secure.analytics.voyages-sncf.com

- VSC Technologies -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 03:68:fb:4b:7e:1f:8e:93:a9:dc:f1:b7:61:83:3a:41 was issued on by GeoTrust Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

VSC Technologies

Organization: VSC Technologies
Organization unit: Exploitation Applicative
State / Province: PARIS
Locality: PARIS
Country: FR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:fb:4b:7e:1f:8e:93:a9:dc:f1:b7:61:83:3a:41
Serial Number (int): 4532779726598336069029725220815190593
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): b6:99:fa:62:df:ee:58:ac:54:15:1b:e3:f2:be:64:96:73:1a:6a:6e
Fingerprint (sha256): 17:5b:c9:f1:65:2c:97:39:a9:58:c2:11:71:23:4c:92:eb:4a:18:a5:33:d1:00:6c:d9:bf:59:94:e5:d0:3e:34

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate secure.analytics.voyages-sncf.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.analytics.voyages-sncf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

medias.cdn.vsct.fr
nl-statics.vsct.fr
medias.sncf.com
widgetonyva.oui.sncf
vignette.oui.sncf
analytics.oui.sncf
wblt.oui.sncf
vignette.voyages-sncf.com
widgetonyva.voyages-sncf.com
help.ru.voyages-sncf.com
test-help.ru.voyages-sncf.com
analytics.voyages-sncf.com
secure.analytics.voyages-sncf.com

Other certificates including the domain name voyages-sncf.com

(limited to 100 certificates)
*.carmen.sncf.fr
secure.uk.voyages-sncf.com
www.voyages-sncf.com
akiovsc.voyages-sncf.com
offre-connect.voyages-sncf.com
cinemagraph.voyages-sncf.com
www.expedia.com
acquia-sites.com
jeu.voyages-sncf.com
acquia-sites.com
acquia-sites.com
ctrmgr.voyages-sncf.com
sstats.voyages-sncf.com
recette.bagages.voyages-sncf.com
owa.voyages-sncf.com
jeu.voyages-sncf.com
t.secure.be.voyages-sncf.com
voxpopsoralhistory.com
t.voyages-sncf.com
tgvpop.voyages-sncf.com
acquia-sites.com
admins.voyages-sncf.com
jeu.voyages-sncf.com
acquia-sites.com
rec2akiodv.voyages-sncf.com
*.voyages-sncf.com
acquia-sites.com
secure.analytics.voyages-sncf.com
formulaire.vsct.fr
offre-connect.voyages-sncf.com
www.programmefid.com
acquia-sites.com
adhesion.monforfaitannuel.voyages-sncf.com
spectacles.voyages-sncf.com
*.api.voyages-sncf.com
abonnement.voyages-sncf.com
acquia-sites.com
secure.ru.voyages-sncf.com
www.org.destinations.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
acquia-sites.com
secure.voyages-sncf.com
*.api.voyages-sncf.com
jeu.fr.voyages-sncf.com
www.expedia.com
client.es.voyages-sncf.com
abonnement.voyages-sncf.com
www.expedia.com
formulaire.vsct.fr
www.expedia.com
bagages.voyages-sncf.com
interrail.voyages-sncf.com
voyages-sncf.com
jeu.fr.voyages-sncf.com
jeu.eu.voyages-sncf.com
secure.analytics.voyages-sncf.com
jeu.fr.voyages-sncf.com
croisieres.voyages-sncf.com
t.voyages-sncf.com
ouiwork.open.voyages-sncf.com
kli.uk.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
tls.automattic.com
admins.voyages-sncf.com
t.voyages-sncf.com
www.expedia.com
secure.analytics.voyages-sncf.com
cinemagraph.voyages-sncf.com
cinemagraph.voyages-sncf.com
billetprime.voyages-sncf.com
ouiwork.open.voyages-sncf.com
ouiwork.open.voyages-sncf.com
*.preprod.voyages-sncf.com
acquia-sites.com
integration.adhesion.monforfaitannuel.voyages-sncf.com
jeu.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
cinemagraph.voyages-sncf.com
abonnement.voyages-sncf.com
juniorcie.voyages-sncf.com
juniorcie.voyages-sncf.com
adhesion.monforfaitannuel.voyages-sncf.com
acquia-sites.com
*.voyages-sncf.com
secure.en.voyages-sncf.com
kli.uk.voyages-sncf.com
sstats.voyages-sncf.com
facebook.voyages-sncf.com
ventes.juniorcie.voyages-sncf.com
acquia-sites.com
www.expedia.com
acces2.voyages-sncf.com
www.voyages-sncf.com
cinemagraph.voyages-sncf.com
offre-connect.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
secure.ru.voyages-sncf.com
t.voyages-sncf.com

Certificate

The complete raw certificate details for secure.analytics.voyages-sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHuDCCBqCgAwIBAgIQA2j7S34fjpOp3PG3YYM6QTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwOTEyMDAwMDAwWhcNMTkwODAyMjM1
OTU5WjCBlzELMAkGA1UEBhMCRlIxDjAMBgNVBAgMBVBBUklTMQ4wDAYDVQQHDAVQ
QVJJUzEZMBcGA1UECgwQVlNDIFRlY2hub2xvZ2llczEhMB8GA1UECwwYRXhwbG9p
dGF0aW9uIEFwcGxpY2F0aXZlMSowKAYDVQQDDCFzZWN1cmUuYW5hbHl0aWNzLnZv
eWFnZXMtc25jZi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm
SlxRs/fB2e1cOKBknMSGSsZJBChnlVTThNIC7RTTspDbkrgQ2eIZ2WlyzWJleVqh
Utk9j9Mfx6A4/dmx0K03M3LDqDI04mG9+8LGXQMp5inLwAw5JuIY+Gw5ZT/Rh92O
xvZT4EEYtSTPj4YkoyMo9eFX7PLRA7vSncH8mBcuCLBJFP1HOiLL77iB86GAbMd6
3dAKZs2Z4p3R0k+9Mow/A7NPVBJywPgFQtFqpNoSdDcBMUIPq8ZnbkN2Mi9DAW6Z
YmSTPFZMnwk/QIx+t3mncvguJEvCsdoFBICPUxwFuvs2ITyxIw+6w5EUCx/qyu4P
5h1hrKpVXQ/JYMh8pnvPAgMBAAGjggRQMIIETDCCAUMGA1UdEQSCATowggE2ghJt
ZWRpYXMuY2RuLnZzY3QuZnKCEm5sLXN0YXRpY3MudnNjdC5mcoIPbWVkaWFzLnNu
Y2YuY29tghR3aWRnZXRvbnl2YS5vdWkuc25jZoIRdmlnbmV0dGUub3VpLnNuY2aC
EmFuYWx5dGljcy5vdWkuc25jZoINd2JsdC5vdWkuc25jZoIZdmlnbmV0dGUudm95
YWdlcy1zbmNmLmNvbYIcd2lkZ2V0b255dmEudm95YWdlcy1zbmNmLmNvbYIYaGVs
cC5ydS52b3lhZ2VzLXNuY2YuY29tgh10ZXN0LWhlbHAucnUudm95YWdlcy1zbmNm
LmNvbYIaYW5hbHl0aWNzLnZveWFnZXMtc25jZi5jb22CIXNlY3VyZS5hbmFseXRp
Y3Mudm95YWdlcy1zbmNmLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAr
BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYD
VR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3
Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEF
BQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9z
aXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1Ud
IwQYMBaAFNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggr
BgEFBQcwAYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDov
L2duLnN5bWNiLmNvbS9nbi5jcnQwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3
AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABXnVxM/kAAAQDAEgw
RgIhAPEVN04sHvG9hVFz2Q9LmZ+fKH4vpzJejZOLrolK+T3bAiEAqQDzPyoPA4LA
bVeTjTRT8P8Xs7ISNRWkS3gG+W+eUYgAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb
37jjd80OyA3cEAAAAV51cTQ4AAAEAwBHMEUCIQDAtF0nw3s1OGDJt4273Fcc3ikk
pKJ6HrbNRc3FiJpySwIgXtQzsqILZaZTdJtbk8pFWIyYKFhs6/IzeLXkI2tCwwwA
dwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAV51cTX/AAAEAwBI
MEYCIQCxWQ/VkxUzkHcAvX5TAnH9f1s7PwOBP5Jfxq89zArPsgIhAMbMNG6zQxLd
yw0TY2V576/qmvhl/fDrJ7s3IejP5zxyMA0GCSqGSIb3DQEBCwUAA4IBAQCSfTFB
+xNK4iZ1AELSrtCHQcIvCf94RHm1PGNZOcysg3gL1F1elqqpqnW07/0K0uU7ktbS
exqHsTvvP2WOA4ne4NQ6xNfML37kIBsUwByQoeM7l56GtSoy9Mg+Z4iqjzn/HHpH
26Dv0O1YhSZYKXd57g/v8GDrsl9rJaBGPJR1Ml6VbpgV7D3Zq7hU+TdqaPhYojmD
kna7462ppXddId4xL6BHXu15GorHtqBanOLDNYl9rwACQEpmLJKwmpLCtPIXpbwl
mMxlY+nlNdT/oRHp+QhOiJwAP28Xw8tgDipVmLCezO3ItLGfwkv9WlO4BiOLS0hE
UqWQW4Ot7bRFkWJN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkpcUbP3wdntXDigZJzE
hkrGSQQoZ5VU04TSAu0U07KQ25K4ENniGdlpcs1iZXlaoVLZPY/TH8egOP3ZsdCt
NzNyw6gyNOJhvfvCxl0DKeYpy8AMOSbiGPhsOWU/0Yfdjsb2U+BBGLUkz4+GJKMj
KPXhV+zy0QO70p3B/JgXLgiwSRT9Rzoiy++4gfOhgGzHet3QCmbNmeKd0dJPvTKM
PwOzT1QScsD4BULRaqTaEnQ3ATFCD6vGZ25DdjIvQwFumWJkkzxWTJ8JP0CMfrd5
p3L4LiRLwrHaBQSAj1McBbr7NiE8sSMPusORFAsf6sruD+YdYayqVV0PyWDIfKZ7
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4532779726598336069029725220815190593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VSC Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Exploitation Applicative'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure.analytics.voyages-sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20992227213577529558227674936390052216215318972343182531763210087405262255391337231961914721330622079994007232212387512101325103072862097594449759544938488469757201636140802158150073767882360374297805450507411646524519471749878957092206773254237070631493618861668365115349592589697366891918750468872198342712814552185154731715963254267229887404710489594877951290748757416945836617506638300917102254964491236254046342158262937113866617511484105806629817044621434902992967722092218595162827861864430096514830875329953285605480779267586870470554735471749810084474503722050754370826074603456588256254869286039773237377999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (314 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medias.cdn.vsct.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl-statics.vsct.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medias.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgetonyva.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vignette.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wblt.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vignette.voyages-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgetonyva.voyages-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ru.voyages-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-help.ru.voyages-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.voyages-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.analytics.voyages-sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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