www.itopia.com
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 17:91:ca:ec:1b:b2:f4:b2:6a:6b:bc:fd:0d:43:70:21 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.itopia.com
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 17:91:ca:ec:1b:b2:f4:b2:6a:6b:bc:fd:0d:43:70:21Serial Number (int): 31329242700699345696412210523279683617
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 0a:d5:23:26:02:78:9f:7d:d5:3b:cc:e4:25:a5:2c:dc:a9:f8:6a:17
Fingerprint (sha256): 18:71:81:25:47:ec:2d:59:f7:a7:07:09:30:d0:27:de:cc:a5:2b:86:58:75:81:8a:21:30:eb:68:b8:cb:1f:5f
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate www.itopia.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.itopia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.itopia.com
itopia.com
itopia.com
Other certificates including the domain name itopia.com
(limited to 100 certificates)
notsu.io
sa469gl.wpc.edgecastcdn.net
cure-ai.jp
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
mbele.co
admin.dennysautomotive.com
heragenda.com
www.itopia.com
home2home.sg
sa469gl.wpc.edgecastcdn.net
en.riws.status.ricoh.com
osama.online
launch.sb-fm.co.uk
www.microweb.tools
sa469gl.wpc.edgecastcdn.net
imap.galar.com
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
mantracourt.status.ubidots.com
lovelouie.live
toddbuck.dev
sassouni.com
staging.santrenkoding.org
alexloran.com
www.stachetracker.com
kipperman.co
activesf.com
internal.bfitec.com
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
rfrd.strollhere.com
en.riws.status.ricoh.com
randombrewing.co
refuges.mtldigital.ca
sa469gl.wpc.edgecastcdn.net
sa469gl.wpc.edgecastcdn.net
www.landbox.io
en.riws.status.ricoh.com
cas-services-beta.itopia.com
okaidosushi.es
itrext.com
en.riws.status.ricoh.com
rdp.cas.itopia.com
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
en.riws.status.ricoh.com
en.riws.status.ricoh.com
cas-auth.itopia.com
mantracourt.status.ubidots.com
sa469gl.wpc.edgecastcdn.net
prod-aws.admin.playbook.vc
en.riws.status.ricoh.com
www.grasroot.com
mantracourt.status.ubidots.com
en.riws.status.ricoh.com
theadamspages.com
en.riws.status.ricoh.com
cas-services-dev.itopia.com
en.riws.status.ricoh.com
share.alhussaintoys.net
www.itopia.com
admin.rapidaoapp.com.br
en.riws.status.ricoh.com
customer.5f.app
vere.alec.casa
heragenda.com
en.riws.status.ricoh.com
alexloran.com
mantracourt.status.ubidots.com
dev.nativ.ai
mantracourt.status.ubidots.com
mantracourt.status.ubidots.com
cas-logs.itopia.com
howdyudo.com
dev.hemisphere.digital
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
cas-rest-dev.itopia.com
en.riws.status.ricoh.com
yamazan.com
en.riws.status.ricoh.com
appducks.com
en.riws.status.ricoh.com
en.riws.status.ricoh.com
get.itopia.com
mantracourt.status.ubidots.com
sa469gl.wpc.edgecastcdn.net
www.caterscatering.com
vago.studio
simulcast.phospec.io
sa469gl.wpc.edgecastcdn.net
mantracourt.status.ubidots.com
bigmedia.kz
mantracourt.status.ubidots.com
mantracourt.status.ubidots.com
www.deacon.co.mz
gdgsearch.com
sa469gl.wpc.edgecastcdn.net
www.inspirally.com
sa469gl.wpc.edgecastcdn.net
cure-ai.jp
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
mbele.co
admin.dennysautomotive.com
heragenda.com
www.itopia.com
home2home.sg
sa469gl.wpc.edgecastcdn.net
en.riws.status.ricoh.com
osama.online
launch.sb-fm.co.uk
www.microweb.tools
sa469gl.wpc.edgecastcdn.net
imap.galar.com
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
mantracourt.status.ubidots.com
lovelouie.live
toddbuck.dev
sassouni.com
staging.santrenkoding.org
alexloran.com
www.stachetracker.com
kipperman.co
activesf.com
internal.bfitec.com
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
rfrd.strollhere.com
en.riws.status.ricoh.com
randombrewing.co
refuges.mtldigital.ca
sa469gl.wpc.edgecastcdn.net
sa469gl.wpc.edgecastcdn.net
www.landbox.io
en.riws.status.ricoh.com
cas-services-beta.itopia.com
okaidosushi.es
itrext.com
en.riws.status.ricoh.com
rdp.cas.itopia.com
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
en.riws.status.ricoh.com
en.riws.status.ricoh.com
cas-auth.itopia.com
mantracourt.status.ubidots.com
sa469gl.wpc.edgecastcdn.net
prod-aws.admin.playbook.vc
en.riws.status.ricoh.com
www.grasroot.com
mantracourt.status.ubidots.com
en.riws.status.ricoh.com
theadamspages.com
en.riws.status.ricoh.com
cas-services-dev.itopia.com
en.riws.status.ricoh.com
share.alhussaintoys.net
www.itopia.com
admin.rapidaoapp.com.br
en.riws.status.ricoh.com
customer.5f.app
vere.alec.casa
heragenda.com
en.riws.status.ricoh.com
alexloran.com
mantracourt.status.ubidots.com
dev.nativ.ai
mantracourt.status.ubidots.com
mantracourt.status.ubidots.com
cas-logs.itopia.com
howdyudo.com
dev.hemisphere.digital
en.riws.status.ricoh.com
sa469gl.wpc.edgecastcdn.net
cas-rest-dev.itopia.com
en.riws.status.ricoh.com
yamazan.com
en.riws.status.ricoh.com
appducks.com
en.riws.status.ricoh.com
en.riws.status.ricoh.com
get.itopia.com
mantracourt.status.ubidots.com
sa469gl.wpc.edgecastcdn.net
www.caterscatering.com
vago.studio
simulcast.phospec.io
sa469gl.wpc.edgecastcdn.net
mantracourt.status.ubidots.com
bigmedia.kz
mantracourt.status.ubidots.com
mantracourt.status.ubidots.com
www.deacon.co.mz
gdgsearch.com
sa469gl.wpc.edgecastcdn.net
www.inspirally.com
Certificate
The complete raw certificate details for www.itopia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEeTCCA2GgAwIBAgIQF5HK7Buy9LJqa7z9DUNwITANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDMzMTAwMDAwMFoXDTE4MDQzMDIzNTk1 OVowGTEXMBUGA1UEAwwOd3d3Lml0b3BpYS5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS4MRMC6QKnWPs7Aon7b1UUheiEEo+99/8yK1xr4dmxYMM N2sk7Kq8cPRxLVJPSgX74UDdc3S3cSa6+zzxTBrWUuEmefw/hB9Hfe85MuUz4Gwm tRSg0miX4OytL1iSrwXMgGRB8wcziXZgOjWshZk69oLeWtY44GrQthN9O8auCzpJ 0wRumgsYE1spE0apereR8jUU2qlnSyid9xSEJUXmRwI012e45VaLkZMc/9Et0jC/ OR+Lf3rU3cybk/PHC1WMp1DL3FTvU71VySc5awSSJHp5qFSIiyDDMo2/Ixcr4gaM bbMAh00fnLwLEFHBCEO7V2+6cE+6Y8Ji+mBfKHDXAgMBAAGjggGSMIIBjjAlBgNV HREEHjAcgg53d3cuaXRvcGlhLmNvbYIKaXRvcGlhLmNvbTAJBgNVHRMEAjAAMCsG A1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3JsMG8GA1Ud IARoMGYwZAYGZ4EMAQIBMFowKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlk c3NsLmNvbS9sZWdhbDAsBggrBgEFBQcCAjAgDB5odHRwczovL3d3dy5yYXBpZHNz bC5jb20vbGVnYWwwHwYDVR0jBBgwFoAUl8InUJ7CyewMiDLIfK3ipgFP2m8wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggr BgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9ncC5zeW1jZC5jb20wJgYI KwYBBQUHMAKGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3J0MBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh7TssB9Ij1DRCMu9vZC3G8t02 xSaR9NiLG1stwOQrhZkHImV4mF/We4xLmlWSSV2Eu9YgUBTeJumtAGZcYsweVyzM 4JqMpRSVKJK83qFLVARrbA671wKXJlSPTRzpeOA1VUIxR90HkhroOFXrYYmC7dTx cS4kGrE1nBx0foxxpZz37jNwd367DF/lj5YlPEWJTxHUSaf7mEsUlKWaw1fMfEJK t4hXsYca8iOqIDc89Yl3YCcbEYxC62DFr9PaOg8tMXBoL/EOR/uKBpH8/c6QWiYI oB0RpqWAwltBKty/zefupdGO7zNfhsRVdP4Z8StLS2kl3Vix36kPjQ4OHLV1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uDETAukCp1j7OwKJ+29 VFIXohBKPvff/Mitca+HZsWDDDdrJOyqvHD0cS1ST0oF++FA3XN0t3Emuvs88Uwa 1lLhJnn8P4QfR33vOTLlM+BsJrUUoNJol+DsrS9Ykq8FzIBkQfMHM4l2YDo1rIWZ OvaC3lrWOOBq0LYTfTvGrgs6SdMEbpoLGBNbKRNGqXq3kfI1FNqpZ0sonfcUhCVF 5kcCNNdnuOVWi5GTHP/RLdIwvzkfi3961N3Mm5PzxwtVjKdQy9xU71O9VcknOWsE kiR6eahUiIsgwzKNvyMXK+IGjG2zAIdNH5y8CxBRwQhDu1dvunBPumPCYvpgXyhw 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 31329242700699345696412210523279683617 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.itopia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26620880675672096932823065393509980765673389357585739757781570219165756789228646178208449363485811006922942312056421308399258062088545452234014206577100179928686376421709229692731774052578882834442184606403629298727999789684862810906563965899494096285026342027949644677846144429687379531735483297823817761445134545721585315763383054544982661436275042332667971550724282442030194939320367079413534336195486716667399948492488244992076356648072933213880913959423663958585100527023294844266366050369294680530818854382462324151061671304549027051649629979325989756997484453270308842513241397364219134093130188911086018261207 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itopia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itopia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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