oasc18.247realmedia.com

- AppNexus, Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 16:23:51:da:7e:2d:7d:9b:dc:17:4b:69:c9:e9:7f:8e was issued on by GeoTrust Inc..

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

AppNexus, Inc.

Organization: AppNexus, Inc.
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:23:51:da:7e:2d:7d:9b:dc:17:4b:69:c9:e9:7f:8e
Serial Number (int): 29426406483284298136099312450981691278
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 86:96:2d:b9:db:ee:e3:91:f7:f4:44:0b:eb:94:32:64:09:41:30:e0
Fingerprint (sha256): 19:7b:90:ea:09:7e:d2:86:b9:f2:c7:61:a3:76:90:a2:96:b0:e6:8e:7d:fa:ee:60:d5:ad:d7:35:af:15:a9:c5

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate oasc18.247realmedia.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oasc18.247realmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oascentral.investingmediasolutions.com
oascentral.americanrifleman.org
oascentral.americanhunter.org
oascentral.ssusa.org
oascentral.ibj.com
oascentral.americas1stfreedom.org
oascentral.nrapublications.org
pub.weatherbug.com
twc.timewarnercable.com
oascentral.sermoncentral.com
oas.monster.com
oascentral.ashrae.org
ad.directrev.com
oascentral.churchjobfinder.com
oascentral.nrafamilyinsights.org
oascentral.sears.com
oascentral.shootingillustrated.com
oascentral.dominionenterprises.com
oascentral.ghmedia.com
oascentral.vindy.com
oasc18.247realmedia.com

Other certificates including the domain name 247realmedia.com

(limited to 100 certificates)
openadstream16.247realmedia.com
download.247realmedia.com
openadstream12.247realmedia.com
openadstream15.247realmedia.com
oas-eu-admin.247realmedia.com
247realmedia.com
oasc17w.247realmedia.com
network-ca.247realmedia.com
*.247realmedia.com
decidedna2.247realmedia.com
openadstream14.247realmedia.com
openadstream15.247realmedia.com
oasc17y.247realmedia.com
eu.services.247realmedia.com
openadstream17.247realmedia.com
oasrtx.247realmedia.com
openadstream10.247realmedia.com
oasc18.247realmedia.com
oasc-eu1.247realmedia.com
reports.dna.247realmedia.com
oasc17.247realmedia.com
oasc18.247realmedia.com
bifrost-ash.247realmedia.com
*.247realmedia.com
oasc17.247realmedia.com
oasc-eu1.247realmedia.com
openadstream10.247realmedia.com
delivery.uat.247realmedia.com
oasc18.247realmedia.com
*.247realmedia.com
openadstream-en1.247realmedia.com
oas-eu.247realmedia.com
reports.dna.247realmedia.com
sophos-secure.247realmedia.com
oasc-eu1b.247realmedia.com
*.247realmedia.com
openadstream15.247realmedia.com
bifrost-pa.247realmedia.com
oasc-eu1b.247realmedia.com
oasc18w.247realmedia.com
oasc17.247realmedia.com
*.247realmedia.com
oasc-eu1b.247realmedia.com
services.247realmedia.com
oasc18.247realmedia.com
oasc17w.247realmedia.com
oasc18.247realmedia.com
jira.247realmedia.com
oasc-eu1.247realmedia.com
oasc06.247realmedia.com
bifrost-lon.247realmedia.com
oasc17.247realmedia.com
oasc17.247realmedia.com
oasc11.247realmedia.com
oasrtx.247realmedia.com
oasc09.247realmedia.com
oasc17.247realmedia.com
openadstream16.247realmedia.com
fileshare.247realmedia.com
openadstream18.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasrtx-eu.247realmedia.com
decidedna1.247realmedia.com
library.247realmedia.com
oasc-eu1.247realmedia.com
network3reporting.247realmedia.com
oasc08.247realmedia.com
oasn03.247realmedia.com
oasc05.247realmedia.com
oasc17y.247realmedia.com
oasc18x.247realmedia.com
oasc17y.247realmedia.com
openadstream18.247realmedia.com
oasrtx.247realmedia.com
oasn04.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasc-eu1.247realmedia.com
fileshare.247realmedia.com
oasc17y.247realmedia.com
oasc-training7.247realmedia.com
services.247realmedia.com
responsecollector.247realmedia.com
*.247realmedia.com
247connect.247realmedia.com
oasc-eu1.247realmedia.com
training7.247realmedia.com
*.247realmedia.com
openadstream8.247realmedia.com
fileshare.247realmedia.com
fileshare.247realmedia.com
networkadmin.realmedia.com
training7.247realmedia.com
openadstream10.247realmedia.com
oasc16.247realmedia.com
oasc17w.247realmedia.com
eu.services.247realmedia.com
api.dna.247realmedia.com
eu-tools.247realmedia.com

Certificate

The complete raw certificate details for oasc18.247realmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iidIyKtvKQt/r78E/HT
QtUC4Ziaarn85Ko8xnFsSE1e/0hASoM3k80pyarLdxZLNddVrElL9H6/1QBaz43L
5Gd48JJWM25ZJ4a9tNeai4sexaqFvFiyFXlzHzxvSDkzKRFA8T9LApkvhFIMucg/
FlkgJD2EoTC1xKaUSNf+mcJFNL3+yBvAMNKhwM0Y44jrk72iaCOPzwoy/mIrmdya
fTujFV7OuqOekoSzjhsiVTsHnPK6jIRvTMu4PXUZPKSI9+BsgDIZq+GhbnJdqaDf
BJ27tuz/SxhIx0GqXXIXz7ypADSCN0tYxhDRJfnUV/ofesybFoB2j/4hi+R5ukb1
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29426406483284298136099312450981691278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AppNexus, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oasc18.247realmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26530071462651896204649204790279896383284667717319636656425236919735574152852769274505435057389610307030713408102588795545809595562317046180268150435516635276703053116750949952257308125652245620799797515704243964471201199848531925307852806438451826190559662234917115591233255938446487612239240625290062265954558673525680384370226436545034394911960630463896887545439876646335849163806050351005689932521860764419623383352563947371928715182653270161447413461424684084365349924048590115755786106603209623909823374659656777822564179314511295438489968312466193879876059761142739379251272594564063011693281560963854568453547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (581 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.investingmediasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.americanrifleman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.americanhunter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.ssusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.ibj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.americas1stfreedom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.nrapublications.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pub.weatherbug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc.timewarnercable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.sermoncentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oas.monster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.ashrae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.directrev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.churchjobfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.nrafamilyinsights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.sears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.shootingillustrated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.dominionenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.ghmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oascentral.vindy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasc18.247realmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080d0d7384280e5e0d09161013e4441447e38c8da4b36a3edad689914de4344bc3d7e11ea92bf46ea0ea4d6ad5c6e9330fc12a3319fe9ed3e98b88a9d3fc5eda1b931628fc93c294a31b81679596ba3205da28a03fc74ebd30d1d53e7bdf4e75da4e9276474c68ecaf7502635bf2974e2cb3b5e67939ce5eaf38800fdfbafb8cbefe9b5627777bcf7da53f68c6a3e04e04be72c10ef468d0be68496358c6f3222abaeeab0105bc1a8a8154989e7437da43206844e1b12a80d89853feec7fa8788e4a98154410c2b7fdd6920c5975677f6ccd9cdeaaf611becb11a5c76b078ce74071cb9500d11fce6f339ffd1aa50a16c5c9e90ffb5e725611fddd5e36d39573c