certificate details for ngaitahu.iwi.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIQRbIzYFQJ57OMyMCmyPexrzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNTA1MDAwMDAwWhcNMTkwNTA1MjM1 OTU5WjB2MQswCQYDVQQGEwJOWjEVMBMGA1UECAwMQ2hyaXN0Y2h1cmNoMRUwEwYD VQQHDAxDaHJpc3RjaHVyY2gxHzAdBgNVBAoMFlRlIFJ1bmFuZ2EgbyBOZ2FpIFRh aHUxGDAWBgNVBAMMD25nYWl0YWh1Lml3aS5uejCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANCi2fBGi6nw9qkV+QIbciiOIm7d35RSanPk3DD9UCtZPfV2 Bt9kavC/UYmiDRLxbOJC9fp95tZcgFbYXCU0rwcbM8BWbW8BhPj9QG0sqfkwHHDf A8lt8KixOXE7MdrXx3ospt2+OTfRwORwK73INx31hwOc5/kQACYe0HmlBqzFeTZ0 YNo7i9wQj8ecFt4iJly2QdVwFYMnjC6Yx3EZ6i0aCPtgJlDECugqqFNegmRQ5Y/C kkGYe8XjyY8Bd31QRfnc/kllXcXzVIC4SmOJs3uDpxXtcdTsvfnDJsx2Q8gQLWw3 FsNvqhHyw9j/EWiaBIWoSJPjS+2ZFCZtA0XKHW8CAwEAAaOCA+UwggPhMGUGA1Ud EQReMFyCHGF1dG9kaXNjb3Zlci5uZ2FpdGFodS5pd2kubnqCFmh5YnJpZC5uZ2Fp dGFodS5pd2kubnqCD25nYWl0YWh1Lml3aS5ueoITd3d3Lm5nYWl0YWh1Lml3aS5u ejAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpo dHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwB AgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNv dXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3 dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9 I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2du LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5j cnQwggH1BgorBgEEAdZ5AgQCBIIB5QSCAeEB3wB1AN3rHSt6DU+mIIuBrYFocH4u jp0B1VyIjT0RxM227L7MAAABVH9gb18AAAQDAEYwRAIgEu7raiob9PHlg0byeQkY W546P0bfQosik1c1dg5g0H8CIBEGOXRDhe52E2+mZ1GWY4CJKOM4+3kH6OVMq7Wp whp3AHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFUf2BvlwAA BAMASDBGAiEAgqPv7wI/IOptT+OvpyFlad1nmBR+MaxWDPrIMxqQLOkCIQCVmCNh K2j5TEYdhzXFDwTLU10NMcZcYTV/Odas2hQT/AB2AGj2mPgfZIK+OozuuSgdTPxx UV1nk9RE0QpnrLtPT/vEAAABVH9gb8sAAAQDAEcwRQIgcNnUW7FqOWkVowww2G/O zjAbhTe2n0FcvqTyodFe8iQCIQCqtoUKXnA6dij5iXFqQG+em7WnNMBM+j1a6Ftz mITajwB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABVH9gcVMA AAQDAEYwRAIgAw6ZIDFZUaqpskL83rK4d/1zM4t6edLR9Es2mZ3D1jgCIHetrJbc 96a/kzfnZnghlgJPFfrAK2p8F1pQOD48KHKtMA0GCSqGSIb3DQEBCwUAA4IBAQA/ rk+bBcnMKwMzBnnKVPzIrsOMNn8sVo/+lDzal77wfhDI/ygptdJ0SxNSm7b3729X ckECbDgmyMQRvS1IswJYiFYyb17YBOITatW9vZm1Lx054mRmrxZh7bA7rZ/BQ0y0 y0Y6C7nhycmHXMe+aw/CjIMcCTYXhoQC4tnjU/asIpK5+EGqFmbm2RyDQhmwpItV eZHB4BQiGGtIVAIu05LbROr2erBvxJjwwuTUePW2nfWswrYVWR1SZdT09L2LdBwn IO9sOhFESaHD+7hXgKPeO2Cpu0TrbhBgLdYesPf8b3hNKVyrdjHFVbmbHxvqrw88 Qkv6SGf8VFrgk5jAXlls -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KLZ8EaLqfD2qRX5Ahty KI4ibt3flFJqc+TcMP1QK1k99XYG32Rq8L9RiaINEvFs4kL1+n3m1lyAVthcJTSv BxszwFZtbwGE+P1AbSyp+TAccN8DyW3wqLE5cTsx2tfHeiym3b45N9HA5HArvcg3 HfWHA5zn+RAAJh7QeaUGrMV5NnRg2juL3BCPx5wW3iImXLZB1XAVgyeMLpjHcRnq LRoI+2AmUMQK6CqoU16CZFDlj8KSQZh7xePJjwF3fVBF+dz+SWVdxfNUgLhKY4mz e4OnFe1x1Oy9+cMmzHZDyBAtbDcWw2+qEfLD2P8RaJoEhahIk+NL7ZkUJm0DRcod bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92642002584780497488947965296708661679 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Christchurch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Christchurch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Te Runanga o Ngai Tahu' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ngaitahu.iwi.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26337872413104208100625764575127423193075768616043150178296745452204661531824011318768848518123234399358374877844155685540784991213660621682703722120487053815629378560916204504945651714258439103847428407894091083318794401235677131857812910364148874069094100997159907141805598334760501866460480013586205225277272182410083412064018584169194304823463943710374967249483868510560168507571470564861179443394595196153727134531359327658572713506436394950305398266455901763155656967588382754970977963428826597047130569008069898010231138382295801512164438959142296460583583243816957633761514783228787256224027016384065871420783 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ngaitahu.iwi.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.ngaitahu.iwi.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaitahu.iwi.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaitahu.iwi.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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